How to config ldaps

I did following:
1. tick the 'ssl enabled' on AD authentication provider
2. import the Certs into demotrust.jks (or use my own .jks)
3. added -Dweblogic.security.SSL.ignoreHostnameVerification=true into startWeblogic.cmd
I got error of 'certificate chain from ... is incompleted'.
This seems a 2-way-SSL error, but I just want a 1-way-ssl..
Any1 has any idea please?

I think answer to your question is given in the document pointed by james. So you have to have a root CA certificate to communicate to LDAP over ssl (see #2).
The 4 main points to succeed in connecting to the LDAP server over SSL are:
1. The flag in the console "Enable SSL" must be ticked as you will be using SSL to connect to the LDAP server.
2. You must store the root CA of your LDAP server into the trusted keystore of WebLogic. (e.g., keytool -import -keystore myWLStrustedkeytore.jks -alias ca -file getcacert.cer -storepass myWLStrustedkeytoreStorePassPhrase -trustcacerts)
3. <>The hostname you will specify in the WebLogic console for the LDAP configuration needs to match the CN of your LDAP server's certificate
4. <>The port specified in the console for the LDAP Authenticator needs to be the one of the SSL port of the LDAP server

Similar Messages

  • [OBPM 10gR3]How to configer a hybrid directory with Oracle LDAP Server

    Hey, guys,
    Does anyone have experience on configering a hybrid directory with Oracle LDAP Server? How to config the mapping conf file for Oracle LDAP in the directory of \OraBPMwlHome\conf?
    Here is my conf file. But I got some LDAP mapping errors. It's really weird OBPM doesn't support Oracle's self LDAP, at least it does not provide the conf file.
    -----------errors------------
    Exception [javax.naming.OperationNotSupportedException: [LDAP: error code 53 - Function Not Implemented]; remaining name '']. Reason: [LDAP: error code 53 - Function Not Implemented] fuego.directory.DirectoryRuntimeException: Exception [javax.naming.OperationNotSupportedException: [LDAP: error code 53 - Function Not Implemented]; remaining name '']. at fuego.directory.DirectoryRuntimeException.wrapException(DirectoryRuntimeException.java:85) at fuego.directory.hybrid.ldap.JNDIQueryExecutor.select(JNDIQueryExecutor.java:203) at fuego.directory.hybrid.ldap.JNDIQueryExecutor.selectAllFromView(JNDIQueryExecutor.java:84) at fuego.directory.hybrid.ldap.JNDIQueryExecutor.selectAllFromView(JNDIQueryExecutor.java:64) at fuego.directory.hybrid.ldap.Repository.selectAllFromView(Repository.java:54) at fuego.directory.hybrid.ldap.LDAPPollingEventGenerator.buildCurrentProxies(LDAPPollingEventGenerator.java:98) at fuego.directory.provider.notifiers.BasePollingEventGenerator.generateEvents(BasePollingEventGenerator.java:41) at fuego.directory.hybrid.HybridMultipleEventGenerator.generateEvents(HybridMultipleEventGenerator.java:43) at fuego.directory.provider.notifiers.DirectoryNotifier.notifyChanges(DirectoryNotifier.java:403) at fuego.server.service.DirectoryListener.updateEngineFromDirectoryImpl(DirectoryListener.java:309) at fuego.server.service.DirectoryListener$DirectoryPollingItem.execute(DirectoryListener.java:351) at fuego.server.execution.DefaultEngineExecution$AtomicExecutionTA.runTransaction(DefaultEngineExecution.java:304) at fuego.transaction.TransactionAction.startBaseTransaction(TransactionAction.java:470) at fuego.transaction.TransactionAction.startTransaction(TransactionAction.java:551) at fuego.transaction.TransactionAction.start(TransactionAction.java:212) at fuego.server.execution.DefaultEngineExecution.executeImmediate(DefaultEngineExecution.java:123) at fuego.server.execution.DefaultEngineExecution.executeAutomaticWork(DefaultEngineExecution.java:62) at fuego.server.execution.EngineExecution.executeAutomaticWork(EngineExecution.java:42) at fuego.ejbengine.ejb.EngineStartupBean.executeItem(EngineStartupBean.java:192) at fuego.ejbengine.ejb.EngineStartupBean.updateFromDirectory(EngineStartupBean.java:172) at fuego.ejbengine.ejb.engine_startup_bpmengine_wodkyx_ELOImpl.updateFromDirectory(engine_startup_bpmengine_wodkyx_ELOImpl.java:365) at fuego.ejbengine.servlet.SchedulerServlet$DirectoryPollingTask.runImpl(SchedulerServlet.java:269) at fuego.ejbengine.servlet.SchedulerServlet$ScheduledTask.run(SchedulerServlet.java:208) at java.util.TimerThread.mainLoop(Timer.java:512) at java.util.TimerThread.run(Timer.java:462) Caused by: javax.naming.OperationNotSupportedException: [LDAP: error code 53 - Function Not Implemented]; remaining name '' at com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.java:3078) at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2951) at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2758) at com.sun.jndi.ldap.LdapCtx.searchAux(LdapCtx.java:1812) at com.sun.jndi.ldap.LdapCtx.c_search(LdapCtx.java:1735) at com.sun.jndi.toolkit.ctx.ComponentDirContext.p_search(ComponentDirContext.java:368) at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(PartialCompositeDirContext.java:338) at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(PartialCompositeDirContext.java:321) at javax.naming.directory.InitialDirContext.search(InitialDirContext.java:248) at fuego.jndi.FaultTolerantDirContext.search(FaultTolerantDirContext.java:867) at fuego.directory.hybrid.ldap.JNDIQueryExecutor.select(JNDIQueryExecutor.java:190) ... 23 more
    -----------mapping conf file for Oracle LDAP---------
    <?xml version="1.0" encoding="UTF-8"?>
    <?fuego version="6.1 ALPHA" application="albpmenterprise"?>
    <!-- This file contains the propper attribute mapping for the FDI Generic Ldap Provider using Oracle Directory Service.          
    * Preference for group object
              <preference id="assignedParticipants.containsId" value="true"/>
              This preference is useful to speed up the provider and it can only be used if the assignedParticipant value is the dn of the user and the dn contains the participant id
              <preference id="assignedParticipants.containsId" value="true"/>
              This preference is useful to speed up the provider and it can only be used if the assignedGroup value is the dn of the group and the dn contains the group id
              <preference id="modifyTimeStamp.suffix" value="Z"/>
              This preference is useful when the suffix mofidyTimeStamp format of your ldap is not .OZ.
    -->
    <config>
         <object id="person">
              <object-filter>
                   <![CDATA[
                        (objectclass=inetOrgPerson)
                   ]]>
              </object-filter>
              <relative-dn>
                   <!-- the relative dn for person -->
              </relative-dn>
              <attribute id="id" value="uid"/>
              <attribute id="lastName" value="sn"/>
              <attribute id="firstName" value="givenname"/>
              <attribute id="accountLock" value="orclIsEnabled">
                   <attribute-comparator operation="EQUALS" compareTo="ENABLED"/>
                   <filter>
                        <![CDATA[
                             ($accountLock=ENABLED)
                        ]]>
                   </filter>
              </attribute>
              <attribute id="facsimileTelephoneNumber" value="facsimileTelephoneNumber"/>
              <attribute id="displayName" value="displayName"/>
              <attribute id="mail" value="mail"/>
              <attribute id="telephoneNumber" value="telephoneNumber"/>
              <attribute id="employeeId" value="employeeNumber"/>
              <attribute id="thumbnailPhoto" value="jpegPhoto"/>
              <attribute id="manager" value="manager"/>
              <attribute id="modifyTimeStamp" value="modifytimestamp"/>
         </object>
         <object id="group">
              <object-filter>
                   <![CDATA[
                        (objectclass=orclGroup)
                   ]]>
              </object-filter>
              <relative-dn>
                   <!-- the relative dn for group -->
    </relative-dn>
              <attribute id="id" value="dn"/>
              <attribute id="modifyTimeStamp" value="modifytimestamp"/>
              <attribute id="displayName" value="displayName"/>
              <attribute id="name" value="cn"/>
              <attribute id="description" value="description"/>
              <attribute id="assignedParticipants" value="uniquemember"/>
              <!--attribute id="assignedGroups" value="memberOf"/-->
              <attribute id="ou" value="uniquemember"/>
         </object>
         <object id="ou">
              <object-filter>
                   <![CDATA[
                        (objectclass=domain)
                   ]]>
              </object-filter>
              <relative-dn>
                   <!-- the relative dn for ous -->
    </relative-dn>
              <attribute id="name" value="orclsubscriberfullname"/>
              <attribute id="description" value="description"/>
         </object>
    </config>
    Edited by: Lemonice on 2009-3-30 上午2:08
    Edited by: Lemonice on 2009-3-30 下午7:01
    Edited by: Lemonice on 2009-3-30 下午8:43

    Hi,
    in my case, I am trying to configure the OBPM directory using ALUI and its native LDAP service.
    Now, I found that the first name and the last name in BPM are retrieved from the ALUI display name : provided we enter the display name in the format %first name% + %last name% we get them into BPM. But the display name is not always in this format...
    In addition, it's the portal telephone number information which is retrieved into BPM Telephone and Fax numbers.
    And, the email adress remains blank
    I have installed the latest patch for OBPM (Version: 10.3.1.0.0 Build: #97172)
    Would you have any documentation about creating a Profile Web Service in ALUI and specifying which LDAP attributes to map to which ALUI properties in the Profile Source ?
    Thanks !
    Edited by: vVince on May 6, 2009 3:46 PM

  • How to config a new remote on apple tv (first generation). I have lost my remote which came with the apple tv

    How to config a new remote on apple tv (first generation). I have lost my remote which came with the apple tv.

    Do you mean you've replaced your remote and it wont work because your AppleTV is paired to your lost remote?
    If so, http://support.apple.com/kb/HT1555 has you covered.

  • How to config OnDemand Report

    Hi,
    How to config OD Report if I want result display as below SQL command
    select a.accountname,count(b.salestage),
    (select count(b.salestage) from opportunity b where salestage in ('Closed/Did Nothing','Closed/Lost'))
    from account a,opportunity b group by a.accountname
    Thanks
    Pae

    if submit url with parameter
    http://hostname:7778/reports/rwservlet?destype=PRINTER&desname=lpSZ_R02_2&report=sticker.out
    error
    REP-50159: Executed successfully but there were some errors when distribute the output
    How to Solution?

  • How to config ZFS in solaris 10

    hi,
    I'm testing solaris 10 x86 edition in my PC. but i don't
    find any information about how to config ZFS in 10 (X86).. ;-(
    if anybody know it, pls.give me some information.
    thanks a lot.

    ZFS has not yet been integrated into Solaris 10...
    At this time you need either the "Software Express for Solaris 2/06"
    ( http://www.sun.com/software/solaris/solaris-express/ ) or the
    "Solaris Express: Community Release"
    ( http://www.opensolaris.org/os/downloads/on/ ) to play with ZFS.
    .

  • How to config the telephony button in CRM 5.0 (win client)

    Dear Sir,
    I can't find the documents how to config the telephony button in CRM5.0 (win clicent). Please kindly advise.
    Thank you and best regards,
    Vimol

    i can find the solution

  • How to config the web.xml file, when I use Richfaces + RI 1.2?

    Hi there:
    I want to use Richfaces + RI 1.2 to build a project. I don`t know how to config the web.xml file.
    By the way, my web server is Tomcat 6.0, my JDK's version is 6u6. I don`t want to use the facelets.
    thanks.
    lxm

    just add this before *</web-app>*
    <context-param>
           <param-name>org.richfaces.SKIN</param-name>
           <param-value>blueSky</param-value>
      </context-param>
      <filter>
           <display-name>RichFaces Filter</display-name>
           <filter-name>richfaces</filter-name>
           <filter-class>org.ajax4jsf.Filter</filter-class>
      </filter>
      <filter-mapping>
           <filter-name>richfaces</filter-name>
           <servlet-name>Faces Servlet</servlet-name>
           <dispatcher>REQUEST</dispatcher>
           <dispatcher>FORWARD</dispatcher>
           <dispatcher>INCLUDE</dispatcher>
      </filter-mapping>

  • How to config the font size of rich pod?

    Hi,
    Does anyone know how to config the font size of rich pod? It's too small.
    Thanks!

    You can do that using the PRINT-CONTROL Statement.This will only work when you send the list to the printer.Sample code is as below :
    REPORT zfont NO STANDARD PAGE HEADING LINE-SIZE 80 LINE-COUNT 65.
    Start of print-control
    NEW-PAGE PRINT ON.
    PRINT-CONTROL FUNCTION 'SF000'.
    WRITE: / 'This is CPI 20'.
    SKIP.
    PRINT-CONTROL FUNCTION 'SF020'.
    WRITE: / 'This is CPI 6'.
    SKIP.
    PRINT-CONTROL FUNCTION 'SF008'.
    WRITE: / 'This is CPI 12'.
    Depending on your SAP printer device, this may also work
    PRINT-CONTROL FONT 1 LPI 6.
    you can try to change font and LPI numbers
    WRITE: / 'font 1 lpi 6'.
    PRINT-CONTROL FONT 2 LPI 6.
    WRITE: / 'font 2 lpi 6'.
    PRINT-CONTROL FONT 3 LPI 6.
    WRITE: / 'font 3 lpi 6'.
    End of print-control
    NEW-PAGE PRINT OFF.
    *--- End of Program

  • How to config the user and role in the runtime for executing in the GP?....

    Hi Experts,
    I am learning GP(Guided processor)according the document
    http://help.sap.com/saphelp_nw70/helpdata/en/44/0d5b8f250d5cfae10000000a155369/frameset.htmneed.
    I meet two question when I learn the GP.
    The first:
    This document don't tell me how to config the member framework of the company.  After I design the GP, I have to config the user and role in the runtime for executing. I hope I can use the WDA(webdynpro for java or webdynpro for java) to implement to config the user for executing in the runtime. Thus, the customer don't config the user when runing the GP. But I don't know how to do this.
    I need a document guide step by step to tell me how to do this.
    The second:
    If I use the workflow in the GP, I have to install and config the NWDI(Netweaver Development Infrastructure). Now I have installed the NWDI, but I don't know config it so that I can download it to my machine for develop the workfolw in the GP.
    Do you give me some hints? Thanks a lot.
    Thank a lot.
    Best regards,
    tao

    Hi, Mithu,
    Thanks a lot for your help in advance.
    I have carefully read the document: https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/6b66d7ea-0c01-0010-14af-b3ee523210b5.
    Now, I think I have to set the processor of every actions in every process if I use the GP for processing the workflow.
    I am better to hope that I can set the processor to the role for every actions in every process in the runtime through get the organizational structure in the WDA(webdynpro for java or webdynpro for java). Thus, the customer don't set the processor to the role for every action in every process when runing in the GP.   I don't know how to do this. 
    Whether the function is not supported in the GP? If so, I have to config two organizational structure: in the R/3 and in the Portal. I don't think our customer don't receipt this solution.
    Do you give me some hints? Thanks a lot.  My email: [email protected]
    Thanks again.
    Thanks & Regards,
    Tao

  • How to do LDAP/OID as datasource in OBIEE

    We have a requirement to read data from LDAP in the repository and expose the imported structure to business model and inturn in presentation area. So that we can create simple OBIEE report using the LDAP data.
    1. How to add LDAP as datasource/database ?
    2. How to define the driver's for LDAP ?
    3. Is that possible to have thrid party datasource definition, how to get it listed in the "Database" ?
    Thanks
    Ayaps

    If you are using Oracle then you can use PL/SQL to read LDAP. See the following post which shows a way to do it:
    http://oraclebizint.wordpress.com/2007/10/12/oracle-bi-ee-101332-and-oid-user-and-group-phase-2/

  • How to config SS7 in AS5300 connecting to PSTN

    Hi,
    AS5300----SS7 PSTN switch
    How to config SS7 trunk in AS5300?
    Thanks
    yytellmey

    AS5300 can only transport ss7 messages via ip to a device which supports ss7, it won't deal with ss7 directly. What you need perhaps is Cisco PGW2200, then you will be able to connect to ss7 through AS5300.
    Check out this link:
    http://www.cisco.com/application/pdf/en/us/guest/products/ps2027/c2001/ccmigration_09186a00800b4193.pdf

  • How to config status in Search in T-code : cic0

    Dear All
    We just upgrade from CRM 2.0c to CRM 5.0 . How to config status in Search in T-code : cic0, because the status in the Search transaction, is different from the Activity transaction . Please help.
    Thank and best regards,
    Vimol

    Hi Vimol,
    If you are talking about the custom search help, please follow the following steps to add a custom search criteria for CIC0.
            1.  Run transaction SPRO.
            2.  Click on SAP Reference IMG tab on application tool bar.
            3.  Select Customer Relationship Management node.
            4.  Select Interaction Center Winclient node.
            5.  Select Component Configuration node.
            6.  Select Visible Components node.
            7.  Select Navigation Area node.
            8.  Select Define search Profile IMG activity.
            9.  Select the relevant Profile, and click on node view search application
                 within the locator.
           10.  Save the settings.
           11.  Back to main tree.
           12.  Select define search in locator IMG activity. 
           13.  Click on Search id node.
           14.  Add the search id, text, function module, program name and screen in
                 the table.
    <b>Reward points if it helps.</b>

  • How to config helo in ims5.2

    hi
    how to config helo in ims5.2 and how to check the output of helo?
    thanks

    According to the SMTP protocol (from it's frist implementation RFC 821 - Aug. 1982, to the latest RFC 2821 - Apr 2001) , the HELO command is issued by a client to initiate a conversation with the server. Actually The HELO should be superseeded by the EHLO command but it's mantained for compatibility with earlier implementation as a fallback.
    Anyway if you intend to configure your server to use only the HELO command when initiating a conversation with another server, you could use the keyword nohelo on the channel, but it's not standard; instead you could use the keyword checkehlo that tries to initiate the conversation with the standard ehlo command, and if it doesn't succede, then it falls back to the old helo mechanism.
    give a look at the docs:
    http://docs.sun.com/source/816-6020-10/mta_conf.htm#1067326

  • How to config varients in material master.

    how to config varients in material master.

    check this
    http://help.sap.com/printdocu/core/Print46c/en/Data/pdf/LOVC/LOVC.pdf
    http://www.sap-topjobs.com/VARCONFG%5B1%5D.pdf
    http://www.sap-img.com/sap-sd/steps-for-sd-variant-configuration.htm
    regards
    KI

  • How i connect my forms/report  with 9i database/ how i configer my form and

    hi master;
    i have 6i forms and 9i oracle database both are right but how i accece the 9i in my form and report.
    which file i copy and where i copy .
    please send me file name or how i configer my form and report with 9i
    thanking you
    Aamir

    Dear Aamir,
    Please copy TNSNAMES.ORA file from your Database Home/NETWORK/ADMIN directory and copy that in NETWORK/ADMIN directory where you installed Forms/Reports 6i. then you can connect to your server by using SID as host string like: system/manager@<SID example: ORCL>
    Regards,
    Reza

Maybe you are looking for

  • New to Aperture: keywords and icons

    Hello, although i'm not a pro photographer, I decided to switch from iPhoto to Aperture (thanks to the cheaper price Aperture now has on the app store). I have imported one of my iphoto libraries, the main one with travel pictures, and I have a coupl

  • Control file not created at time of installtion

    control file not created at time of installtion of oracle database now how we can create it see alert file Dump file e:\ORacle\admin\new\bdump\newALRT.LOG Tue Sep 09 10:45:53 2003 ORACLE V8.1.6.0.0 - Production vsnsta=0 vsnsql=e vsnxtr=3 Windows 2000

  • Song is not authorized despite being purchased in iTunes store

    i have a number of songs that i purchased which are not authorized to play on my computer despite its being authorized.  i have followed the posted fixes on the support site but no dice. any ideas?

  • Having problems adding packages

    I downloaded the Solaris (Sparc) companion CD's Dependency Package. It contains 14 or so files that I think should be patches. I run "pkgadd -d . " from my directory where they are and it says their are no packages to add. http://www.sun.com/software

  • I can not change my alarm sound

    Hello all, for some reason my alarm on my iPhone does the crickets sound. That doesn't wake me up at all. If I go to Settings then Sounds no setting 4 the alarm doent come up. I use the duck sound. Thank you all