Enabling TLS for the Siebel LDAP Security Adapter
Use the following procedure to configure TLS for the Siebel LDAP security adapter. For more information about LDAP security adapter configuration, see Configuring Security Adapters Using the Siebel Management Console.
To enable TLS for the Siebel LDAP security adapter
Copy the wallet you created in Creating an Oracle Wallet to the Siebel Server computer where you will run the Application Object Manager components that support LDAP authentication.
(Windows Only) If you are using Windows, do one of the following:
Copy the contents of the wallet directory
ORACLE_HOME\bin\owm\wallets\
username into a location that the Siebel Server service owner can access, for examplec:\wallet.
Alternatively, change the Siebel Server service owner account log on values so that they are the same as the account used to create the wallet described in Creating an Oracle Wallet. To change the Siebel Server service account owner log on values:
From the Windows Start menu, choose Settings, Control Panel, Administrative Tools, and then the Services item.
Right-click on the Siebel Server System Service, then select Properties.
In the Properties dialog box for this service, click the Log On tab.
Select the This Account option, then enter the name and password of the account used to create the wallet.
Modify the LDAP security adapter configuration parameters using values similar to those shown in the following table.
Parameter
Value
Port
port_number
The TLS port is configurable for the LDAP server. Verify the actual port number the LDAP server is using for TLS and specify that value. The default value is 636.
SSL
Select this check box to enable Secure Sockets Layer for socket connections to the host.
Enable SSL
Select this check box to use TLS for communications between the LDAP security adapter and the directory.
Note the following:
The wallet file (ewallet.p12) must be stored in the
keystore/truststore
central location configured for Siebel Gateway, Siebel Application Interface, and other nodes.Oracle LDAP client libraries are required to decipher the ewallet file, which is used to make secure connections (LDAPS) to the LDAP server.
The required Oracle LDAP client library files are:
oraclepki.jar, osdt_core.jar, and osdt_cert.jar
These library files must be located in the
WEB-INF/lib
directory for the Siebel Web application.
Wallet Password
wallet_password
Specify the password you assigned to the wallet when creating the wallet.
For information on configuring parameters for the LDAP security adapter, see Configuring Security Adapters Using the Siebel Management Console and Parameters for Configuring Security Adapter Authentication.
Restart the Siebel Server (if you are configuring LDAP on a Siebel Server).