Unable to install LSF patch after LDAP SSL config

Welcome to LawsonTalk. We hope you enjoy your visit.

You're currently viewing our forum as a guest. This means you are limited to certain areas of the board and there are some features you can't use. If you join our community, you'll be able to access member-only sections, and use many member-only features such as customizing your profile, sending personal messages, and voting in polls. Registration is simple, fast, and completely free. After registration, please check your e-mail within 24 hours for an message from us, read it, and reply to it.

Join our community!

If you're already a member please log in to your account to access all of our features:

Unable to install LSF patch after LDAP SSL config; LDAP SSL
Topic Started: Jul 28 2009, 02:03 PM (813 Views)
vemi007	Jul 28 2009, 02:03 PM Post #1
Newbie Posts: 4 Group: Members Member #4,660 Joined: February 11, 2008	I recently switched our Lawson and LBI to use completly SS including all ldap calls going over on LDAPS protocol porrt 636, our LDAPBIND is also set to SSL. The application and LBI are working well since past few months since the upgrade. A week ago I got ready to apply my first LSF post patch after SSL configuration. As you are already aware when u install patch using Lawson java installer it validates if ldap is running, it is failing here. The error ii see is unable toc onnect to server port 636. Port connectivity is good , I pretty sure the problem is with SSL. Tivoli LDAP is not trusting the connection coming from the installer. The application and LBI works fine .. I just cannot get it to work for Installer. ANy insight is much appreciated. I have even checked the install.cfg and the ldap parameters all point to LDAPS, SSL etc. As a work around to install patch , I have port 389 still open which helps me with the install and nothing else, I would like to get the patch install working with port 636. Lawson says it should work and the ask me to contact LPS. Any help is appreciated.



atsekhan	Aug 11 2009, 08:25 AM Post #2
Newbie Posts: 5 Group: Members Member #14,885 Joined: June 23, 2009	Have you modified install.cfg?



vemi007	Aug 18 2009, 07:21 AM Post #3
Newbie Posts: 4 Group: Members Member #4,660 Joined: February 11, 2008	Yes I did, here is the updated values for LDAP from install.cfg.. LDAPBINDDN=cn=lawson_app LDAPDATADN=o=lwsnrmdata LDAPHOST=dce0stl6.corp.mastercard.org LDAPLOCAL=TRUE LDAPOIDARC=1 LDAPPASSWORD=raspberries LDAPPORT=636 LDAPPREFIX=zz LDAPTYPE=IBM LDAPTYPEGEN=com.lawson.lawrm.ldifgenerators.IbmLdifGenerator LDAP_CONSUME_USERS=FALSE LDAP_INITIAL_CONTEXT_FACTORY=com.sun.jndi.ldap.LdapCtxFactory LDAP_PROTOCOL=SSL LDAP_PROVIDER_URL=ldaps://dce0stl6.corp.mastercard.org:636 Am I missing something ?



schroncd	Aug 19 2009, 04:38 AM Post #4
Lawson Technorati Posts: 690 Group: Members Member #13 Joined: January 11, 2006	When you start the patch installer, hard code the java to the one in WebSphere where you installed the certificate, instead of the one for the OS - which is probably in your PATH and the one you specified as JAVA_HOME and LAW_JAVA_HOME


« Previous Topic · UPGRADE: All other upgrades · Next Topic »