OUD 11g/12c - When Microsoft Active Directory (AD) is Up the OUD Proxy Shows it Down in Proxy ODSM and Errors Log Reports: "The LDAP server extension <ldap extension> is down" (Doc ID 2230525.1)

Last updated on MAY 17, 2023

Applies to:

Oracle Unified Directory - Version 11.1.2.3.0 and later
Information in this document applies to any platform.

Symptoms

Oracle Unified Directory Proxy errors log shows Microsoft Active Directory Server as Down -

[05/Feb/2017:14:39:51 -0500] category=CORE severity=NOTICE msgID=458891 msg=The Directory Server has sent an alert notification generated by class com.sun.dps.server.workflowelement.proxyldap.LDAPServerExtension (alert type com.sun.dps.server.workflowelement.proxyldap.LDAPServerExtension.LDAPServerExtensionDown, alert ID 28770338): The LDAP server extension <LDAP EXTENSION> is down

OUD Proxy LDAP connections to AD are successful; however OUD Proxy LDAPS connections to AD fail.

AD verified as up and running by being able to run an ldapsearch (against the non-secure and secure ports) successfully against AD (specifying AD host name for the -h option) -

Locally, from the AD host
From the OUD Proxy host

When running the ldapsearch from the OUD Proxy host against AD, that is when the validity dates for the new AD certificate showed the AD certificate was new. The validity dates were output when prompted to "trust this certificate and continue connecting to the server".