LDAP SSL Error after upgrading to 10.1

[cchatter]

After upgrading to OD 10.1.0.3 from 9.0.0.3, seeing the error below and not able to authenticate to LDAP.  If SSL is turned off, authentication works fine.  Anyone see this problem before?  Anyone out there running this version with SSL to LDAP


Running GSK  8.0.50.75

2018-09-17 16:13:11.900262 ARSSOCKD           0 Error No    384 LDAP  Error: The SSL library cannot be loaded. -- ldap_rc=118,  --         

[Justin Derrick]

Check to make sure that you've also upgraded your version of GSKit, and that the environment variables containing the path to the GSKit is correct before you start arssockd.

Remember that CMOD is now a 64-bit application, so you may need lib64 or bin64 directories in your path.

-JD.

[jaggu1982]

JD, Issue is not resolved after upgraded gskit to latest fixpack 8.0.50.89 and LIBPATH is having lib64 directories. 

[teera_aoo]

Hi everyone,

(Posted on 2019)  ;D

Do you have resolution on this issue? Currently, we found problem like this forum.
The LIBPATH in my environment as below:
...
LIBPATH=/usr/opt/ibm/gsk8_64/lib64:/home/archive/sqllib/lib64:/usr/lib:/lib

Unfortunely, when start arssocked has this error, and cannot authen user with LDAPS.

[teera_aoo]

My problem has been solved by:
- Apply CMOD 10.1.0.5.
- Included gskit library from CMOD package (/usr/opt/ibm/gsk8_64/lib64) at begining of OS environment variable (LIBPATH (AIX), LD_LIBRARY (Linux))


Good luck!!  ::)  :-*  :o

[Ed_Arnold]

teera - thank you for posting your solution.

Ed

[nishen]

Hello,

I have done as you have instructed and applied FP5 to V10.1, I do not get the cannot load SSL libraries anymore, but i still cannot connect using SSL LDAP. Previously I was using LDAP but we are moving to using SSL LDAP.

I am just getting invalid credentials -- ldap_rc=49

I have enable server trace = 15 but i cannot see any details apart from the error. I am not even sure if I am making it to bind to LDAP yet. If I remove the SSL settings it does work, so nothing wrong with my user or bind user.

Please let me know if you can provide any direction so I check where it is failing.

Thank you
Nishen

[Justin Derrick]

CMOD LDAP error code 49:  LDAP_INVALID_CREDENTIALS    The client passed either an incorrect DN or password, or the password is incorrect because it has expired, intruder detection has locked the account, or another similar reason.

There's an article on the CMOD wiki for this as well:  https://cmod.wiki/index.php/LDAP_Error:_Invalid_credentials

-JD.