App Layering - Setting a certificate for LDAP

book

Article ID: CTX261855

calendar_today

Updated On:

Description

Connection to LDAP server or synchronizing LDAP entries may fail with the following errors:

"There are certificate errors found when connecting to the server"
"One or more problems with the service certificate were found. You can enable them to be ignored, or you must update the certificate on the server."

Instructions

When configuring LDAP in the ELM, there is an option to ignore certificate errors. This will still allow the connection to be encrypted and will skip using a provided certificate. However if you want to provide your own certificate and not ignore the SSL errors, then please do the following.

To copy any files into the ELM, please use SCP or an equivalent tool like WinSCP, FileZilla, etc. You will need the root password for this. On Azure ELM's root is disabled and you will need the administrator user name and password instead. These were set during deployment of the ELM.

1.    Place the root cert as a Base64 PEM in /etc/pki/ca-trust/source/anchors/

2.    Run: update-ca-trust

3.    Run: cert-sync /etc/pki/tls/certs/ca-bundle.crt

4.    Reboot the App Layering Appliance

Was this article helpful?

thumb_up Yes

thumb_down No

Welcome to "KB Articles"