[midPoint] Self-signed SSL certificate problem with exchange connector

[Ващенков Алексей]

The user is in both groups local and domain administrators.
Do you suppose that user must be only in local administrator group?

Sent: Wednesday, June 24, 2015 2:55 PM
To: midpoint at lists.evolveum.com
Subject: Re: [midPoint] Self-signed SSL certificate problem with exchange connector

Please try to add that account to local Administrators on that computer (not Domain Administators). I remember situation where this helped. I also remember to have written it somewhere :-(

Ivan
On 06/24/2015 01:50 PM, Ващенков Алексей wrote:
Thanks.
I helped a little bit. The documentation doesn’t pointed that also I need to add the certificate to trusted roots using mmc.
After we imported certificate and add it ti trusted roots I’ve got an access denied exception. We try to start connector as System and as Administrator but in both cases access exception throws.
May be I miss some preferences?

From: midPoint [mailto:midpoint-bounces at lists.evolveum.com] On Behalf Of Ivan Noris
Sent: Wednesday, June 24, 2015 10:54 AM
To: midpoint at lists.evolveum.com<mailto:midpoint at lists.evolveum.com>
Subject: Re: [midPoint] Self-signed SSL certificate problem with exchange connector

Hi Алексей,

please check your steps with https://wiki.evolveum.com/display/midPoint/.NET+Connector+Server

Last time I was connecting AD through SSL, it helped me.

Regards,
Ivan
On 06/24/2015 09:42 AM, Ващенков Алексей wrote:
Hi.
We use self-signed certificate for connection to powershell. In process to add account using Exchange connector throws an exception
====
The SSL certificate is signed by an unknown certificate authority. For more information, see the about_Remote_Troubleshooting Help topic. Cannot validate argument on parameter 'Session'. The argument is null. Supply a non-null argument and try the command again.
We have added certificate to trusted roots in internet settings. But it doesn’t take any effect.
What should we do to prevent this exception throwning?





_______________________________________________

midPoint mailing list

midPoint at lists.evolveum.com<mailto:midPoint at lists.evolveum.com>

http://lists.evolveum.com/mailman/listinfo/midpoint




--

  Ing. Ivan Noris

  Senior Identity Management Engineer & IDM Architect

  evolveum.com                     evolveum.com/blog/

  ___________________________________________________

  "Semper Id(e)M Vix."




_______________________________________________

midPoint mailing list

midPoint at lists.evolveum.com<mailto:midPoint at lists.evolveum.com>

http://lists.evolveum.com/mailman/listinfo/midpoint



--

  Ing. Ivan Noris

  Senior Identity Management Engineer & IDM Architect

  evolveum.com                     evolveum.com/blog/

  ___________________________________________________

  "Semper Id(e)M Vix."
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20150624/8b87d6c4/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: exchange-settings-1.PNG
Type: image/png
Size: 29516 bytes
Desc: exchange-settings-1.PNG
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20150624/8b87d6c4/attachment.png>