@PCC @james.kleeh - I'm using a regular AD domain server. @PCC - your example relates to spotfire, but as I noted I can LDAP fine to any other LDAP tool including powershell scripted LDAP connection... The server is configured normally and port 389 responds fine using standard LDAP tools. However, Spring LDAP refused to do so over 389 - I had to use the GC port (same server).