How to configure FishEye to bind to LDAP over SSL for authentication

[Martin Barrs]

I have FishEye successfully using LDAP (AD to be exact) for authentication on the default, non-encrypted port.

I need to have FishEye connect to LDAP using SSL however.

I have a Java keystore with the root certificate, and have added that to both the SSL Bind server configuration, and have added it via keystore and truststore Java options in fisheyectrl. Yet FishEye cannot bind on the SSL port (LDAp browsers can, just fine). I get this error:

Results
username/password check failed
Debug
problem getting initial LDAP context
my.domain:636; socket closed

How do I have FishEye use the certificate in the keystore to connect to the LDAP SSL port?

TIA!

[Tom Towkach]

Hi Martin,

You will need to import from the LDAP server it's certificate into FishEye as well.

Please let us know if that helps.

Cheers,

Tom Towkach

Atlassian Support

[Felipe Kraemer]

Hi, Martin.

I think this document can help you configuring SSL in FishEye:

http://confluence.atlassian.com/display/FISHEYE/FishEye+SSL+Configuration

Please let us know how it goes.

Cheers,
Felipe Kraemer
Atlassian Support

[Martin Barrs]

Hi Felipe,

That document describes how to run FishEye with SSL certificates, i.e. how to access a FishEye server via HTTPS.

However FishEye, apparently, does not use the HTTPS keystores to connect to LDAP via SSL. The keystores are used by the Jetty container, but not theLDAP code.

Martin

[Felipe Kraemer]

Hi, Martin.

I think this document can help you configuring SSL in FishEye:

http://confluence.atlassian.com/display/FISHEYE/FishEye+SSL+Configuration

Please let us know how it goes.

Cheers,
Felipe Kraemer
Atlassian Support

[Felipe Kraemer]

Hi, Martin.

I think this document can help you configuring SSL in FishEye:

http://confluence.atlassian.com/display/FISHEYE/FishEye+SSL+Configuration

Please let us know how it goes.

Cheers,
Felipe Kraemer
Atlassian Support