1. pkg install openldap-client (Not really necessary, but useful for testing LDAP)
2. copy /usr/local/etc/openldap/* files from freefall.freebsd.org to the Jenkins host

1. make sure that Jenkins LDAP Plugin is installed
2. follow Jenkins Standard Security Setup, configuring LDAP
   1. Enabled Matrix Based Security. Create a user in the UI with the same login id as in LDAP.
   2. Look at the config files in /usr/local/etc/openldap/ and put enter the parameters in the Jenkins LDAP Plugin cofiguration UI
   3. Use ldaps:// for the URL so that SSL is used.

For ldaps:// , it may be necessary to add the certificate associated with the LDAP server to the JDK's list of trusted certificates. This is especially true if the certificate is self-signed. If you don't do this, then authentication errors will occur.

If this is necessary, then you should:

1. Make sure that the opendjk is installed from ports.
2. Read: https://issues.jenkins-ci.org/browse/JENKINS-3810
3. Obtain the certificate for the LDAP server from clusteradm@freebsd.org
4. Find the values for $LDAPSERVER1, $LDAPSERVER2 by looking at the config files above
5. Import certificate:

keytool -import -trustcacerts -alias $LDAPSERVER1 -file ldap.crt -keystore $JAVA_HOME/lib/security/cacerts
keytool -import -trustcacerts -alias $LDAPSERVER2 -file ldap.crt -keystore $JAVA_HOME/lib/security/cacerts

Default password for openjdk certificate store is: '''changeit'''