Administration of LDAP Connector
As a user, you can use LDAP Connector after the organization administrator performs the following tasks:
- •Install LDAP Connector.
- •Optional. Configure TLS authentication to establish a one-way or two-way secure connection with the LDAP directory server.
Configuring TLS Authentication
Before you can work with LDAP Connector over a secure connection, you need to configure TLS authentication.
The Secure Agent establishes a secure connection with the LDAP directory server over TLS. You can use one-way SSL or two-way SSL.
Use One-Way SSL
To use one-way SSL, perform one the following steps:
- 1. Copy the server certificate to the following directory: <Secure Agent installation directory>\jre\lib\security\cacerts
- 2. Navigate to <Secure Agent installation directory>\apps\Data_Integration_Server\ext.
- 3. Create the following directory structures:
- - deploy_to_main\bin\rdtm
- - deploy_to_main\tomcat
- 4. Copy the truststore file that contains the server certificate to the following directories:
- - <Secure Agent installation directory>\apps\Data_Integration_Server\ext\deploy_to_main\tomcat
- - <Secure Agent installation directory>\apps\Data_Integration_Server\ext\deploy_to_main\bin\rdtm
- 5. Specify the name of the truststore file and password in the connection properties.
- 6. Restart the Secure Agent.
Use Two-Way SSL
To use two-way SSL, you must first perform the steps for one-way SSL, and then perform the following steps:
- 1. Copy the keystore file to the following directories:
- - <Secure Agent installation directory>\apps\Data_Integration_Server\ext\deploy_to_main\tomcat
- - <Secure Agent installation directory>\apps\Data_Integration_Server\ext\deploy_to_main\bin\rdtm
- 2. Specify the name of the keystore file and password in the connection properties.
- 3. Restart the Secure Agent.
The Secure Agent checks for the certificate in the keystore of the tomcat directory and then in the Java cacerts file. If you do not specify a value of the truststore file in the connection properties, the Secure Agent searches the certificate in the Java cacerts file.
For more information about the trust certificates, contact your LDAP system administrator.