Reference Manual

10.4.0 HotFix 1
- 10.5.6
- 10.5.5
- 10.5.4
- 10.5.3
- 10.5.2
- 10.5.1
- 10.5
- 10.4.1
- 10.4.0

Back Next

Example: Level 2 LDAP Security - Secure OpenLDAP Configuration with Client Authentication

The following example shows DBMOVER statements for secure OpenLDAP configuration with client authentication:

SECURITY=(1,N,LDAP,OPEN_LDAP)
LDAP_HOST=(myldapserver,636) 
LDAP_BIND_DN="uid=hmiller,ou=People,dc=example,dc=com"
LDAP_BIND_EPWD=47D95F9932FB5F67
LDAP_BASE=("ou=People,dc=example,dc=com") 
LDAP_OPENSSL=(CAPATH=/pwx_store,
              CERTFILE=/pwx_store/mycert.pem,KEYFILE=/pwx_store/mykey.pem,
              PASS=clientauth
              )

The

/pwx_store

directory serves as a truststore and keystore. The directory has entries for server and client authentication.

For server authentication, the truststore must contain Certificate Authority certificates, in PEM format, that are sufficient to validate the LDAP server.

For client authentication, the following entries must be present:

The certificate file and key file that identify the client (PowerExchange) to the LDAP server. The LDAP server truststore must be configured with Certificate Authority certificates, in PEM format, that are sufficient to validate this client certificate.

The private key associated with the client certificate. The key file is encrypted. Accessing this key requires the password

clientauth

, as indicated by the PASS parameter.

The LDAP_HOST statement directs the encrypted traffic to the secure port 636 of the LDAP server.

Rename Saved Search

Table of Contents

Reference Manual

Reference Manual

Example: Level 2 LDAP Security - Secure OpenLDAP Configuration with Client Authentication

Example: Level 2 LDAP Security - Secure OpenLDAP Configuration with Client Authentication