Configuring the access list

Depending on your configuration, you must provide required access details.

To configure the access list, complete the following steps:

  1. Use LDAP Service as the Component Type.
  2. Specify the access information (a user name and password) that Agile Service Manager uses to authenticate with the LDAP server.
  3. Optionally, in case of LDAP secured by the LDAPS or StartTLS protocols, provide the SSL settings, that is truststore certificate and its password.
Using SSL
The LDAP sensor uses the first access entry to connect to the LDAP service. To enforce using SSL, either put the SSL access entry for LDAP before entries with plain credentials or set the tryInsecureConnection property to false.

The installation could fail if SSL is enforced. By default http is used (http is hardcoded in DownloadFilesDeomPrimaryServerAction).

Trust store files limitation
Due to a limitation in Java, TADDM can handle only one truststore file for a single discovery of LDAP service. The certificates that are stored in the truststore file are loaded when the connection with LDAP service is established. Only those certificates can be used by Agile Service Manager during the entire discovery, so if certificates from several truststore files are required, do not attach them separately into the access list. You must export the original truststore files to a single file. When all necessary entries for each LDAP server are in the Agile Service Manager access list, the first one must have the exported truststore file attached. There is always one entry for each different login and password combination for the discovered LDAP servers.