LDAP Connector

LDAP Connector

Configuring TLS authentication

Configuring TLS authentication

Before you can work with LDAP Connector over a secure connection, you need to configure TLS authentication.
The Secure Agent establishes a secure connection with the LDAP directory server over TLS. You can use one-way SSL or two-way SSL.

Use One-Way SSL

To use one-way SSL, you must perform any one of the following steps:
- Copy the server certificate to the following directory:
<Secure Agent installation directory>\jdk\jre\lib\security\cacerts
. Then, restart the Secure Agent.
- Navigate to the
<Secure Agent installation directory>\apps\Data_Integration_Server\ext
directory and perform the following steps:
  1. Create the following directory structures:
    • deploy_to_main\bin\rdtm
    • deploy_to_main\tomcat
  2. Copy the truststore file that contains the server certificate to the following directories:
    • <Secure Agent installation directory>\apps\Data_Integration_Server\ext\deploy_to_main\tomcat
    • <Secure Agent installation directory>\apps\Data_Integration_Server\ext\deploy_to_main\bin\rdtm
  3. Specify the name of the truststore file and password in the connection properties.
  4. Restart the Secure Agent.

Use Two-Way SSL

To use two-way SSL, you must first perform any one of the steps for one-way SSL and then perform the following steps:
  1. Copy the keystore file to the following directories:
    • <Secure Agent installation directory>\apps\Data_Integration_Server\ext\deploy_to_main\tomcat
    • <Secure Agent installation directory>\apps\Data_Integration_Server\ext\deploy_to_main\bin\rdtm
  2. Specify the name of the keystore file and password in the connection properties.
  3. Restart the Secure Agent.
The Secure Agent checks for the certificate in the keystore of the tomcat directory and then in the Java cacerts file. If you do not specify a value of the truststore file in the connection properties, the Secure Agent searches the certificate in the Java cacerts file.
For more information about the trust certificates, contact your LDAP system administrator.

0 COMMENTS

We’d like to hear from you!