Hi All,

Please help me...!!

While configuring LDAP repository under fedarated registry i am getting below error.

I have retrived LDAP server certificate in Cell level. Still  i am getting this error when i enable SSL in LDAP with 636 port i am facing the problem,  with 389 port there is no problem.

With the same details SSL 636 port,  i am able to configure LDAP repository in different WAS server.

CWWIM5020E Could not connect to the 192.168.46.7:636 repository using properties: [port=636],[primary_host=192.168.46.7],[bindDN=cn=sdtnew,ou=sdt,DC=uatdc,DC=local],[certificateMapMode=exactdn],[sslConfiguration=],[sslEnabled=true],[connectTimeout=0],[id=Fusion],[ldapServerType=AD],[host=192.168.46.7],[referal=ignore],[certificateFilter=],[bindPassword=****],[authentication=simple],.


Thanks,
Chinna.

Can you check whether firewall port is opened between you WAS server and LDAP server or not.

execute below query from WAS box

telnet 192.168.46.7 636

Thanks

Chinna,

  Have you imported WAS certificate in LDAP server SSL repository?

regards

Hi All,

I have imported LDAP certificate in WAS level, i am able to telnet 636 port from WAS server ot LDAP.

I am not aware what is stopping me to create LDAP configution.


Thanks,
Chinna.

are you trying  to add any backup ldap servers during federated repository configuration . can you check and provide more details regarding your security configuration.

Thanks
Venkata

Hi All,

We have changed LDAP server certificate. Post that i have imported new LDAP certificate in WAS after that i deleted old LDAP certificate in WAS. While  creating LDAP registry, when i do test connection in the error message showing its trying to connect to old certificate.  Old certificate is not avilable in WAS and LDAP server.

SECJ7340E: Exception raised trying to connect to LDAP server: NamingException: simple bind failed: 116.90.244.22:636 javax.net.ssl.SSLHandshakeException: com.ibm.jsse2.util.g: PKIX path validation failed: java.security.cert.CertPathValidatorException: The revocation status of the certificate with subject (OID.0.9.2342.19200300.100.1.3=harpreetsingh.chopra@dc.ibm.com, UID=121961IN1, CN=MTP-HRHD-DC02.onetouch.local, OU=GPS, O=ibm.com, L=Bangalore, ST=Bangalore, C=IN) could not be determined.

When i imported old certificate in WAS, this time i am able to do test connection.

i am not aware what is causing the problem. 

For testing i have craeted one new appserver profile, in this profile i have imported new LDAP server certificate and woking fine.



Thanks,
Chinna

 

If its stand alone , it might required to restart of application server after you imported ldap cert into websphere trust.p12

or

enable below option , from console navigate to security--->ssl certifciate and keymanagement--> u can find the below option.

Dynamically update the run time when SSL configuration changes occur 


Thanks
Venkat