7.1.1 Configuring a SSL Channel between Identity Server and LDAP Servers

Channel 1 in Figure 7-1, SSL Communication Channels.

You can set a SSL channel between Identity Server and LDAP servers while configuring user stores. Select the Use secure LDAP connections option to change the port from 389 to the secure LDAP port 636.

IMPORTANT:If you use port 389, user names and passwords are sent in the clear text that is vulnerable to security issues.

To enable the Use Secure LDAP Connections option, perform the following steps:

  1. Go to Identity Servers > [cluster name] > User Stores.

  2. Click [name of the user store] > [name of the replica].

  3. Turn on Use Secure LDAP Connections.