https://answers.axonivy.com/questions/4329/change-ivy-3-9-ldap-to-ldaps-not-working<p>Hello,</p> <p>We need to change our LDAP connection to LDAPS but we received the following error. simple bind failed: dc.domain.local With a 3rd party LDAP Browser it is working from this machine.</p> <p>Thanks Regards sys-adm</p>enWed, 29 Jan 2020 09:36:09 -0500https://answers.axonivy.com/questions/4329/change-ivy-3-9-ldap-to-ldaps-not-working#4343<p>alright! thank you very much for this answer here!</p>Alex SuterWed, 29 Jan 2020 09:36:09 -0500https://answers.axonivy.com/questions/4329/change-ivy-3-9-ldap-to-ldaps-not-working#4343https://answers.axonivy.com/questions/4329/change-ivy-3-9-ldap-to-ldaps-not-working/4342<p>Problem is solved. Thanks to Alex for your great help.</p> <p>We have imported the root and intermediate certificate to the java truststore from our IVY setup.</p> <pre><code>jre\bin\keytool -import -alias test -file &lt;path to the certificate&gt; -keystore jre\lib\security\cacerts </code></pre> <p>Some pitfalls was that our domaincontroller had multiple certificates. Between the changes was a reboot helpful. </p>sys-admWed, 29 Jan 2020 09:20:30 -0500https://answers.axonivy.com/questions/4329/change-ivy-3-9-ldap-to-ldaps-not-working/4342https://answers.axonivy.com/questions/4329/change-ivy-3-9-ldap-to-ldaps-not-working#4341<p>Ok we have now found the issue. Our domaincontroller had 2 certificates. One from the old CA that no longer exist and the new one. After we have cleaned the server certificate on our domiancontroller it is working.</p>sys-admWed, 29 Jan 2020 09:15:52 -0500https://answers.axonivy.com/questions/4329/change-ivy-3-9-ldap-to-ldaps-not-working#4341https://answers.axonivy.com/questions/4329/change-ivy-3-9-ldap-to-ldaps-not-working#4340<p>it was just a guess. you don't have a stacktrace somewhere?</p>Alex SuterWed, 29 Jan 2020 08:03:52 -0500https://answers.axonivy.com/questions/4329/change-ivy-3-9-ldap-to-ldaps-not-working#4340https://answers.axonivy.com/questions/4329/change-ivy-3-9-ldap-to-ldaps-not-working#4339<p>Ok it was the java default password for the truststore. We have now imported our root and intermediate certificate from the internal ca. But it is not working. Same error message.</p>sys-admWed, 29 Jan 2020 08:03:02 -0500https://answers.axonivy.com/questions/4329/change-ivy-3-9-ldap-to-ldaps-not-working#4339https://answers.axonivy.com/questions/4329/change-ivy-3-9-ldap-to-ldaps-not-working#4338<p>who has asked you for a password??</p>Alex SuterWed, 29 Jan 2020 08:02:01 -0500https://answers.axonivy.com/questions/4329/change-ivy-3-9-ldap-to-ldaps-not-working#4338https://answers.axonivy.com/questions/4329/change-ivy-3-9-ldap-to-ldaps-not-working#4336<p>Thanks for your answer. We have tried and they ask us for a password. Is this a default password or was this set on the setup?</p>sys-admWed, 29 Jan 2020 07:15:49 -0500https://answers.axonivy.com/questions/4329/change-ivy-3-9-ldap-to-ldaps-not-working#4336https://answers.axonivy.com/questions/4329/change-ivy-3-9-ldap-to-ldaps-not-working#4334<p><a href="https://answers.axonivy.com/questions/421/import-certificate-for-https-web-service-calls">https://answers.axonivy.com/questions/421/import-certificate-for-https-web-service-calls</a></p>Alex SuterWed, 29 Jan 2020 06:47:35 -0500https://answers.axonivy.com/questions/4329/change-ivy-3-9-ldap-to-ldaps-not-working#4334https://answers.axonivy.com/questions/4329/change-ivy-3-9-ldap-to-ldaps-not-working#4332<p>Where i can put the certificate to the truststore? You have some tips for this? Thanks for your help.</p>sys-admWed, 29 Jan 2020 03:09:22 -0500https://answers.axonivy.com/questions/4329/change-ivy-3-9-ldap-to-ldaps-not-working#4332https://answers.axonivy.com/questions/4329/change-ivy-3-9-ldap-to-ldaps-not-working#4331<p>Maybe you need to put the certiface in the JVM trustore of ivy.</p>Alex SuterTue, 28 Jan 2020 12:01:10 -0500https://answers.axonivy.com/questions/4329/change-ivy-3-9-ldap-to-ldaps-not-working#4331