Q1

Why am I getting an error when I attempt to validate an admin connection to an LDAP resource?

A1

Connecting to an LDAP server, prefixing the host with ssl://, establishes an SSL connection. However, after doing this, the connection fails and gives the following error message:

[error 81] Can't connect to the LDAP server

The error message occurs because of the absence of the necessary SSL certificate in the certificate database, or because of the absence of the certificate database itself. The certificate database is required to enable an LDAP client library to establish an SSL connection. You need to manually create and populate the certificate database that contains the necessary certificate by following this procedure:

1. Download and install Netscape's 4.xx web browser.

2. Run the Netscape browser.

3. Open the following URL: https://YourLDAPServer:sslport.

• • YourLDAPServer - Your LDAP server address, provided as an IP address or a host name.

  • sslport - The port number used by your LDAP server to accept SSL connections.

4. The Netscape Certificate Assistant window opens. Follow the instructions provided there, and accept the server certificate for this and future sessions.

5. Copy the secmod.db, cert7.db, and key3.db files from the Netscape user profile directory to the Magic xpi root directory.