Organization Scanner Failed

[gm446]

Hi All,

i am facing an issue with synchronization of endpoint server to active directory via LDAP. the issue is described on sk161112.

https://support.checkpoint.com/results/sk/sk161112

I wonder if anyone encountered this problem and was able to solve it, according to Checkpoint it is a setting on a Microsoft server but I did not find any relevant information on Microsoft documentation.

would love any help with this.

Best Regards,
Yossi.

[the_rock]

Hey Yossi,

While I never had this issue myself and that SK sadly does not point to any other MS link, I did some research and found below. Not sure if its relevent though : - (

Andy

https://learn.microsoft.com/en-us/troubleshoot/windows-server/identity/enable-ldap-signing-in-window...

[gm446]

Hi Andy,

thank you, it's actually direct me to this and i think this is the configuration:
https://support.savance.com/Knowledgebase/Article/View/421/29/strong-authentication-is-required-for-...

but now i got a request to go in other direction with this and configure LDAPS also on the endpoint server, but when i follow sk84620 i get an "Permission Deny" error while i am trying to add the certificate:

https://support.checkpoint.com/results/sk/sk84620

[the_rock]

For that, maybe better to confirm with TAC

https://help.checkpoint.com

Andy

[gm446 · Accepted solution]

i actually succeed with this commands:

cd $CPDIR/jre_64
./bin/keytool -import -keystore ./lib/security/cacert -file <cert file name> -alias <alias>

Thank you very much