IdP for Username/Password Authentication LDAPS (with AD) issues

[Kevin Foote]

> On Mar 22, 2016, at 12:39 PM, Youssef GHORBAL <youssef.ghorbal at pasteur.fr> wrote:
> 
> 	I want to do Username/Password Authentication using LDAPS (against an AD) with an IdP 2.4

First, you should be using IdP 3 for installs these days… 2.4 is EOL pretty soon. 

> #> c_rehash /opt/active_directory_ca/
> #> openssl s_client -CApath /opt/active_directory_ca/ -connect tom.corp.pasteur.fr:636
> 
> 	What am I missing ? In the idp-process.log, I can’t seem to find any clue whether the CA file (sslSocketFactory) is taken into account or ignored for some other obscure reason.
> 	How can I push investigations deeper (I currently @ DEBUG level)
> 
> 	Any help would be appreciated.

Now since you are for some reason installing IdP 2.4...
Java does not use openssl .. you need to add the AD CA into your java key-store using keytool.

${JAVA_HOME/jre/lib/security/cacerts I believe. 

--------
thanks
 kevin.foote