0

I need to replace two web servers with IIS 6 and Coldfusion MX Enterprise, but I'm having trouble connecting to LDAPS with the replacement servers. I followed the instructions at http://kb2.adobe.com/cps/191/tn_19139.html, to no avail. I know that it isn't a coding problem, as the same test page works in production.

Here are the steps I have taken

  • Updated Coldfusion to 7,0,2,142559
  • Installed Hotfix 3 cumulative (chf7020003.jar)
  • installed j2sdk1.4.2_11, which is the same version as is currently running in production.
  • configured Coldfusion to use this JVM (C:\j2sdk1.4.2_11\jre)
  • imported the same CA cert as is in production to the cacerts store under C:\j2sdk1.4.2_11\jre\lib\security\cacerts
  • ran this coldfusion page to test the connection (works fine in production)

<cftry>
    <cfldap action="QUERY"
       name="initialbind"
       attributes="dn"
       start="dc=company,dc=com"
       scope="Subtree"
       server="ldapauthnz.company.com"
       username= "uid=user,ou=accounts,dc=company,dc=com" 
       password= "password1"
       secure="CFSSL_BASIC"
        timeout="5" 
       port="636"
     >
     LDAPS is Working
     <cfcatch>
      LDAPS is not working
     </cfcatch>
    </cftry>
  • I can telnet to the LDAPS server successfully, so it is not a firewall problem

I'm not sure what other details would be useful for me to provide, please let me know.

ETA:

I got in touch with the LDAP admin to see if he could send me any log excerpts. He said that the logging was fairly useless, but pointed me to an updated cert. I installed the new cert and things are working now. Not sure why production works with the old cert and the new server doesn't, but things are working now. Thank you Terry and squillman for your help.

JamesCW
  • 309
  • 1
  • 4
  • 16
  • What error message do you get when you try to connect and it fails? – Terry Ryan Nov 06 '09 at 18:20
  • Here is the Exception from Coldfusion: 14:09:14.014 - Application Exception - in C:\Inetpub\wwwroot\ldap-try.cfm : line 11 Connection to LDAP Server failed – JamesCW Nov 06 '09 at 19:09

1 Answers1

0

My first thought would be a certificate problem when trying to establish the SSL connection. Do you see any connection attempts from the CF server in the LDAP server log? If so, what do they say?

squillman
  • 37,883
  • 12
  • 92
  • 146
  • Sadly, the LDAP server I have been trying to hit is maintained in a different department. I will have to set it up to connect to an LDAP server where I can get to the logs on Monday and let you know. – JamesCW Nov 07 '09 at 16:18