How to verify secure LDAPS connection status in policy server logs

Products

• SITEMINDER

Issue/Introduction

You want to confirm that your SiteMinder Policy Server is using an LDAPS connection to your User Directory by reviewing the system logs. However, the logs do not provide definitive confirmation of whether the connection is encrypted, preventing you from validating your security configuration.

Environment

All SiteMinder Policy Servers (R12.8.x and R12.9.0)

Cause

This behavior is a product limitation in the current version of the SiteMinder Policy Server. There are no configuration changes, debug logging parameters, or environment settings that provide a definitive confirmation in the logs of whether a specific LDAP connection is encrypted via LDAPS.

Resolution

Because this feature is not currently available, we encourage you to voice your support for this enhancement through the Broadcom Community portal. If you would like to see this functionality added in a future release, please visit and upvote the following community idea:

https://community.broadcom.com/idea/clarity-on-ldap-connection-security-status-in-policy-server-logs

 

Additional Information

This KB will be updated or retired once this IDEA is added to product functionality.