|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
 |
|
How to configure LDAPS for authentication |
« View previous topic :: View next topic » |
Author |
Message
|
tiger74 |
Posted: Mon Nov 24, 2008 11:46 pm Post subject: How to configure LDAPS for authentication |
|
|
Newbie
Joined: 04 Oct 2004 Posts: 4
|
Hi, I am using WMB V6.1.0.2 running on AIX. I have created a security profile to use LDAP (Active Directory) to authenticate incoming messages. It worked fine with plain LDAP, however if I used LDAPS to connect then it kept failing to establish the SSL connection with the LDAP server. I have imported the LDAP server certificates to broker's JVM trust store at "/opt/IBM/mqsi/jre15/ppc64/lib/security/cacerts" and also created a new keystore file, imported certificates to it and defined it as broker's truststore using "mqsichangeproperties". Despite all the effort, it still seemed broker couldn't locate the certificate to establish the connection. Can someone here (especially guys from hursley) shed some light on this issue? BTW there is absolutely no documentation on how to make LDAPS work.  |
|
Back to top |
|
 |
tiger74 |
Posted: Tue Nov 25, 2008 3:17 pm Post subject: Any help, pls... |
|
|
Newbie
Joined: 04 Oct 2004 Posts: 4
|
|
Back to top |
|
 |
tiger74 |
Posted: Sun Nov 30, 2008 3:28 pm Post subject: |
|
|
Newbie
Joined: 04 Oct 2004 Posts: 4
|
Knock, knock....  |
|
Back to top |
|
 |
mqjeff |
Posted: Sun Nov 30, 2008 10:16 pm Post subject: |
|
|
Grand Master
Joined: 25 Jun 2008 Posts: 17447
|
I think you're going to have to accept that nobody is either willing to answer, or knows how to answer.
And open a PMR, after consulting the documentation to ensure that LDAPS is supported at 6.1.0.2. |
|
Back to top |
|
 |
Vitor |
Posted: Mon Dec 01, 2008 12:05 am Post subject: |
|
|
 Grand High Poobah
Joined: 11 Nov 2005 Posts: 26093 Location: Texas, USA
|
mqjeff wrote: |
I think you're going to have to accept that nobody is either willing to answer, or knows how to answer. |
For myself, I'm in the "don't know" camp.
Though I am interested by the question - do please post your solution when you find it, for the benefit of the wider community. _________________ Honesty is the best policy.
Insanity is the best defence. |
|
Back to top |
|
 |
|
|
 |
|
Page 1 of 1 |
|
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
|
|
|