Directory services ports

Overview

Directory services hold identity data. Require LDAPS or StartTLS, limit binds to service accounts, and keep the directory off the public internet.

Ports in this category14
Range coveredAll registry ranges

All Directory services port numbers

Every port below is assigned to this category in the registry or by a widely used convention. Open a port for its check and block commands, risk rating and troubleshooting notes.

PortServiceTransportRiskDescription
191 PROSPERO TCP / UDP Standard/Low Prospero Directory Service
389 LDAP TCP / UDP Medium Lightweight Directory Access Protocol
636 LDAPS TCP / UDP Standard/Low ldap protocol over TLS/SSL (was sldap)
1525 PROSPERO-NP TCP / UDP Standard/Low Prospero Directory Service non-priv
1918 CAN-NDS TCP / UDP Standard/Low IBM Tivole Directory Service - NDS
1919 CAN-DCH TCP / UDP Standard/Low IBM Tivoli Directory Service - DCH
1920 CAN-FERRET TCP / UDP Standard/Low IBM Tivoli Directory Service - FERRET
3269 MSFT-GC-SSL TCP / UDP Standard/Low Microsoft Global Catalog with LDAP/SSL
3437 AUTOCUEDS TCP / UDP Standard/Low Autocue Directory Service
3660 CAN-NDS-SSL TCP / UDP Standard/Low IBM Tivoli Directory Service using SSL
3661 CAN-FERRET-SSL TCP / UDP Standard/Low IBM Tivoli Directory Service using SSL
6301 BMC-CTD-LDAP TCP / UDP Standard/Low BMC CONTROL-D LDAP SERVER IANA assigned this well-formed service name as a replacement for "bmc_ctd_ldap".
9389 ADWS TCP Standard/Low Active Directory Web Services
21846 NETSPEAK-IS TCP / UDP Standard/Low NetSpeak Corp. Directory Services

Search all PortAtlas ports

Primary data: IANA Service Name and Transport Protocol Port Number Registry, plus clearly marked community conventions.

Last reviewed 2026-10-30 · Methodology · About · Privacy