How to configure FishEye to bind to LDAP over SSL for authentication

Question

I have FishEye successfully using LDAP (AD to be exact) for authentication on the default, non-encrypted port.

I need to have FishEye connect to LDAP using SSL however.

I have a Java keystore with the root certificate, and have added that to both the SSL Bind server configuration, and have added it via keystore and truststore Java options in fisheyectrl. Yet FishEye cannot bind on the SSL port (LDAp browsers can, just fine). I get this error:

Results
    username/password check failed
Debug          
    problem getting initial LDAP context
    my.domain:636; socket closed

How do I have FishEye use the certificate in the keystore to connect to the LDAP SSL port?

TIA!

Tom Towkach1 · Answer

Hi Martin,

You will need to import from the LDAP server it's certificate into FishEye as well.

Please let us know if that helps.

Cheers,

Tom Towkach

Atlassian Support

Martin Barrs · Answer

Hi Felipe,

That document describes how to run FishEye with SSL certificates, i.e. how to access a FishEye server via HTTPS.

However FishEye, apparently, does not use the HTTPS keystores to connect to LDAP via SSL. The keystores are used by the Jetty container, but not theLDAP code.

Martin

Felipe Kraemer · Answer

Hi, Martin.

I think this document can help you configuring SSL in FishEye:

http://confluence.atlassian.com/display/FISHEYE/FishEye+SSL+Configuration

Please let us know how it goes.

Cheers,
Felipe Kraemer
Atlassian Support