XADM: Changing the Port Used by the Exchange Server 5.5 Directory for LDAP over SSL

• Microsoft Exchange Server, version 5.5

SYMPTOMS

When Exchange Server is installed on a Windows 2000 domain controller, the Exchange Server directory service has no way to use a non-default port (636) for LDAP Secure Sockets Layer (SSL) communication. The following error may be found in the event log:

Event ID: 1309
Type: Error
Source: MSExchangeDS
Description: Register LDAP SSL protocol failed with error 10048. The LDAP SSL server is not available. Make sure port number 636 is not used by another application.

CAUSE

This problem occurs when Exchange Server is running on a system that already has a Directory service using this port. This will occur when Exchange Server is installed on a Windows 2000 domain controller.

RESOLUTION

To resolve this problem, obtain the latest service pack for Exchange Server version 5.5. For additional information, please see the following article in the Microsoft Knowledge Base:

Q191014 XGEN: How to Obtain the Latest Exchange Server 5.5 Service Pack

WORKAROUND

If you set the Incoming-Msg-Size-Limit attribute to, for example 637, using the Exchange Server Administrator program in raw mode, you can effectively change the port used by the Exchange Server LDAP SSL service for listening. To do so:

WARNING: Using the raw mode of the Exchange Server Administrator program (admin /r) incorrectly can cause serious problems that may require you to reinstall Microsoft Windows NT Server and/or Microsoft Exchange Server. Microsoft cannot guarantee that problems resulting from the incorrect use of raw mode can be solved. Use raw mode at your own risk.

1. Start the Microsoft Exchange Server Administrator program in raw mode by typing the following at a command prompt:




c:\exchsrvr\bin\admin /r

2. Select the Protocols container of the Site or Server depending on the scope of this setting.



3. Select the LDAP component.



4. On the File menu, click Raw Properties.



5. In the List Attributes of Type drop-down box, select All.



6. In the Object Attributes list, scroll down to the Incoming-Msg-Size-Limit attribute, and select it.



7. In the Edit Value text box, type the port you want to use.



8. Click the Set button. After doing this, make sure the Edit Value and Attribute Value are the same.



9. Click OK to close the dialog box.



10. Stop and restart the Exchange Server Directory service.

STATUS

Microsoft has confirmed this to be a problem in Microsoft Exchange Server version 5.5. This problem was first corrected in Exchange Server 5.5 Service Pack 3.

Additional query words:

Keywords : exc55 EXC55SP3Fix
Version : winnt:5.5
Platform : winnt
Issue type : kbbug