LDAPSecurityType

The security type to use for communications with the LDAP server. Use one of the following options:

NOTE: IDOL uses OpenLDAP to provide LDAP support on most platforms, and the Microsoft LDAP implementation on Windows. You might need to make some changes in the environment.

For example, to use SSL communications, you must install the SSL certificate of the LDAP server for the user that runs IDOL Server. You must also turn off client verification on the LDAP server, or create a client certificate for IDOL Server (signed by a Certification Authority (CA) that the LDAP server trusts).

On Windows, you can ensure the LDAP server SSL certificate is trusted by adding the correct certificates to your “Trusted Root Certification Authorities”.

With OpenLDAP on Linux, you can configure TLS options such as the certificate paths (LDAPTLS_CACERT) or minimum protocol version (LDAPTLS_PROTOCOL_MIN) by changing the parameters in your LDAP configuration file. Note that OpenLDAP tries multiples locations for the configuration file. For more information, see https://openldap.org/software/man.cgi?query=ldap.conf.

Type: String
Default: ClearText
Required: No
Configuration Section: MySecurityRepository
Example: LDAPSecurityType=SSL
See Also: LDAPPort
LDAPServer
LDAPKerberosRealm