How To: Use the PortQuery Tool for LDAP

Version Affected: All

 

Overview

This article explains how to use Microsoft's PortQuery tool to confirm whether a specific TCP or UDP port — such as an LDAP port used by a SecureAuth Datastore connection — is open and listening on a domain controller, and to view basic information about the responding service.

Use the PortQuery Tool

1. Download PortQryUI.exe from Microsoft's download page, then install and unzip it.
2. Run PortQryUI.exe.
3. In Enter destination IP or FQDN to query, enter the IP address or fully qualified domain name of the server to test.
4. Select Manually input query ports, enter the port to query (for example, 389 for LDAP), and choose whether to test TCP, UDP, or Both.
5. Click Query. The Query Result box shows whether the port is listening and, for some ports such as 389, additional information about the responding domain controller.

Special Considerations

Querying port 636 (LDAPS) typically does not return the same level of detail as port 389, but the tool still reports whether the port is listening.

SecureAuth Knowledge Base Articles provide information based on specific use cases and may not apply to all appliances or configurations. Be advised that these instructions could cause harm to the environment if not followed correctly or if they do not apply to the current use case.

Customers are responsible for their own due diligence prior to utilizing this information and agree that SecureAuth is not liable for any issues caused by misconfiguration directly or indirectly related to SecureAuth products.