Reference Manual

10.5.2
- 10.5.6
- 10.5.5
- 10.5.4
- 10.5.3
- 10.5.1
- 10.5
- 10.4.1
- 10.4.0 HotFix 1
- 10.4.0

Back Next

Example: Level 3 LDAP Security - Secure OpenLDAP Configuration with SASL External Authentication

The following example shows the DBMOVER statements for a secured LDAP configuration using the SASL EXTERNAL mechanism:

SECURITY=(1,N,LDAP,OPEN_LDAP)
LDAP_HOST=(myldapserver,636)
LDAP_BASE=("ou=People,dc=example,dc=com")
LDAP_OPENSSL=(CAPATH=/pwx_store,
              CERTFILE=/pwx_store/mycert.pem,KEYFILE=/pwx_store/mykey.pem,
              PASS=clientauth
              )
LDAP_SASL_MECH=EXTERNAL

This example uses the trustore and keystore directory,

pwx_store

, which is specified in the CAPATH parameter of the LDAP_OPENSSL statement.

The LDAP_SASL_MECH=EXTERNAL statement indicates that the LDAP server will derive the search user credentials from the client certificate. To derive these credentials, the LDAP server must have the certificate mapping configured.

Rename Saved Search

Table of Contents

Reference Manual

Reference Manual

Example: Level 3 LDAP Security - Secure OpenLDAP Configuration with SASL External Authentication

Example: Level 3 LDAP Security - Secure OpenLDAP Configuration with SASL External Authentication