ldap over ssl

[xren]

Hi,

our organization ask to secure ldap by over ssl. How can this be done on ebase?

Thanks,
Xiaoli

[Jon]

You need to specify property Ldap.RegistryUrl in the XILdap.properties in <webapp>/WEB-INF/classes on the server, something like this:

Code: Select all

Ldap.RegistryUrl=ldaps://192.168.0.999:636

This property is probably commented in your file. When this property is specified, properties Ldap.RegistryHost and Ldap.RegistryPort are ignored.

I'm hoping this is all you need to do.

[xren]

Hi Jon,

How about the CA certificate for the ldap server?

Thanks,
Xiaoli

[Jon]

I think you will probably need to import the certificate into the server's keystore. We don't have an SSL Ldap system here to test against so I'm not sure about this. Here's a link that describes importing certificates http://dev-docs.verj.io/ufs/doc/web_ser ... c330367033. You would need to start from step 9 of the instructions if you already have a certificate file.