Comments on: Configure OID with SSL http://laurentschneider.com/wordpress/2007/03/configure-oid-with-ssl.html Oracle Certified Master Mon, 01 Dec 2008 19:08:36 +0000 http://wordpress.org/?v=2.6.5 By: Laurent Schneider http://laurentschneider.com/wordpress/2007/03/configure-oid-with-ssl.html#comment-7732 Laurent Schneider Wed, 21 May 2008 19:53:19 +0000 http://laurentschneider.com/wordpress/2007/03/configure-oid-with-ssl.html#comment-7732 well done! well done!

]]> By: mac http://laurentschneider.com/wordpress/2007/03/configure-oid-with-ssl.html#comment-7731 mac Wed, 21 May 2008 19:51:47 +0000 http://laurentschneider.com/wordpress/2007/03/configure-oid-with-ssl.html#comment-7731 I got it. I simply used my certificate (used for Server Side Authentication) and on my clients LDAP.ora i configured macserver::1636. Leaving the non-SSL port empty worked for me. Then I just stopped my Non SSL port using oidctl command leaving the SSL port alone running. Thanks a lot! I got it.
I simply used my certificate (used for Server Side Authentication) and on my clients LDAP.ora i configured macserver::1636. Leaving the non-SSL port empty worked for me.
Then I just stopped my Non SSL port using oidctl command leaving the SSL port alone running.

Thanks a lot!

]]> By: mac http://laurentschneider.com/wordpress/2007/03/configure-oid-with-ssl.html#comment-7576 mac Thu, 15 May 2008 16:26:49 +0000 http://laurentschneider.com/wordpress/2007/03/configure-oid-with-ssl.html#comment-7576 So it always check on the first port listed which happens to be a non SSL port. And you said i cannot use the SSL port alone making my configuration macserver:0:1636 What if I like to use the SSL port (1636 only) since I already have a certificate Ready? and I disallow the use of NON-SSL port? Is there any way to do this? So it always check on the first port listed which happens to be a non SSL port.
And you said i cannot use the SSL port alone making my configuration macserver:0:1636

What if I like to use the SSL port (1636 only) since I already have a certificate Ready? and I disallow the use of NON-SSL port? Is there any way to do this?

]]> By: Laurent Schneider http://laurentschneider.com/wordpress/2007/03/configure-oid-with-ssl.html#comment-7570 Laurent Schneider Thu, 15 May 2008 15:20:55 +0000 http://laurentschneider.com/wordpress/2007/03/configure-oid-with-ssl.html#comment-7570 yes, it always try the first port, and if there is a service listening on this port it will not try port 2... a bit unlucky I admin :| yes, it always try the first port, and if there is a service listening on this port it will not try port 2… a bit unlucky I admin :|

]]> By: mac http://laurentschneider.com/wordpress/2007/03/configure-oid-with-ssl.html#comment-7569 mac Thu, 15 May 2008 15:11:23 +0000 http://laurentschneider.com/wordpress/2007/03/configure-oid-with-ssl.html#comment-7569 Hi Laurent, One more thing, whenever I use the the Directory Manager I was usually asked first to which OID server to connect. So I type in my server name: macserver and the port as 1636 but the status of the server is unavailable. (Even if I change the port to 0 it is unavailable) This scenario restricts me to do the management of Directory manager remotely using the SSL port. Any Idea? Hi Laurent,

One more thing, whenever I use the the Directory Manager I was usually asked first to which OID server to connect.
So I type in my server name: macserver and the port as 1636 but the status of the server is unavailable. (Even if I change the port to 0 it is unavailable)

This scenario restricts me to do the management of Directory manager remotely using the SSL port.

Any Idea?

]]> By: mac http://laurentschneider.com/wordpress/2007/03/configure-oid-with-ssl.html#comment-7567 mac Thu, 15 May 2008 14:58:59 +0000 http://laurentschneider.com/wordpress/2007/03/configure-oid-with-ssl.html#comment-7567 Hi, Thanks for your reply; My LDAP.ora is using macserver:1389:1636 and with this configuration my TNSPING is failing. However when I changed the nonssl port to 0 ( macserver:0:1636) or the default (macserver:389:1636) It is working. Why is that so? Should this mean that the TNSPING is only using the non-ssl port? I want to enable SSL only on my configset1 with the authentication set to Server Authentication and stop the default configset0 with default port (389:636) How can I do that? Hi,
Thanks for your reply;
My LDAP.ora is using
macserver:1389:1636

and with this configuration my TNSPING is failing.

However when I changed the nonssl port to 0 ( macserver:0:1636) or the default (macserver:389:1636) It is working.

Why is that so? Should this mean that the TNSPING is only using the non-ssl port?

I want to enable SSL only on my configset1 with the authentication set to Server Authentication and stop the default configset0 with default port (389:636)

How can I do that?

]]> By: Laurent Schneider http://laurentschneider.com/wordpress/2007/03/configure-oid-with-ssl.html#comment-7506 Laurent Schneider Wed, 14 May 2008 18:39:35 +0000 http://laurentschneider.com/wordpress/2007/03/configure-oid-with-ssl.html#comment-7506 what it your ldap.ora? it must be something like <code>macserver:1434:1636</code> where the second port is SSL. You cannot have ssl only, you may use macserver:0:1636 maybe, but ssl must be second HTH what it your ldap.ora?

it must be something like

macserver:1434:1636

where the second port is SSL. You cannot have ssl only, you may use macserver:0:1636 maybe, but ssl must be second

HTH

]]> By: mac http://laurentschneider.com/wordpress/2007/03/configure-oid-with-ssl.html#comment-7505 mac Wed, 14 May 2008 17:19:50 +0000 http://laurentschneider.com/wordpress/2007/03/configure-oid-with-ssl.html#comment-7505 Hi, Thanks for sharing this configuration of OID on SSL. I was able to setup my own OID server and I configured my port 1636 for SSL. Since I only want to test my SSL configuration I simply created a self_signed certification using " orapki wallet create -wallet ./ -auto_login". Now my wallet certificate says "READY". I did an LDAP bind using the SSL port and the result was "bind Successful" I used my OID server for net service management so I have my client configured with LDAP.ORA and the parameter for DIRECTORY SERVER was set to use the SSL port 1636. Unfortunately using this port fails me to do a TNSPING to my database. How should I configure my client to use the SSL to connect to OID? Did I miss something? I am using a Server side Authentication only. Hi,

Thanks for sharing this configuration of OID on SSL. I was able to setup my own OID server and I configured my port 1636 for SSL. Since I only want to test my SSL configuration I simply created a self_signed certification using ” orapki wallet create -wallet ./ -auto_login”. Now my wallet certificate says “READY”.

I did an LDAP bind using the SSL port and the result was “bind Successful”
I used my OID server for net service management so I have my client configured with LDAP.ORA and the parameter for DIRECTORY SERVER was set to use the SSL port 1636. Unfortunately using this port fails me to do a TNSPING to my database.

How should I configure my client to use the SSL to connect to OID? Did I miss something? I am using a Server side Authentication only.

]]>