AdminUI Administrators LDAP self-signed certificate

Products

• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign On Agents (SiteMinder)
• CA Single Sign On Federation (SiteMinder)
• CA Single Sign On SOA Security Manager (SiteMinder)
• SITEMINDER

Issue/Introduction

 

We're running an AdminUI with an external LDAP Admin UI Store and when
we try to configure the External Admin UI Store, the AdminUI reports
error :

    Error: A connection to the LDAP directory '10.0.0.1:1111' could not
    be established for the user 'uid=siteminder,dc=mydomain,dc=com'.

In the AdminUI, when we look under Trusted Certificates / Installed
Certificates, we see no certificate and the certificate list is
empty.

The external LDAP Admin Store run on Oracle Unified Directory 11gR2
(11.1.2.3.0).

How can we fix this ?

 

Environment

 

  AdminUI 12.8SP3 on RedHat 7;
   External Admin Store on Oracle Unified Directory 11gR2;   

 

Cause

 

The LDAP Server version is "Oracle Unified Directory 11gR2
(11.1.2.3.0)" and it goes out of support scope. That means it has
never been tested on our side an no specific development has been done
to insure the functionality between the AdminUI and this Store.

  2.3 Database and Directory Systems

  | Data Store System        | Version | Admin UI |
  |                          |         | Store    |
  |--------------------------+---------+----------|
  | Oracle Unified Directory | 11gR2   |          |
  | (OUD)                    | 12x     |          |
  
  p.6

  https://ftpdocs.broadcom.com/phpdocs/7/5262/5262-12-8-platform-support-matrix.pdf

 

Resolution

 

Use legacy administrators and leaving the external LDAP Admin UI Store or use
a supported LDAP Admin UI Store.