It's all about the answers!

Ask a question

What is the CLM 5.0.2 configuration for LDAP / LDAPS in a Windows server environment?


Dennis Kirkpatrick (1517) | asked Nov 01 '16, 4:38 p.m.

Our network folks have had a lot of problems with IBM products specifically and using ldap / ldaps in our environment.

The network folks validated the following information as being correct for ldaps configuration.

ldaps://myserver.com:636 and cn=users,dc=myserver,dc=com

I would like to be able to use this feature but it does not work.

Suggestions

Dennis

2 answers



permanent link
Ian Wark (79713553) | answered Nov 02 '16, 12:16 a.m.
The way you set up LDAP in CLM depends on some things like your application server. There are some jazz.net articles and deployment wiki topics that may get you started. You may want to explain a bit more about what you have done and what specifically is not working, since this is a pretty big topic.

Configuring CLM on WebSphere Application Server with LDAP
https://jazz.net/wiki/bin/view/Deployment/ConfigureCLMOnWASWithLDAP

Manually configuring the Apache Tomcat web container to use LDAP
http://www.ibm.com/support/knowledgecenter/SSCP65_5.0.2/com.ibm.jazz.install.doc/topics/t_manually_config_tomcat_ldap.html

permanent link
Lewis Tsao (2174963) | answered Nov 02 '16, 12:40 p.m.
1. Depends on whether you want to use ldap or ldaps.
2. Are you using (real) WAS.
3. If using (real) WAS, if you want to use federated repository.

For ldaps with WAS, you need to import the whole SSL certificate chain in to WAS, on top of the user dn and password. Documented somewhere.
If your ldap uses custom attributes for queries, you need to add configuration to WAS. Documented but requires a bit of digging. Don't know if liberty profiles handles that.
If you want to use federation for user lookup (specially if you want file based and ldap) you will need to map attribute to attribute class. Have seen WAS+LDAP experts done that. Have not been able to find documentation.

Your answer


Register or to post your answer.


Dashboards and work items are no longer publicly available, so some links may be invalid. We now provide similar information through other means. Learn more here.