Setting up SSL for Solaris 11 LDAP (ldapclient to use LDAPS)

Following on from my last blog about "Setting up SSL for Solaris 11 LDAP client (changing AD password from Solaris)" I thought I would finish it off by changing my name service from LDAP to LDAPS. Hopefully your system is already talking to Active Directory over LDAP for all your authentication ("Solaris 11 Authentication Login with Active Directory").

Step 1: Setting up SSL for Solaris 11 LDAP client (changing AD password from Solaris)

Setting up SSL for Solaris 11 LDAP client (changing AD password from Solaris)

I have been using LDAP for years for our authentication and using LDAP Active Directory for about 3 years, but this was always using ldap so I thought I would start looking at SSL.

This blog entry will look at the initial setup and how you can talk to the AD server over SSL. The information here is nothing new and is all covered in the references but hope this shorter version helps.

References:

• Changing Active Directory passwords via LDAP using PHP
• http://www.cs.bham.ac.uk/~smp/resources/ad-passwds
• Enabling SSL in the Active Directory Connector
• http://docs.oracle.com/cd/E20295_01/html/821-0422/aarjc.html
•  Steps to setup SSL for Solaris LDAP client (certutil and openssl)
•  https://blogs.oracle.com/baban/entry/steps_to_setup_ssl_using 
•  Authenticating UNIX/Linux to Windows 2008R2. Part 2 : Solaris 10
•  http://osdude.wordpress.com/2011/08/11/authenticating-unixlinux-to-windows-2008r2-part-2-solaris-10/