I am integrating with secure LDAP using LDAP policy. I created LDAP resource with sSLEnabled value to true . Imported all root and intermediate root certificates of the the LDAP server to default store in the specific environment. Copied resource creation payload and LDAP policy at the bottom.
When we request the proxy with LDAP policy we are getting below fault. The simple binding is working fine with other LDAP brower and tools. Not sure why it is failing.
{
"fault": {
"faultstring": "Naming exception simple bind failed: ldap.myorg.com:636 occurred. Reason: simple bind failed: ldap.myorg.com:636.",
"detail": {
"errorcode": "messaging.runtime.NamingException"
}
}
}
One of the possible reason could be due to handshake issue. Like target setup we don't have any explicit way to specify which key trust stoe and alias should be used for handshake. the policy description in the apigee site doesn't tells anything about ssl based communication.
Need help fixing the issue.
LDAP Policy:
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<Ldap async="false" continueOnError="false" enabled="true" name="LDAP-1">
<DisplayName>LDAP-1</DisplayName>
<LdapResource>SecureLDAP-myorg</LdapResource>
<Authentication>
<Password ref="var_ldap_password"/>
<Scope>subtree</Scope>
<BaseDN>ou=people,ou=org-intranet,dc=myorg</BaseDN>
<SearchQuery>(uid={var_ldap_username})</SearchQuery>
</Authentication>
<Search>
<BaseDN>ou=people,ou=org-intranet,dc=myorg</BaseDN>
<SearchQuery>(uid={var_ldap_username})</SearchQuery>
<Attributes>
<Attribute>uid</Attribute>
</Attributes>
<Scope>subtree</Scope>
</Search>
</Ldap>
LDAP Resource creation pay load:
{
"admin": {
"dN": "uid=test-user,ou=people,ou=org-intranet,dc=myorg",
"password": "****"
},
"connectPool": {
"enabled": true,
"initsize": 0,
"maxsize": 50,
"prefsize": 30,
"protocol": "",
"timeout": 30000
},
"connection": {
"authentication": "simple",
"connectionProvider": "jndi",
"hosts": [
{
"port": 636,
"value": "ldap.myorg.com"
}
],
"sSLEnabled": true,
"version": 3
},
"name": "SecureLDAP-myorg"
}
LinkedIn
Twitter
