After Removing Second LDAP Server From OVD Adapter, OVD Attempts To Connect To It Using Non-SSL Which Fails With Log Errors: [LDAP: error code 10 - Referral] / simple bind failed: [secondhost:nonsslport] / Unrecognized SSL message, plaintext connection? (Doc ID 1540700.1)

Last updated on APRIL 06, 2021

Applies to:

Symptoms

Oracle Virtual Directory (OVD) 11g, e.g., 11.1.1.5.0 integrated with Oracle Identity Manager (OIM).

Scenario:
Originally only had Oracle Virtual Directory (OVD) configured to communicate with one LDAP server (i.e., Oracle Directory Server Enterprise Edition or ODSEE 11GR1) via SSL, which had been working fine.  Recently added a second ODSEE LDAP server, and also configured them for replication.  Added the second ODSEE LDAP server to the OVD Adapter as a second host, and set a weight value of 50 on the 1st LDAP and a weight value of 50 on the 2nd LDAP.  The failover mode was set to distributed.

This worked fine until attempted to create user objects in OIM, which failed with OIM log error:

Tried to remove the second LDAP from the OVD Adapter, but when trying to bring the second LDAP server up, OVD keeps attempting to connect to it over non-SSL, which fails with the OVD diagnostic.log error below (the error is expected because the non-ssl port is not open):

Followed by:

This also causes OIM to become unresponsive and the whole integration becomes unusable.

Tried:
- Restarting the OVD Server and the entire WLS stack.
- Checked that no open connections returned from issuing commands: netstat -an | grep <ODSEE_HOSTNAME2>, netstat -an | grep <, netstat -an | grep <PORT>.
- Verified there was no occurrence of the second hostname, IP address or port number <PORT> in any of the OVD config files.
- Also verified that no occurrence of the hostname, IP or port returned by traversing the entire FMW_Home directories, i.e., grep -R <ODSEE_HOSTNAME2> *, and only log entries returned.