Table of Contents

Search

  1. Preface
  2. Understanding PowerExchange for LDAP
  3. PowerExchange for LDAP Configuration
  4. LDAP Connections
  5. LDAP Data Objects
  6. LDAP Mappings
  7. LDAP Lookup
  8. LDAP Run-Time Processing
  9. Appendix A: Data Type Reference

PowerExchange for LDAP User Guide

PowerExchange for LDAP User Guide

Configuring TLS Authentication

Configuring TLS Authentication

Before you can work with PowerExchange for LDAP over a secure connection, you need to configure TLS authentication.
The Data Integration Service establishes a secure connection with the LDAP directory server over TLS. You can use one-way SSL or two-way SSL communication.

Use One-Way SSL Communication

You must configure both the Informatica Client and Server for one-way SSL communication.
  1. Perform one the following steps for the Informatica Server:
    • Copy the truststore file that has the server certificate in the path specified in INFA _TRUSTSTORE.
    • Add the server certificate to the Java cacerts file in following directory:
      <Informatica Installation Directory>\java\jre\lib\security
    • Copy the truststore file that has the server certificate file to the following directory:
      <Informatica Installation Directory>\tomcat\bin
  2. Perform one of the following steps for the Informatica Client:
    • Copy the trustore file that has the server certificate in the path specified in INFA _TRUSTSTORE.
    • Add the server certificate to the Java cacerts file in the following directory:
      <Informatica Client Installation Directory>\java\jre\lib\security
    • Copy the truststore file that has the server certificate file to the following directory:
      <Informatica Client Installation Directory>Clients\DeveloperClient
  3. Specify the name of the truststore file and password in the LDAP connection properties.
  4. Restart the Data Integration Service.

Use Two-Way SSL Communication

To use two-way SSL communication, you must first perform the steps for one-way SSL, and then perform the following steps:
  1. Copy the keystore file to either the current working directory or the INFA_TRUSTORE path:
    • Current working directory is
      <Informatica Installation Directory>\tomcat\bin
      for the server and
      <Informatica Installation Directory>\client\DeveloperClient
      for the client.
    • Path specified in INFA _TRUSTSTORE.
  2. Specify the name of the keystore file and password in the connection properties.
  3. Restart the Data Integration Service.
Based on the truststore or keystore file name that you specify in the connection properties, the Data Integration Service checks for the trust certificate in the INFA _TRUSTSTORE path, followed by the current working directory, and finally the Java cacerts file. If you do not specify a value for the truststore file in the connection properties, the Data Integration Service searches the certificate only in the Java cacerts file.
For two-way SSL communication, ensure that the trustore and keystore files are available in the same location. For more information about the trust certificates, contact your LDAP system administrator.

0 COMMENTS

We’d like to hear from you!