How to test connection to secure LDAP.

Products

• CA Automic Operations Manager

Issue/Introduction

Attached is a test program that will check to connection to secure LDAP.

Environment

Release : 12.1, 12.2, 12.3

Component : AUTOMATION ENGINE

Cause

Configuration.

Resolution

The command line to call this tool:

<Path that contains the tool>\java -jar -Djavax.net.ssl.trustStore=<Path to the Java keystore containing the certificates> sLDAPCheck.jar ldaps://ldap-server:636

 

For example:

C:\Automic\Automation.Platform\AutomationEngine\bin>java -jar -Djavax.net.ssl.trustStore=C:\Progra~1\AdoptOpenJDK\jdk-11.0.9.11-hotspot\lib\security\cacerts sLDAPCheck.jar ldaps://ldap-server:636

The output of this command looks as follows:

{supportedsaslmechanisms=supportedSASLMechanisms: GSSAPI, GSS-SPNEGO, EXTERNAL, DIGEST-MD5, rootdomainnamingcontext=rootDomainNamingContext: DC=Company,DC=net, defaultnamingcontext=defaultNamingContext: DC=Company,DC=net, servername=serverName: CN=ldap-server,CN=Servers,CN=AM-USA-NV-Las-Vegas-SuperNap-CoLo-LVN,CN=Sites,CN=Configuration,DC=Company,DC=net, ldapservicename=ldapServiceName: Company.net:[email protected], dnshostname=dnsHostName: ldap-server.Company.net, supportedcapabilities=supportedcapabilities: 1.2.840.113556.1.4.800, 1.2.840.113556.1.4.1670, 1.2.840.113556.1.4.1791, 1.2.840.113556.1.4.1935, 1.2.840.113556.1.4.2080, 1.2.840.113556.1.4.2237, namingcontexts=namingContexts: DC=Company,DC=net, CN=Configuration,DC=Company,DC=net, CN=Schema,CN=Configuration,DC=Company,DC=net}