Re: [ovirt-users] Can't perform search after setting up an Active Directory

you use '_ldaps._tcp' in ovirt not '_ldap._tcp' as in dig. And '_ldaps' is what's missing in your DNS.

Oh ! you're right, I didn't even see that ! I was confused by all this. I'll ask someone to add these SRV records.

Unfortunatelly using '_ldaps._tcp' is not any standart. But that's what usually people do if they can't use startTLS.

So, in a way we could say that Ovirt expect users to use Start_TLS with AD, but not ldaps ? Should I open a RFE about this ?

This message doesn't say much. Can you please send full Java exception stack trace?

Yes, here is the full log when trying to use StartTLS : https://bpaste.net/show/5719b47c45e5 Please tell me if it gives you see anything in it. (and again, thanks for all your help)