RE: [ActiveDir] LDAP Ping

Fri, 04 Aug 2006 18:30:24 -0700

Another quick way to check all your domain controllers is to fire up the resource kit tool LockoutStatus.exe and plug in your ID. I often use it to get a quick view of what’s up and what’s down if we’re having network issues. It’s also handy to check connectivity from a specific location. The price is right too :)

 

I’ve seen this issue on Windows 2003 systems but only during a shutdown. The systems will hang indefinitely. I actually let one run for 3 days one time just to see what would happen. The thing I’ve noticed is that all the machines I’ve seen these issues on were hardened per the DISA STIG but maybe that’s just coincidence.

 

Mike

 

 

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bahta, Nathaniel V CTR USAF NASIC/SCNA
Sent: Friday, August 04, 2006 9:36 AM
To: [email protected]
Subject: RE: [ActiveDir] LDAP Ping

 

Its not for troubleshooting, its so we can tell when the DC is hung, you cant tell when its hung because our monitoring software only pings by ip and it responds.  If it replies, I know it can serve ldap queries, and then i can rpc ping it and make sure that authentication requests will be answered.  Its just to do a quick check of whats going on first thing in the morning.

 

Nate

 

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]
Sent: Friday, August 04, 2006 9:14 AM
To: [email protected]
Subject: RE: [ActiveDir] LDAP Ping

So you ldap ping the DC and it replies or it does not. What does this tell you? How does it help troubleshoot the issue?

 

I'd suggest more detailed tools are needed such as network / packet sniffers etc. They should be able to build a picture of the situation better than a ping which offers little more than a 'yes/no' response.

 

My 2 penneth :)

 

neil

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bahta, Nathaniel V CTR USAF NASIC/SCNA
Sent: 04 August 2006 13:54
To: [email protected]
Subject: [ActiveDir] LDAP Ping

Hey all,

 

Does anyone know of a command line utility that allows you to test ldap connections?  We have a dc that hangs, but remains pingable and I would like to do ldap pings to it to as well as rpc pings.  I know about the rpc ping utility, but I wanted to test for ldap connectivity as well.  Does anyone know of a utility like this?

 

 

Thanks,

 

Nate

PLEASE READ: The information contained in this email is confidential and

intended for the named recipient(s) only. If you are not an intended

recipient of this email please notify the sender immediately and delete your

copy from your system. You must not copy, distribute or take any further

action in reliance on it. Email is not a secure method of communication and

Nomura International plc ('NIplc') will not, to the extent permitted by law,

accept responsibility or liability for (a) the accuracy or completeness of,

or (b) the presence of any virus, worm or similar malicious or disabling

code in, this message or any attachment(s) to it. If verification of this

email is sought then please request a hard copy. Unless otherwise stated

this email: (1) is not, and should not be treated or relied upon as,

investment research; (2) contains views or opinions that are solely those of

the author and do not necessarily represent those of NIplc; (3) is intended

for informational purposes only and is not a recommendation, solicitation or

offer to buy or sell securities or related financial instruments. NIplc

does not provide investment services to private customers. Authorised and

regulated by the Financial Services Authority. Registered in England

no. 1550505 VAT No. 447 2492 35. Registered Office: 1 St Martin's-le-Grand,

London, EC1A 4NP. A member of the Nomura group of companies.

Reply via email to