DCO connect to Active Directory via ssl

[DCIM_Support]

This question was originally posted on DCIM Support by Boris on 2019-05-07

---

Hello

I try create authentication server (Active Directory ) on DCO 8.2.7 without search the group according to the following link

https://sxwhelpcenter.ecostruxureit.com/display/public/UADCO8x/Setup+an+AD+%28Active+Directory%29+Se...

All details that I set is working when I connected via port 389 (without ssl) .

When I change the port to 636(SSL) I got popup and accept to certificate because this not trust .

After I have pressed ok the page is stuck and doesn’t promotion . the page stuck a huge time. In server.log of the jboss I see the java error about NulPointException.

On netstat I doesn’t see that the DCO try open connect to AD on port 636.

Into section “Certificate” on DCO web I see the certificate from the Domain Controller of the AD .

Please note : all process I run like user locally of the DCO (according to manual) .

1.What in this process incorrect ?

2.How I can debug this problem ?

Many thanks in advance .

(CID:143756065)

[DCIM_Support]

This answer was originally posted on DCIM Support by Olegas Domanskis on 2019-05-08

---

Hello

Try adding certificate authority certificate to the DCO server.

1. Root CA added to /etc/pki/ca-trust/source/anchors/
2. update-ca-trust extract
3. reboot
   

(CID:143756461)

[DCIM_Support]

This comment was originally posted on DCIM Support by Boris on 2019-05-11

---

Many thanks for answer .

Can I add the certificate authority from AD via webmin ?

Rally I didn’t understand how I add CA ?

Is this crt file that I need  to copy to this folders only ?

(CID:143757476)

[DCIM_Support]

This comment was originally posted on DCIM Support by Boris on 2019-05-15

---

Hello

Is there link for add certificated DCIM for Authentication  Server issue     

(CID:143758583)

[DCIM_Support]

This answer was originally posted on DCIM Support by Boris on 2019-05-23

---

Hello

Is there clear knowledge regarding to add certificate of the AD to DCO ?

Which the certificate I need and how I can get it ?

Thanks in advance  

(CID:143760752)

[DCIM_Support]

This question is closed for comments. You're welcome to start a new topic if you have further comments on this issue.