# Graylog 6.0.4 Active Directory setup **URL:** \ **Category:** Graylog Central (peer support)\ **Created:** [July 26, 2024, 2:53pm UTC](https://community.graylog.org/t/graylog-6-0-4-active-directory-setup/33101 "2024-07-26T14:53:03Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![hebval](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/hebval/32/12473_2.png) [@hebval](https://community.graylog.org/u/hebval)\ **Post date:** [July 26, 2024, 2:53pm UTC](https://community.graylog.org/t/graylog-6-0-4-active-directory-setup/33101/1 "2024-07-26T14:53:03Z")
**1. Describe your incident:** I can’t configure the Active Directory Authentication Service. When I set up my server address, the username, and the password, I get the following error message : - An error occurred while attempting to connect to server [myserver.com:636](http://myserver.com:636): IOException(LDAPException(resultCode=91 (connect error), errorMessage=‘An error occurred while attempting to establish a connection to server [myserver.com/X.X.X.X:636:](http://myserver.com/X.X.X.X:636:) SSLHandshakeException(PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target), ldapSDKVersion=7.0.0, revision=323ff4fd3d622b96522298f300abc6915d0c209b’)) **2. Describe your environment:** - OS Information: Debian 12 - Package Version:6.0.4 - Service logs, configurations, and environment variables: **3. What steps have you already taken to try and solve the problem?** I added my root CA to the Debian certificate store, but I guess I need to add it to the JVM store ? But I can’t find it… **4. How can the community help?** Help me finding out how to install my root CA to the JVM certificate store. My install is pretty basic, everything is by default, freshly installed. Thanks ! **Helpful Posting Tips:** [Tips for Posting Questions that Get Answers](https://community.graylog.org/t/tips-for-posting-questions-that-get-answers/21828) [Hold down CTRL and link on link to open tips documents in a separate tab] ---
**Author:** ![Wine\_Merchant](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/wine_merchant/32/14596_2.png) [@Wine\_Merchant](https://community.graylog.org/u/Wine_Merchant)\ **Post date:** [July 26, 2024, 3:32pm UTC](https://community.graylog.org/t/graylog-6-0-4-active-directory-setup/33101/2 "2024-07-26T15:32:34Z")
Hello @hebval, Graylog ships with java and the keystore can be found here /usr/share/graylog-server/jvm/lib/security/cacerts, it is recommended you make a copy of this keystore to /etc/graylog (or wherever) and use that. Make sure the copy have the correct permissions and ownership. ---
**Author:** ![drewmiranda-gl](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/drewmiranda-gl/32/13376_2.png) [@drewmiranda-gl](https://community.graylog.org/u/drewmiranda-gl)\ **Post date:** [July 26, 2024, 3:33pm UTC](https://community.graylog.org/t/graylog-6-0-4-active-directory-setup/33101/3 "2024-07-26T15:33:43Z")
This article covers the basics of working with the keystore and how to configure graylog to use it: [How-To Guide: Securing Graylog with TLS](https://graylog.org/post/how-to-guide-securing-graylog-with-tls/) ---
**Author:** ![hebval](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/hebval/32/12473_2.png) [@hebval](https://community.graylog.org/u/hebval)\ **Post date:** [July 29, 2024, 8:44am UTC](https://community.graylog.org/t/graylog-6-0-4-active-directory-setup/33101/4 "2024-07-29T08:44:10Z")
Hey @Wine_Merchant & @drewmiranda-gl, thanks to both of you ! I didn’t have my root CA added to the Java Key Store. Now it’s all good. Have a nice day. 🙂 ---
**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\ **Post date:** [August 12, 2024, 8:44am UTC](https://community.graylog.org/t/graylog-6-0-4-active-directory-setup/33101/5 "2024-08-12T08:44:20Z")
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.