HP CIFS Server 3.0b Administrator's Guide version A.02.01.01

LDAP Integration Support
Enabling Secure Sockets Layer (SSL)
Chapter 6 127
Enabling Secure Sockets Layer (SSL)
The HP CIFS Server provides Secure Sockets Layer (SSL) support to
secure communication between CIFS servers and SSL enabled LDAP
directory servers.
If you plan to use SSL and it is not already in use for LDAP, you need to
enable it on the Netscape Directory Server and LDAP-UX clients. When
you have enabled the LDAP server and clients, then you can configure
the HP CIFS Server to use SSL.
You must set up the Certification Authority (CA) Server properly before
you plan to enable SSL communication over LDAP.
Read the following subsections for more information on configuring the
LDAP directory server, LDAP-UX client and HP CIFS Server with SSL
support if you plan to use it.
Configuring the Netscape Directory Server to enable
SSL
Use the following steps to configure your Netscape Directory Server to
enable SSL communication over LDAP:
Step 1. Obtain and install a certificate for your Netscape Directory Server, and
configure the Netscape Directory Server to trust the Certification
Authority’s (CA’s) certificate.
For detailed instructions, see the “Obtaining and Installing Server
Certificates” section of the “Managing SSL” chapter in Netscape
Directory Server 6.1 Administrator’s Guide at http://docs.hp.com.
Step 2. Turn on SSL in your directory.
For detailed instructions on how to enable SSL in your directory server,
see the “Activating SSL” section of the “Managing SSL” chapter in
Netscape Directory Server 6.1 Administrator’s Guide at
http://docs.hp.com.
Step 3. Configure the Administration Server to connect to an SSL-enabled
directory server.