Configuring an LDAP Provider to use SSL

If your LDAP server uses a secure connection, and its SSL certificate is signed by a nonstandard certificate authority, for example it is self-signed, use the keytool utility (keytool.exe) to import the certificate into the truststore.

  1. Run the following console command: keytool.exe -import -keystore SUP_HOME\Servers\UnwiredServer\Repository\Security\truststore.jks -file <LDAP server cert file path> -alias ldapcert -storepass changeit.
  2. Restart Sybase Unwired Platform services.
  3. Log in to Sybase Control Centerfor Sybase Unwired Platform.
  4. In the navigation pane of Sybase Control Center, expand the Security folder and select the desired security configuration in which to add the LDAP provider.
  5. In the administration pane, click the Authentication tab.
  6. Add an LDAPLoginModule, configuring the ProviderURL, Security Protocol, ServerType, Bind DN, Bind Password, Search Base, and other properties determined by you and the LDAP administrator. Choose one of the two methods below to secure a connection to the LDAP server:
    1. Use ldaps:// instead of ldap:// in the ProviderURL.
    2. Use ssl in the Security Protocol.
  7. In the General tab, select Validate then Apply.
  8. Click OK.