SSL Certificate
If an LDAPS connection is used when connecting to the selected external directory then an SSL certificate is required. First the SSL certificate needs to be created for example by using the Microsoft Certificate Authority. Then it needs to be transferred to the Ubisecure server and added to the trusted certificates in the Java Runtime Environment. Note that Ubisecure SSO Server includes its own Java implementation and that is where the certificate needs to be added.
...
Code Block | ||||||
---|---|---|---|---|---|---|
| ||||||
cd /d "C:\Program Files\Ubisecure\ubilogin-sso\" setenv.cmd cd %JRE_HOME%\lib\security cd /d %JAVA_HOME%\jre\lib\security keytool -importcert -keystore cacerts -trustcacerts -alias mytrustedca -file <insert filename here> -storepass changeit |
...
Code Block | ||||||
---|---|---|---|---|---|---|
| ||||||
cd /usr/local/ubisecure/ubilogin-sso/ . setenv.sh cd $JAVAJRE_HOME/jre/lib/security keytool -importcert -keystore cacerts -trustcacerts -alias mytrustedca -file <insert filename here> -storepass changeit |
If a plain LDAP connection is used when connecting to the selected external directory an SSL certificate is not required and this step can be skipped.
Setting up a user account in Active Directory or LDAP
In-depth Active Directory administration is not within the scope of this document. Please refer to the Microsoft Knowledge Base for specific information.
In this example, the following operations have been performed:
...