Switching to LDAPS

unknown

I have been working on switching from LDAP to LDAPS.  On the LSF side, it is very inconsistent.  Sometimes, it works fine.  Other times, I receive an error like:

Failed to initialize LDAP. Detailed Message is javax.naming.CommunicationException: simple bind failed: <AD LDS IP>:<LDAPS port>

Other times, the message is:

INCIDENT_ID#1590554788506-1544 An error occurred outside of IOS while accessing Lawson RM

Is there any troubleshooting I can do?  I am not able to consistently replicate the issue.

unknown

Are you switching ADLDS to use LDAPS, or a BIND?

ADLDS is VERY picky about certificates. And before switching LSF you need to make sure ADLDS itself is working properly (you can do so via LDP).

On the LSF/BIND side you need to check why it fails exactly. Your LASE logs will PROBABLY contain the real reason (SSL issues, BIND issues etc)

Re: inconsistency - this can also happen for variety of reasons, for instance, if the FQDN you BIND to is done via round-robin in DNS, and some of the servers you're trying to BIND to are uinavailable, at least via SSL. Again, LASE logs will help in this case.