LDAP SYNC (SSL) / one automation 12.3

[marc broussard]

In our One Automation We were using LDAP users with a synchronization.

With LDAP servers without SSL it was working.

We had this parameter :

Then it was mad a change : the LDAP servers became LDAP servers with SSL.

And now  it doesn't work anymore:

The users have a acces denied.

The users are created but we do not manage to get all their properties:

We tried to change some parameters in LDAPSync.xml, or in UC_LDAP vara.

With this parameter :

Our one automation's environment has 3 servers:

Web / engine / BD  (windows 2019).

With one automation 12.3 (and 2.3.1 for the LDAP sync jar file)

We imported certificates in our java store (we imported the root and server certificates in the keystore of the engine) : no result.

Marc Broussard

EQUANS Ineo 

[Richard Beck]

Try putting the cert from your ldap server into the Java cacerts keystore

Sent via the Samsung Galaxy S22+ 5G, an AT&T 5G smartphone
Get Outlook for Android<https: aka.ms aab9ysg>

[SARAH RIDOLFI]

When switching to secure LDAP, we found we had to update a parameter in the LDAP Sync defaults.xml file called "updateDN" to "true" so when it pulled new users in, it filled in that DN field on their user objec.t Then we had to also set the USE_DISTINGUISHED_NAME to Y.

For the certs, we had to import them into the java keystore and then also point the JWP_KEYSTORE_PATH in system settings to that keystore path (it had previously been blank).