Administration of LDAP Connector As a user, you can use LDAP Connector after the organization administrator performs the following tasks:
• Install LDAP Connector.• Optional. Configure TLS authentication to establish a one-way or two-way secure connection with the LDAP directory server.Configuring TLS authentication Before you can work with LDAP Connector over a secure connection, you need to configure TLS authentication.
The Secure Agent establishes a secure connection with the LDAP directory server over TLS. You can use one-way SSL or two-way SSL.
Use One-Way SSL To use one-way SSL, you must perform any one of the following steps:
1 Copy the server certificate to either of the following directories available within your Secure Agent installation:- <Secure Agent installation directory>/jdk/jre/lib/security/cacerts - <Secure Agent installation directory>/jdk8/jre/lib/security/cacerts 2 Restart the Secure Agent.Navigate to the <Secure Agent installation directory>\apps\Data_Integration_Server\ext directory and perform the following steps:
1 Create the following directory structures:- deploy_to_main\bin\rdtm - deploy_to_main\tomcat 2 Copy the truststore file that contains the server certificate to the following directories:- <Secure Agent installation directory>\apps\Data_Integration_Server\ext\deploy_to_main\tomcat - <Secure Agent installation directory>\apps\Data_Integration_Server\ext\deploy_to_main\bin\rdtm 3 Specify the name of the truststore file and password in the connection properties.4 Restart the Secure Agent.Use Two-Way SSL To use two-way SSL, you must first perform any one of the steps for one-way SSL and then perform the following steps:
1 Copy the keystore file to the following directories:- <Secure Agent installation directory>\apps\Data_Integration_Server\ext\deploy_to_main\tomcat - <Secure Agent installation directory>\apps\Data_Integration_Server\ext\deploy_to_main\bin\rdtm 2 Specify the name of the keystore file and password in the connection properties.3 Restart the Secure Agent.The Secure Agent checks for the certificate in the keystore of the tomcat directory and then in the Java cacerts file. If you do not specify a value of the truststore file in the connection properties, the Secure Agent searches the certificate in the Java cacerts file.
For more information about the trust certificates, contact your LDAP system administrator.