RE: rpg connecting to LDAP SSL

[<Luc.PITTOORS@xxxxxxx>]

Dear Mike,

For SSL-LDAP  init should be adapted.
(and definitions in DCM have to be created) .

<Code_snippet>
        If LDAPPort1  = 636;
            DCM_Id1    = %trim(DCM_ID);                        // QIBM_GLD_DIRSRV_CLIENT
            rc = ldap_app_ssl_client_init_np(
                 DCM_id1 : sslreasonCode);
            If  rc <> LDAP_SUCCESS                             // 0 or  112
            and rc <> LDAP_SSL_ALREADY_INITIALIZED;            // 2nd pass;CONN=OK
               Msg = %str(ldap_err2string(rc));
               Msg = 'init_np err' + %trim(msg);
               CallP #MSGSND('NUL0901':Msg);
            EndIf;

            ldap_Id = ldap_app_ssl_init_np(
                 LDAPSERVER1
                 : LDAPPort1);
       Endif ;

     If LDAPPort1 <>636;                                       // not(*SSL)== *STD
         ldap_Id = ldap_init(LDAPSERVER1: LDAPPort1);
         If ldap_Id = *NULL;
            rc  = ldap_get_errno(ldap_Id);
            Msg = %str(ldap_err2string(rc));
            CallP #MSGSND('NUL0901':Msg);
            LDAPPort1  = LDAPS_PORT;
            LDAPServer1= LDAPS_NTSVR;
         EndIf;
      EndIf;
</code_snippet>

Best regards, Luc


Luc PITTOORS
Informatica - Informatique

ABVV-FGTB | Hoogstraat 42 | 1000 Brussel
Tel: 02/506.82.37 |  Fax: 02/550.14.11
Luc.PITTOORS@xxxxxxx | www.abvv.be


----------------------------------------------------------------------

date: Fri, 7 Feb 2020 13:18:18 -0600
from: Scott Klement <rpg400-l@xxxxxxxxxxxxxxxx<mailto:rpg400-l@xxxxxxxxxxxxxxxx>>
subject: Re: rpg connecting to LDAP

I have not used SSL with LDAP, sorry.

I'm sure its possible, you'd just have to figure out how from the IBM docs.

On 2/7/2020 9:33 AM, Smith, Mike wrote:
> I have an old program that we have been using for connecting to the Microsoft LDAP.  I believe this was written by Scott K, but I'm not positive about that.
>
> There are some references to this program here https://archive.midrange.com/rpg400-l/200206/msg00503.html
> I was just informed that Microsoft has made a change requiring SSL and I need to make a change accordingly.
> Apparently I now have to use port 636
> I have made the change to use that port, but I can no longer connect.
>
> I think I need to take LDAP_OPT_SSL, and maybe other options, but I am not sure how, where to use these.
>
> If anybody is familiar with this and can point out what I need to use, I would appreciate it.
>
> Thanks
>
> MIke
>
> NOTICE: This message, including any attachment, is intended as a confidential and privileged communication. If you have received this message in error, or are not the named recipient(s), please immediately notify the sender and delete this message.

------------------------------------------------------------------------------
+++ ABVV-FGTB maildisclaimer <http://www.abvv.be/web/guest/maildisclaimer> +++