LDAP over SSL User Authentication

Hi,

We would like to delegate the user authentication to a LDAP server. SD+ supports this but I didn't really see any option to connect to the LDAP over SSL. Specifying ldaps:// as URI or port 636 as 'Domain Controller' results in an error.

According to a response of a sales rep, SD+ does support it, i assume via java's keytool functionality.

I did import the self-signed SSL certificates of our LDAP servers in the server/default/conf/sdp.keystore

Now I see following output in the serverout log file

[14:37:42:733]|[05-06-2011]|[SYSOUT]|[INFO]|[24]|: javax.naming.CommunicationException: simple bind failed: ldapit1:636 [Root exception is javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target]|

Adding them the global jre keystore still results in this

My question is: was this the wrong keystore? Or where do I have to import those certificates?

Thanks in advance