Hi,
I just installed Enterprise Portal on NetWeaver 7.42. I am trying to configure it to use MS LDAP server for user authentication with an SSL certificate. The LDAP system is maintained by our IT department and is made up of three servers. The main LDAP server I connect to is auth-root which looks to auth-student and auth-office to verify user IDs. I can bind with auth-root server from the NetWeaver server using ldapsearch and SSL. But when I try to validate the configuration from NetWeaver I receive the following error in the log file.
DataSource LDAP_ROOT64094220199: Initialization of connection manager failed, due to SSL configuration lazy initialisation.
If I select the Browse button under UME Configuration on the portal I can see the tree structure for our LDAP systems. Unsure if I need to go direct to auth-office and auth-student server?
Attached is a part of the trace file from testing the connection.
Below is the private section form the data source configuration xml file.
<privateSection>
<ume.ldap.access.server_type>MSADS</ume.ldap.access.server_type>
<ume.ldap.access.server_name>auth-root.ldap.xxxx.xxx</ume.ldap.access.server_name>
<ume.ldap.access.server_port>636</ume.ldap.access.server_port>
<ume.ldap.access.ssl>true</ume.ldap.access.ssl>
<ume.ldap.access.user>CN=sap-lds,OU=LDS-SEARCH-USERS,DC=ROOTLDS</ume.ldap.access.user>
<ume.ldap.access.password>$ume.ldap.access.additional_password.1</ume.ldap.access.password>
<ume.ldap.access.base_path.user>OU=GVSU,DC=ROOTLDS</ume.ldap.access.base_path.user>
<ume.ldap.access.base_path.group>OU=GVSU,DC=ROOTLDS</ume.ldap.access.base_path.group>
<ume.ldap.access.context_factory>com.sun.jndi.ldap.LdapCtxFactory</ume.ldap.access.context_factory>
<ume.ldap.access.authentication>simple</ume.ldap.access.authentication>
<ume.ldap.access.flat_group_hierachy>false</ume.ldap.access.flat_group_hierachy>
<ume.ldap.access.user_as_account>true</ume.ldap.access.user_as_account>
<ume.ldap.access.dynamic_groups>false</ume.ldap.access.dynamic_groups>
<ume.ldap.access.ssl_socket_factory>com.sap.security.core.server.https.SecureConnectionFactory</ume.ldap.access.ssl_socket_factory>
<ume.ldap.access.objectclass.user>UserProxy</ume.ldap.access.objectclass.user>
<ume.ldap.access.objectclass.uacc>UserProxy</ume.ldap.access.objectclass.uacc>
<ume.ldap.access.naming_attribute.user>cn</ume.ldap.access.naming_attribute.user>
<ume.ldap.access.naming_attribute.uacc>cn</ume.ldap.access.naming_attribute.uacc>
</privateSection>