LDAP with SSL | Community
Skip to main content
nolanChabert-Od
nolanChabert-Od
Level 2
May 5, 2017
Solved

LDAP with SSL

  • May 5, 2017
  • 4 replies
  • 3412 views

Hi,

I want to setup the LDAP with SSL on Adobe Campaign, but I got this issue:

LDA-340002[ldap_start_tls_s]LDAP error with server XXXX-ldap.lb.dev.XXX:636 (err=-1, Can't contact LDAP server) (TLS error -8179:Peer's Certificate issuer is not recognized.)

so I want to understand where I have to put my certificates or if I have to do another thing.

 

my action:

- change the port in the deployment wizard (to 636)

- change the authentication method to plain text password (TLS/SSL)

- generate my certificates 

- import my certificate in my java cacert

 

Thanks in advance.

Nolan

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
Best answer by nolanChabert-Od

with SSL we have to use the 389 port. it's imposible to use the 636 port with the SSL configuration.

thanks for all your return.

Nolan

4 replies

V
vasudevaraog731
Level 3
May 5, 2017
  • Upload LDAP server pem file to a location /home/<root> in campaign server
  • creates a certificate :openssl x509 -outform der -in ldap.pem -out certificate.der

  • Imports the certificate into JAVA keystore:keytool -import -alias <LDAP Host Name> -keystore cacerts -file certificate.der

  • Restart NL server

nolanChabert-Od
nolanChabert-OdAuthor
Level 2
May 7, 2017

Hi,

thanks for your return, but can I have more details, please.

thanks in advance.

Nolan

nolanChabert-Od
nolanChabert-OdAuthor
Level 2
May 8, 2017

see below my actions:

  1. get the ldap server pem file (ldapCA.pem)
  2. create the certificate with the the ldapCA.pem (openssl x509 -outform der -in ldapCA.pem -out certificateLdap.der)
  3. import this certificate (certificateLdap.der) on my JAVA cacerts (Certificate was added to keystore)
  4. I restarted the nl server

I still got this error... :-(

nolanChabert-Od
nolanChabert-OdAuthorAccepted solution
Level 2
May 14, 2017

with SSL we have to use the 389 port. it's imposible to use the 636 port with the SSL configuration.

thanks for all your return.

Nolan

    Terms & ConditionsAccessibility statement

    Loading footer...