The following example shows DBMOVER statements for secure LDAP configuration with client authentication:
directory is an NSS certificate database that is configured as a truststore and keystore. The database has entries for server and client authentication.
For server authentication, the truststore must contain certificates that are sufficient to authenticate the LDAP server.
For client authentication, the following entries must be present:
A certificate (with alias name
, as indicated by the KEYNAME parameter) that identifies the client (PowerExchange) to the LDAP server. The LDAP server truststore must be configured with certificates that are sufficient to authenticate this client certificate.
The private key associated with the
certificate. Accessing this key requires the password
, as indicated by the PASS parameter.
The LDAP_HOST statement directs the encrypted traffic to the secure port 636 of the LDAP server.