Product SiteDocumentation Site

1.5. Changing Directory Server Port Numbers

The standard and secure LDAP port numbers used by Directory Server can be changed through the Directory Server Console or by changing the value of the nsslapd-port or nsslapd-secureport attribute under the cn=config entry in the dse.ldif.

NOTE

Modifying the standard or secure port numbers for a Configuration Directory Server, which maintains the o=NetscapeRoot subtree should be done through the Directory Server Console.
Changing the configuration directory or user directory port or secure port numbers has the following repercussions:
To modify a Directory Server LDAP or LDAPS port for either a user or a configuration directory, do the following:
  1. In the Directory Server Console, select the Configuration tab, and then select the top entry in the navigation tree in the left pane.
  2. Select the Settings tab in the right pane.
  3. Enter the port number for the server to use for non-SSL communications in the Port field. The default value is 389.
  4. Enter the port number for the server to use for SSL communications in the Encrypted Port field.
    The encrypted port number must not be the same port number used for normal LDAP communications. The default value is 636.
  5. Click Save.
  6. The Console returns a warning, You are about to change the port number for the Configuration Directory. This will affect all Administration Servers that use this directory and you'll need to update them with the new port number. Are you sure you want to change the port number? Click Yes.
  7. Then a dialog appears, reading that the changes will not take effect until the server is restarted. Click OK.

    NOTE

    Do not restart the Directory Server at this point. If you do, you will not be able to make the necessary changes to the Administration Server through the Console.
  8. Open the Administration Server Console.
  9. In the Configuration tab, select the Configuration DS tab.
  10. In the LDAP Port field, type in the new LDAP port number for your Directory Server instance.
  11. Check the Secure Connection box if this is a secure port.

    NOTE

    If you try to save these changes at this step, you will get a warning box that reads, Invalid LDAP Host/LDAP Port, can not connect. Click OK, and ignore this warning.
  12. In the Tasks tab of the Directory Server Console, click Restart Directory Server. A dialog to confirm that you want to restart the server. Click Yes.
  13. Open the Configuration DS tab of the Administration Server Console and select Save.
    A dialog will appear, reading The Directory Server setting has been modified. You must shutdown and restart your Administration Server and all the servers in the Server Group for the changes to take effect. Click OK.
  14. In the Tasks tab of the Administration Server Console, click Restart Admin Server. A dialog opens reading that the Administration Server has been successfully restarted. Click Close.

    NOTE

    You must close and reopen the Console before you can do anything else in the Console. Refresh may not update the Console, and, if you try to do anything, you will get a warning that reads Unable to contact LDAP server.