Page tree
Skip to end of metadata
Go to start of metadata

This page describes a Microsoft tool which can be helpful in troubleshooting LDAP problems on the dashboard.

Observed in CAST AIP
7.3.x (tick)
7.2.x (tick)
7.0.x (tick)
Observed on RDBMS
Oracle Server (tick)
Microsoft SQL Server (tick)
CSS2 (tick)
CSS1 (tick)
Step by Step scenario

LDAP issues can be difficult to debug, especially if the user has not entered in the proper information in the CED or AAD configuration files.

ADexplorer can be used so that you can confirm the following:

  • the user can connect to an LDAP server
  • information can be retrieved from the LDAP server
  • content of the information on the LDAP server to compare with the information in the dashboard configuration files 

ADExplorer is a Microsoft tool which basically provides a browser or way of exploring Active Directory information.

It can be downloaded from Microsoft on the page below.

Once you have it downloaded, then you just need to run 'ADExplorer.exe' and it will bring up a GUI to allow you to connect to your LDAP server:

You also have an option to save the connection information for future use. You should not put:


in the connection string, just put the ldap server and port like:


Once you have connected, then you can browse the LDAP information as needed to see what is stored on the LDAP server. 

This is an example of what you may see:

You can then browse further to see the specific values set by expanding the areas in the browser.  You may need assistance in finding specific entries from your LDAP administrator. 


Here's one example of how you can use this to verify LDAP data.  You are trying to verify that a particular user has been setup in LDAP for the database c701_central with the proxy user VPAD.  You navigate in the browser to verify that there first is an entry for VPAD.c701_central in the LDAP data, and then you can see the specific users that are part of the group.  Here's an example of the screen you may then see:



Related Pages

Microsoft page for ADexplorer: 




  • No labels