Failed to create AD account , LDAP issue

[former_member243324]

Hi All Experts,

I tried to create AD account from IDM but failed. IDM connected to AD by LDAP directly.

Error (File attached) is

ToDSADirect.init got exception, returning false. - URL:ldap://ServerName.YYYY.ca:636

java.lang.Throwable: YYYY.YYYY.ca:636

I have no issue for initial load. I use LDAP Browser ( third party app)  and able to connect with 636 port.

In LDAP Browser, it connects to ldaps://ServerName.YYYY.ca:636

Since i am using SSL port to create AD account, should we update the ldap -> ldaps ? If yes, how to do it?

Regards,

Shunji

[former_member2987 · Accepted solution]

Hi Shunji,

Yes, if you are communicating on 636, you need to do LDAPS and import the certificate to the Java keystore.  I think there is documentation around somewhere regarding this.

Regards,

Matt

[former_member243324 · Accepted solution]

Thank again!

I asked BASIS Team to import the AD SSL and it works!