My Oracle Support Banner

After syncovdconfig, OVD 11g Target Server Shows AD Adapter Error Status; "Verify Host" Button Shows "Could not obtain current aliases"; Connections to AD Fail With: ldap_bind: Protocol error (2) / additional info: LDAP Error 2 : <AD_HOSTNAME>:<SSL_PORT>. (Doc ID 1986037.1)

Last updated on DECEMBER 20, 2019

Applies to:

Oracle Virtual Directory - Version and later
Information in this document applies to any platform.


Oracle Virtual Directory Server (OVD) 11g, i.e.,

Following MOS Notes and documentation to synchronize OVD configuration with syncovdconfig.

The command itself runs successfully.  However, in the target/destination OVD server, the connection to backend Active Directory (AD) servers via SSL port 636 fails with:

ldap_bind: Protocol error (2)
       additional info: LDAP Error 2 : <AD_HOSTNAME>:<SSL_PORT>.

In the AD Adapter configuration page, the LDAP / AD Server status is just "Error".

Clicking on "Verify Host" button returns:

Could not obtain current aliases

OVD diagnostic.log shows:

[2015-02-19T11:12:03.536-05:00] [octetstring] [WARNING] [OVD-60024] [com.octetstring.vde.backend.jndi.<AD_ADAPTER_NAME>.JNDIConnectionPool] [tid: xx] [ecid: <ECID>] Connection error: <AD_HOSTNAME>:<SSL_PORT>.
[2015-02-19T11:12:03.536-05:00] [octetstring] [ERROR] [OVD-60143] [com.octetstring.vde.backend.jndi.<AD_ADAPTER_NAME>.BackendJNDI] [tid: xx] [ecid: <ECID>]  [#<AD_ADAPTER_NAME>]  Unable to create connection to ldap://<AD_HOSTNAME>:<SSL_PORT>. as null.[[
javax.naming.CommunicationException: <AD_HOSTNAME>:<SSL_PORT>. [Root exception is Cannot create SSL socket factory.]
Caused by: Cannot create SSL socket factory.

Workaround: Change the adapter to use the AD non-SSL port

Using ldapsearch command line works to the same AD server via both ports

Also getting the same above errors when creating a new/temporary AD adapter in a different system, so the issue is getting OVD to trust the LDAPS certificate in the backend AD server.


To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!

In this Document

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.