Using Jxplorer to test LDAP SSL connectivity for ARSystem

Legacy ID:KA393621

Using Jxplorer to test LDAP SSL connectivity
JXplorer is a free open source cross platform LDAP browser and editor. It is a standards compliant general purpose LDAP client that can be used to read and search any LDAP directory, or any X500 directory with an LDAP interface
You can use Jxplorer to test the LDAP functionality in ARSystem.   Since it is standards-based, and built on Java, it is a good tool for testing LDAP functionality outside of the ARSystem LDAP integrations.

Some of the functionalities that you might use with JExplorer are:
- Connecting and Binding using Simple Bind.
- Connecting and Binding over SSL.
- View LDAP data.
- Perform LDAP searches.

To get started:
Download and install Jxplorer from http://www.jxplorer.org/downloads/users.html

To Test  SSL connectivity, perform the following:

1.       Launch Jxplorer from Windows
          

2.       Attach the Keystore

a.       Click on ‘Security/Advanced Keystore Options’
                       

            i.      Provide the full path and filename to the keystore that you provided in the AREA LDAP Configuration form or ARDBC LDAP Configuration form.  Provide the same value for both keystore fields.  Use the JKS type for both

b.      Click OK to continue

3.       Click on File/Connect

a.       Provide the correct information for your LDAP SSL connection
                      

            i.      The Host:  value should match the hostname or domainname stored in your SSL certificate.
                   This should also match the hostname used in the AREA or ARDBC LDAP Configuration

            ii.      The default port for SSL is 636

            iii.      The Base DN is optional. But can be provided, such as:

          1.       Cn=users,dc=wst,dc=labs,dc=bmc,dc=com

            iv.      Use a ‘level’  of “SSL+User+Password”

            v.      User DN can be the distinguished name or <domain>\<account name>

b.      Click ‘OK’

4.       You can  now Navigate the tree structure to look for data
          

5.       Perform a Search

a.       Create an attribute List to return

                                                                           i.      Click on ‘Search/Return Attributes’

                                                                         ii.     

                                                                        iii.      Provide a Name for this list of attributes, such as Name

                                                                       iv.      Add attributes to the right-hand pane to include in your search results

                                                                         v.      Click on Save

b.      Choose one of the following methods to search

                                                                         i.      Click on ‘Search/Search Dialog’

                                                                         ii.      Right-click on the appropriate Base DN in the left-hand pane and choose ‘Search’
                                                                          

c.       Leave the Filter Name alone unless you want to Save the search

d.      Ensure that the correct BaseDN is populated in the ‘Start Search From:’ field

e.      Choose ‘Search Full Subtree’

f.        Click on the ‘Information to retrieve:’ menu and choose the appropriate attribute list that you created

g.       To manually provide the LDAP search, such as when copying the LDAP Search url from a plugin log,  click on the ‘Text Filter’  tab and provide the search string
          

h.      The results will be returned in a dialog