RE: rpg connecting to LDAP SSL

Dear Mike,

For SSL-LDAP init should be adapted.
(and definitions in DCM have to be created) .

<Code_snippet>
If LDAPPort1 = 636;
DCM_Id1 = %trim(DCM_ID); // QIBM_GLD_DIRSRV_CLIENT
rc = ldap_app_ssl_client_init_np(
DCM_id1 : sslreasonCode);
If rc <> LDAP_SUCCESS // 0 or 112
and rc <> LDAP_SSL_ALREADY_INITIALIZED; // 2nd pass;CONN=OK
Msg = %str(ldap_err2string(rc));
Msg = 'init_np err' + %trim(msg);
CallP #MSGSND('NUL0901':Msg);
EndIf;

ldap_Id = ldap_app_ssl_init_np(
LDAPSERVER1
: LDAPPort1);
Endif ;

If LDAPPort1 <>636; // not(*SSL)== *STD
ldap_Id = ldap_init(LDAPSERVER1: LDAPPort1);
If ldap_Id = *NULL;
rc = ldap_get_errno(ldap_Id);
Msg = %str(ldap_err2string(rc));
CallP #MSGSND('NUL0901':Msg);
LDAPPort1 = LDAPS_PORT;
LDAPServer1= LDAPS_NTSVR;
EndIf;
EndIf;
</code_snippet>

Best regards, Luc


Luc PITTOORS
Informatica - Informatique

ABVV-FGTB | Hoogstraat 42 | 1000 Brussel
Tel: 02/506.82.37 | Fax: 02/550.14.11
Luc.PITTOORS@xxxxxxx | www.abvv.be


----------------------------------------------------------------------

date: Fri, 7 Feb 2020 13:18:18 -0600
from: Scott Klement <rpg400-l@xxxxxxxxxxxxxxxx<mailto:rpg400-l@xxxxxxxxxxxxxxxx>>
subject: Re: rpg connecting to LDAP

I have not used SSL with LDAP, sorry.

I'm sure its possible, you'd just have to figure out how from the IBM docs.

On 2/7/2020 9:33 AM, Smith, Mike wrote:

I have an old program that we have been using for connecting to the Microsoft LDAP. I believe this was written by Scott K, but I'm not positive about that.

There are some references to this program here https://archive.midrange.com/rpg400-l/200206/msg00503.html
I was just informed that Microsoft has made a change requiring SSL and I need to make a change accordingly.
Apparently I now have to use port 636
I have made the change to use that port, but I can no longer connect.

I think I need to take LDAP_OPT_SSL, and maybe other options, but I am not sure how, where to use these.

If anybody is familiar with this and can point out what I need to use, I would appreciate it.

Thanks

MIke

NOTICE: This message, including any attachment, is intended as a confidential and privileged communication. If you have received this message in error, or are not the named recipient(s), please immediately notify the sender and delete this message.

------------------------------------------------------------------------------
+++ ABVV-FGTB maildisclaimer <http://www.abvv.be/web/guest/maildisclaimer> +++