LDAP — ABB (vCenter LDAPS configuration)
One-liner
Connect vCenter to ABB.COM via LDAPS (3269/TCP) using regional load balancers, an approved service account, and ABB PKI certificates.
Reference
Dokument : VMware LDAPs
Identity source — ABB.COM (quick reference)
| Field | Data |
|---|---|
| Identity source name | ABB.COM |
| Base DN for users | DC=abb,DC=com |
| Base DN for groups | DC=abb,DC=com |
| Domain name | abb.com |
| Domain alias | ABB |
| Username | <service-account>@abb.com (read-only; no shared accounts) |
| Password | <service-account password> |
| Connected to | Specific domain controllers (regional LDAPS load balancer) |
| Primary Server URL(s) | ldaps://adcoregc-eur.abb.com:3269 • ldaps://adcoregc-ame.abb.com:3269 • ldaps://adcoregc-apc.abb.com:3269 |
| Secondary Server URL | (optional — add another region for failover) |
| Certificates (for LDAPS) | Import ABB LDAPS CA chain into vCenter’s trust store (see guide). |
Use Active Directory over LDAP (LDAPS) in vCenter, not plain LDAP.
Firewall & DNS prerequisites
- Allow outbound 3269/TCP from the vCenter appliance to the regional LDAPS FQDNs.
- Ensure vCenter can resolve DNS for:
adcoregc-eur.abb.comadcoregc-ame.abb.comadcoregc-apc.abb.com
Connectivity check (from vCenter shell):
curl -v telnet://adcoregc-eur.abb.com:3269
curl -v telnet://adcoregc-ame.abb.com:3269
curl -v telnet://adcoregc-apc.abb.com:3269