IBM Verify

IBM Verify

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  How to troublshoot docker container connectivity.

    Posted Tue August 11, 2020 07:36 PM

    I'm setting up an ISVA 10.0 docker environment and I'm having problems during configuration. I'm attempting to load the SSL certificate from the openldap container and I get the message "DPWAP0061E The server certificate could not be retrieved from openldap at port 636". I'm setting up this environment on Centos using VMWare Fusion. From the centos image, I can ping the openldap and isvaconfig containers. However, the containers do not have the ping or traceroute commands so I can't verify their connectivity to each other. I also can't seem to find the openldap log files to see if those logs show anything.



    #Support
    #SupportMigration
    #Verify


  • 2.  RE: How to troublshoot docker container connectivity.

    Posted Tue August 11, 2020 09:09 PM

    Per our conversation check the openldap container logs with "docker logs container" command and check for any obvious connectivity issues. We can go from there.



    #Support
    #SupportMigration
    #Verify


  • 3.  RE: How to troublshoot docker container connectivity.

    Posted Wed August 12, 2020 08:39 AM

    If you need some assets compare, I have v10 container deployment assets at: https://github.com/iamexploring/container-deployment.

    This includes scripts for generating keys for OpenLDAP and PostgreSQL which are then mounted (as bind-mounts or secrets depending on platform) into the containers.



    #Support
    #SupportMigration
    #Verify