oxldap-authentication

[chris]

Hi there,
does anyone know which authentication types are implemented? When trying

java.naming.security.authentication = strong

in ldapauth.properties as for example mentioned in the java docs the server responds with

Caused by: javax.naming.AuthenticationNotSupportedException: strong

I'm trying to authenticate the ox to our ldap server with certificates. OX has to show a valid certificate to access the ldaps.

Any hints?

Cheers,
Chris

[Carsten Hoeger]

According to http://java.sun.com/j2se/1.4.2/docs/...-ldap-gl.html:

none, simple and various SASL mechanisms are available.
That depends on what's possible with your LDAP server.

Simple should work.

[chris]

i have to confess, i'm a little helpless how to get this working. i added the keychain to the keystore, set the -Djavas.net.ssl.trustStore=myKeyStorePath parameter in $/open-xchange/etc/admindaemon/ox-admin-scriptconf.sh and $open-xchange/etc/groupware/ox-scriptconf.sh under JAVA_XTRAOPTS.

but now i get the following:

Caused by: javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure

has anyone ever done this before? i'm trying to convince java to show it's own certificate to the ldap server, otherwise the connection is refused by the ldap server.

Cheers,
Chris