How to setup LDAPS over SSL on UVMS?

Products

• CA Automic Dollar Universe

Issue/Introduction

How to set up LDAPS over SSL on UVMS?

Environment

Release : 6.10

Component : DOLLAR UNIVERSE

Resolution

SSL Configuration

To use an LDAP directory in SSL mode, UVMS is not required to be configured in SSL mode.

The unissl command, located in the univiewer_server\<nodename>\app\bin\ folder enables the SSL communication configuration between UVMS and LDAP. The UVMS SSL architecture is described in section "SSL Communications".

The following steps must be followed:

Create a keystore / trustore (if necessary) with a unissl genstore command. Refer to section "Generate the keystore/truststore".

Add the LDAP certificate to the UVMS-approved certificates list with a unissl import command (refer to section "Import a certificate").

The uniinitcertificate command is obsolete since version 4.0.09 of UVMS. The following applies to any UVMS version prior to 4.0.09: in the case, UVMS was communicating with LDAP in SSL mode, the configuration will have to be modified at the end of the update.