Configuring certificates for secure LDAP connection

Last Updated : Aug 09, 2023 |
Prolog information
If you used the post install script to configure Avaya Analytics™ Lightweight Directory Access Protocol (LDAP) authentication, you must also add and configure certificates for the Historical Reporting secure LDAP connection. You can do that using the following process.
Before you begin
  1. Configure Avaya Analytics™ LDAP authentication.
  2. Get the .pem file from your LDAP server. You can get the .pem from your IT personnel or system administrator.
  1. Log in to the Cluster Control Manager (CCM) console as the customer user.
  2. Switch to being the root user by entering the command su.
  3. Copy the .pem file into a directory. For our examples we assume that the tmp directory.
  4. Rename the certificate as LDAP_CACERT using the following command: mv <filename>.pem LDAP_CACERT where <filename> is the current name of the file.
    ADDITIONAL INFORMATION:
    • For example: mv cacert.pem LDAP_CACERT
  5. To run the Analytics Administration script, use the following command:
    ADDITIONAL INFORMATION:
    ccm release orca analytics
  6. Select Historical Reporting by pressing the corresponding number.
  7. Select the Configure Certificate for LDAP using SSL option by entering the corresponding number.
  8. In the Proceed LDAP over SSL cert config? option, type y. Typing n cancels the operation.
  9. In the Please confirm that you renamed the LDAP CA certificate to LDAP_CACERT and saved to a location in CCM field, type y and press Enter.
  10. In the Please enter the LDAP_CACERT file name including the path field, enter the location and filename of the renamed LDAP certificate file.
    ADDITIONAL INFORMATION:
    • For example, tmp/LDAP_CACERT
    STEP RESULT:
    • The MicroStrategy server pod restarts in 10 minutes.
  11. To cancel the renaming of the LDAP CA certificate, in the Please confirm that you renamed the LDAP CA certificate and saved to the Historical Reporting Certificate directory field, type y and press Enter.
    STEP RESULT:
    • Canceling allows renaming of the LDAP CA certificate to LDAP_CACERT and saving it to a location on CCM.
  12. Return to the previous page by entering b.
  13. Quit the current page by entering q.
  14. Return to the main menu by entering m.