Notes on Configuring LDAP/S when using SSH on an NX Master
Frequently Asked Questions
Written by Ernesto Hernandez
Updated at January 27th, 2026
Notes for configuring LDAP/S when using SSH on an NX master:
- You cannot use the IP address as part of the URI in the LDAP setup. You must use the hostname of the domain controller that is doing the user verification.
- Specify the port along with the connection type, i.e. LDAP/389 vs LDAPS/636.
- When configuring LDAPS you must make sure that the hostname you are using is the hostname that is presented by the Trusted CA you add to the master. To check this, go to the Details tab of the certificate and look for the Issuer field. The hostname you are connecting to should be the CN used in the Issuer field.
Load the Trusted CA (.pem file) via Netlinx Studio's Certificate Manager (v4.4.1831 or later). DO NOT create a 'certs' folder on the master and load the .pem file there.