# AD over SSL using Net/LDAP? **URL:** \ **Category:** Ruby\ **Created:** [May 11, 2007, 1:02am UTC](https://www.ruby-forum.com/t/ad-over-ssl-using-net-ldap/103857 "2007-05-11T01:02:46Z")\ **Posts on this page:** 2\ **Page:** 1
**Author:** ![Amos](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/a/ebca7d/32.png) [@Amos](https://www.ruby-forum.com/u/Amos)\ **Post date:** [May 11, 2007, 1:02am UTC](https://www.ruby-forum.com/t/ad-over-ssl-using-net-ldap/103857/1 "2007-05-11T01:02:46Z")
Has anybody gotten Net/LDAP (0.4) to work with AD over SSL? I can connect without SSL, but not able to connect with SSL even though nmap shows that port 636 is listening. In fact I can connect using openssl, which reveals it’s a self-signed cert. ---
**Author:** ![Amos](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/a/ebca7d/32.png) [@Amos](https://www.ruby-forum.com/u/Amos)\ **Post date:** [May 14, 2007, 1:33pm UTC](https://www.ruby-forum.com/t/ad-over-ssl-using-net-ldap/103857/2 "2007-05-14T13:33:57Z")
On 5/10/07, Amos [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid) wrote: > Has anybody gotten Net/LDAP (0.4) to work with AD over SSL? I can > connect without SSL, but not able to connect with SSL even though nmap > shows that port 636 is listening. In fact I can connect using openssl, > which reveals it’s a self-signed cert. At least one of my commercial clients has done exactly this. Are you sending the correct encryption parameters to Net::LDAP#new/#open? Also, if you get the head revision of Net::LDAP from rubyforge, you’ll find that Kouhei S. has added support for the LDAP STARTTLS verb (documentation is in the rdoc). This of course eliminates the need for a separate port.