Connection to the Microsoft AD with SSL

Question

Hello,

I would like to ask for help with connection to the Microsoft AD with SSL. I got our LDAP server and account details, but I am not able to connect to this server. I always got this message:

"Connection test failed. Response from the server:
neopost.ad:636; nested exception is javax.naming.CommunicationException: neopost.ad:636 [Root exception is javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: No name matching neopost.ad found]"

I think the problem is with a certificate, but I do not know, how to fix it. I went through this article (I got the certificate with information about LDAP server). The confluence run on the server with Ubuntu, so I used this command: "sudo keytool -importcert -alias ldapCert -file JIRAorLDAPServer.crt -keystore $JAVA_HOME/jre/lib/security/cacerts"

If I use this command for verification: "sudo keytool -list -keystore $JAVA_HOME/jre/lib/security/cacerts" I see, that the certificate is here.

I also got only the IP address of our LDAP server, so I added new record to the host file and this IP address is now known as neopost.ad.

So, I think that everything is set correctly, but the error is still here.

Can anyone help me please?

Thank you in advance.

Shannon S · Answer

Libor,

Thank you for letting me know; I'm glad you were able to solve your issue.

Take care, and have a pleasant week!

Regards,

Shannon

Libor Šmíd · Answer

Hi Shannon,

thank you very much for your cooperation. Now the connection to the LDAP is set and works. But, I am not sure, where was the problem, because I did many steps and I went through many articles with instructions.

I also set it up the path $JAVA_HOME and also set the supported java version as a default. And I also imported the root certificate what I received from my company.

But I am glad, that the problem is resolved.

Thank you again.

Libor

Shannon S · Answer

Hello Libor,

Thank you for those details.

Can you tell me, did you install Confluence from an archive (tar.gz) or from the Installer? The installer has a prerequisite to set JAVA_HOME:

Before you install Confluence, check that you're running a supported Java version and that the JAVA_HOME environment variable is set correctly.

Confluence can only run with Oracle JDK or JRE.

To check your Java version:

$ java -version

To check your JAVA_HOME variable is set correctly:

$ echo $JAVA_HOME

If you see a path to your Java installation directory, the JAVA_Home environment variable has been set correctly. If a path is not returned you'll need to set your JAVA_HOME environment variable manually before installing Confluence.

Have you created a dedicated user to run Confluence?

Tell me more...

You mentioned that earlier you were able to run the command:
sudo keytool -importcert -alias ldapCert -file JIRAorLDAPServer.crt -keystore $JAVA_HOME/jre/lib/security/cacerts"

However, this would have returned an error if JAVA_HOME is empty, as you mentioned when echoing $JAVA_HOME. If that's the case, you likely have multiple JVMs installed, and you might be adding the certificate to the wrong one.

I hope this helps, but let me know if you have any questions.

Regards,
Shannon