How & where to find in Config under Network Security to change port # (AD - Basic)

[Nghia_Phan1]

Our Windows AD changed port # from 389 to 636, we must update our OnBase AD - Basic settings as well. But we cannot find any where even to see the port # of 389; so we are able to change to 636. Reading several MRGs, but they are only mentioned about LDAP SSL port # changing from 389 to 636. We know/hear that AD - Basic will be no longer support after v18. We are in v16. How we are going to do with with our Windows AD authentication user to OnBase. Any one has any idea, please help. Thank you.

[AdamShaneHyland]

Hi  Nghia.

Active Directory - Basic will always use non-encrypted (port 389) when binding to objects (users and user groups) in Active Directory.  This method does not have the ability to use encryption when communicating with the Domain Controller.  

The Active Directory - Enhanced method does have the ability to support encrypted bindings with Active Directory when available.  This is enabled within OnBase (Config | Utils | Network Security / Directory Service Authentication | Settings | Active Directory - Enhanced | Edit Domain Settings ...) by enabling the "Use SSL When Available" setting.

My recommendation is to plan a migration to the Active Directory - Enhanced method.

Take care.