Configuring an LDAP Provider to use SSL

If your LDAP server uses a secure connection, and its SSL certificate is signed by a nonstandard certificate authority, for example it is self-signed, use the keytool utility (keytool.exe) to import the certificate into the truststore.

  1. Run the following console command: keytool.exe -import -keystore SMP_HOME\Servers\UnwiredServer\Repository\Security\truststore.jks -file <LDAP server cert file path> -alias ldapcert -storepass changeit.
  2. Restart SAP Mobile Platform services.
  3. Log in to SAP Control Center for SAP Mobile Platform.
  4. In the navigation pane of SAP Control Center, expand the Security folder and select the desired security configuration in which to add the LDAP provider.
  5. In the administration pane, click the Authentication tab.
  6. Add an LDAPLoginModule, configuring the ProviderURL, Security Protocol, ServerType, Bind DN, Bind Password, Search Base, and other properties determined by you and the LDAP administrator. Choose one of the two methods below to secure a connection to the LDAP server:
    1. Use ldaps:// instead of ldap:// in the ProviderURL.
    2. Use ssl in the Security Protocol.
  7. In the General tab, select Validate then Apply.
  8. Click OK.
Parent topic: Stacking Providers and Combining Authentication Results