using secure LDAP or LDAPS protocol for authentication is it supported for CLM 4.x?
Does CLM 4.0.6 support secure LDAP or te LDAPS protocol. Although my jts /setup works fine with Tomcat and Windows AD LDAP authentication using ldap://dchost:389 format. the same does not work for the ldaps://myserver:636. Is it not supported or something else needs to be done?
The forum below doesnot solve this problem. So two things here. Is it supported when using Tomcat. If yes then does simply changing the protocol to ldaps with secure port will it do the trick? I think we need to have a certificate installed somewhere.
The forum below doesnot solve this problem. So two things here. Is it supported when using Tomcat. If yes then does simply changing the protocol to ldaps with secure port will it do the trick? I think we need to have a certificate installed somewhere.
2 answers
Hi Anup
Yes, you can configure Lightweight Directory Access Protocol over SSL (LDAPS) for IBM Rational Team Concert on Apache Tomcat.
Yes, you can configure Lightweight Directory Access Protocol over SSL (LDAPS) for IBM Rational Team Concert on Apache Tomcat.
There are 2 steps required to configure Lightweight Directory Access Protocol over SSL (LDAPS) for Rational Team Concert running on Apache Tomcat
- Import the certificate from your LDAP server into Apache Tomcat's trust store
- Rerun the steps documented in Managing users with Lightweight Directory Access Protocol (LDAP) (http://pic.dhe.ibm.com/infocenter/clmhelp/v3r0m1/index.jsp?topic=%2Fcom.ibm.jazz.install.doc%2Ftopics%2Fc_plan_identity_management.html) to configure your Rational Team Concert to connect to LDAP through the secure port.
For Part 1, follow the below steps:
Below are steps to import a certificate into Apache Tomcat's trust store:
-
Stop the Apache Tomcat server
-
Obtain the certificate from the LDAPS server (an LDAP Administrator should be able to provide the certificate file)
In this example, the certificate file in the *.der format
-
Navigate to "..\\JazzTeamServer\server\jre\bin" directory
-
Double click on ikeyman.exe to launch
-
Click on the Open button and browse to the "..\\JazzTeamServer\server\jre\lib\security" directory
-
Select to view all file types. You should see a file called 'cacerts' in the list
-
Open the 'cacerts' file
-
IBM Key Management will prompt for a password
Enter 'changeit' and click OK. A list of 'Signer Certificates' will display (see below)
Note: 'changeit' is a default password. If you have changed it, you will need to enter your own password
-
Click on the 'Add' button to add a certificate from file
-
Browse to the certificate file and click on OK to add
-
This will open a prompt for a certificate name. Enter a name and click OK
-
Exit from ikeyman by selecting "Key Database File > Exit" from the main menu
- Start the server
Details from the technote:
http://www-01.ibm.com/support/docview.wss?uid=swg21508904
If this answers your question please mark it as accepted.
The same document for Liberty configuration: https://jazz.net/wiki/bin/view/Deployment/ConfigureLDAPs