Change in Clarity from LDAP to LDAP over SSL

Products

• Clarity PPM SaaS
• Clarity PPM On Premise

Issue/Introduction

When changing the LDAP authentication to SSL, changing the port does not work

Resolution

You have your Clarity bind to Active Directory (LDAP port 389) and you need to change this configuration to Active Directory over SSL (DLAPS port 636, LDS, LDAP SSL).

You must obtain a certificate generated from the LDAP SSL server. You then put the certificate on the Clarity CSA server, which will allow you to change the configuration under the CSA.

Here are the steps and an example:

1) Under where the Java is installed in the bin directory you will install the certificate:

CD X:\CA\Java\jre1.8.0_171\lib\security\
keytool -import -keystore cacerts -alas <adcert> -file <certificate.cer> -keyalg RSA -trustcacerts -storepass changeit


2) Log into the Clarity CSA and in the Server name, in the Security TAB you will need to change under the LDAP Server, the URL syntax:
Example:
LDAP Server
               URL     ldap://LDAP_server_name:389

Change this to 
LDAP Server
               URL      ldaps ://LDAP_server_name:636

Press [Save] to save all the configuration.

3) Restart the Clarity services in order to take action.
Example:
> Open a CMD
> Service stop start all