Hi all,

I'm trying to connect client to ldap using java program but i'm getting the following error dump.

[02-11-15 05:45:58:331 CST] ajp-bio-8009-exec-23 22 example_internal_admin ERROR authentication.LDAPAuthenticationUtil:60 - Trust Store /opt/jdk1.7.0_17/jre/lib/security/jssecacerts- KeyStorenull
[02-11-15 05:45:58:394 CST] ajp-bio-8009-exec-23 22 example_internal_admin ERROR admin.UserAction:864 - Error getting ldap user list
javax.naming.CommunicationException: simple bind failed: ldap1.dp.example.com:636 [Root exception is javax.net.ssl.SSLHandshakeException: Received fatal alert: bad_certificate]
at com.sun.jndi.ldap.LdapClient.authenticate(LdapClient.java:215)
at com.sun.jndi.ldap.LdapCtx.connect(LdapCtx.java:2740)
at com.sun.jndi.ldap.LdapCtx.<init>(LdapCtx.java:316)
at com.sun.jndi.ldap.LdapCtxFactory.getUsingURL(LdapCtxFactory.java:193)
at com.sun.jndi.ldap.LdapCtxFactory.getUsingURLs(LdapCtxFactory.java:211)
at com.sun.jndi.ldap.LdapCtxFactory.getLdapCtxInstance(LdapCtxFactory.java:154)
at com.sun.jndi.ldap.LdapCtxFactory.getInitialContext(LdapCtxFactory.java:84)
at javax.naming.spi.NamingManager.getInitialContext(NamingManager.java:684)
at javax.naming.InitialContext.getDefaultInitCtx(InitialContext.java:307)
at javax.naming.InitialContext.init(InitialContext.java:242)
at javax.naming.InitialContext.<init>(InitialContext.java:216)
at javax.naming.directory.InitialDirContext.<init>(InitialDirContext.java:101)
at com.receivablesradius.deductions.action.authentication.LDAPAuthenticationUtil.authenticate(LDAPAuthe nticationUtil.java:61)
at com.receivablesradius.deductions.action.authentication.LDAPAuthenticationUtil.getListOfUsers(LDAPAut henticationUtil.java:92)
at com.receivablesradius.deductions.action.authentication.LDAPAuthenticationUtil$$FastClassByCGLIB$$518 e006d.invoke(<generated>)
at net.sf.cglib.proxy.MethodProxy.invoke(MethodProxy.java:149)
at org.springframework.aop.framework.Cglib2AopProxy$CglibMethodInvocation.invokeJoinpoint(Cglib2AopProx y.java:688)
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java :150)
at org.springframework.aop.interceptor.AbstractTraceInterceptor.invoke(AbstractTraceInterceptor.java:11 3)
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java :172)
at org.springframework.aop.interceptor.AbstractTraceInterceptor.invoke(AbstractTraceInterceptor.java:11 3)
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java :172)
at org.springframework.aop.interceptor.ExposeInvocationInterceptor.invoke(ExposeInvocationInterceptor.j ava:89)
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java :172)
at org.springframework.aop.framework.Cglib2AopProxy$DynamicAdvisedInterceptor.intercept(Cglib2AopProxy. java:621)
at com.receivablesradius.deductions.action.authentication.LDAPAuthenticationUtil$$EnhancerByCGLIB$$f01d f5fd.getListOfUsers(<generated>)
at com.receivablesradius.deductions.action.admin.UserAction.getListOfLdapUserNames(UserAction.java:861)
at com.receivablesradius.deductions.action.admin.UserAction$$FastClassByCGLIB$$f5389eaa.invoke(<generat ed>)
at net.sf.cglib.proxy.MethodProxy.invoke(MethodProxy.java:149)
at org.springframework.aop.framework.Cglib2AopProxy$CglibMethodInvocation.invokeJoinpoint


Can any one please provide a solution for it?

Thanks & Regards,
Adil.

It should be this:

Your connection to the LDAP server didn't succeed because something is wrong with your certificate.

Hi berndbausch,

We don't any issues with the certificate ,certificate is fine because we have imported same certificate to client and server as well but still it's failed also check the ldap port 636 it's open .So what can be the reason behind bad certificate?

Thanks,
Adil.

I would then investigate the local certificate setup - correct directories? Permissions?
Also check the java programming forums or stackoverflow. My web search for "java ldap bind bad certificate" yields 170.000 results; there must be one that matches your environment.