IBM Support

PIM - simple bind failed: ldapserver.ibm.com:636 Replace expired LDAP Certificate

Troubleshooting


Problem

PIM no longer able to connect to LDAP server - Exception : simple bind failed: ldapserver.ibm.com:636

PIM VA restart and restarting the LDAP service and associated DB2 instance fail to resolve issue.

Symptom

Privileged identity manager Directory Server status is stopped and log indicates

" 00000021 com.ibm.identity.utils.IdentityLogger E Exception occured while trying to get LDAP connection. Exception : simple bind failed: ldapserver.ibm.com:636"

Errors in the SystemOut.log
00000140 LTPAServerObj E SECJ0369E: Authentication failed when using LTPA.
The exception is com.ibm.itim.authentication.AuthenticationFailedException: simple bind failed: ldapserver.ibm.com:636.
FormLoginExte E SECJ0118E: Authentication error during authentication for user PIM Manager

Errors in the msg.log:
<Message Id="CTGIMO014E" Severity="WARN">
<Server Format="IP">ldapserver.ibm.com</Server>
<ProductId>CTGIM</ProductId>
<Component>com.ibm.itim.dataservices.model</Component>
<ProductInstance>server1</ProductInstance>
<LogText><![CDATA[CTGIMO014E Communication Failure. The directory server is not available.
Error: simple bind failed: ldapserver.ibm.com:636 ]]></LogText>
<Source FileName="com.ibm.itim.dataservices.model.CategoryTable"
Method="CategoryTable"/>
<TranslationInfo Type="JAVA" Catalog="tmsMessages"
MsgKey="standardException.jndiCommunicationException"><Param><![CDATA[simple
bind failed: ldapserver.ibm.com:636]]></Param></TranslationInfo>
</Message>

Errors in the Trace.log:
<Trace Level="MIN">
<Server Format="IP">server.ibm.com</Server>
<ProductId>CTGIM</ProductId>
<Component>com.ibm.itim.remoteservices.ejb.mediation</Component>
<ProductInstance>server1</ProductInstance>
<LogText><![CDATA[]]></LogText>
<Source FileName="com.ibm.itim.remoteservices.ejb.mediation.PendingMessage"
Method="getServiceFromLock"/>
<Thread>SIBJMSRAThreadPool : 0</Thread>

<Exception><![CDATA[com.ibm.itim.dataservices.model.ModelCommunicationException:
CTGIMO014E Communication Failure. The directory server is not available.
Error: simple bind failed: ldapserver.ibm.com:636

<Trace Level="MIN">
<Server Format="IP">server.ibm.com</Server>
<ProductId>CTGIM</ProductId>
<Component>com.ibm.itim.dataservices.model.domain</Component>
<ProductInstance>server1</ProductInstance>
<LogText><![CDATA[]]></LogText>
<Source FileName="com.ibm.itim.dataservices.model.domain.ServiceSearch"
Method="lookup()"/>
<Thread>SIBJMSRAThreadPool : 2</Thread>
<Exception><![CDATA[com.ibm.itim.dataservices.ldap.LDAPServerException:
com.ibm.itim.dataservices.ldap.SERVER_NOT_AVAILABLE
.
.
.
.
Caused by: javax.naming.CommunicationException: simple bind failed: ldapserver.ibm.com:636 [Root exception is javax.net.ssl.SSLHandshakeException:
Remote host closed connection during handshake]

Restarting the LDAP service and associated DB2 instance.  The following was in ibmslapd.log: 
GLPSSL011E The certificate in the SSL key database file serverlabel has expired.
GLPSRV114E Server failed to start normally with SSL; starting in configuration only mode without SSL.
GLPCOM003I Non-SSL port initialized to 389.
GLPSRV009I 6.4.0.0      server started.
GLPSRV036E Errors were encountered while starting the server; started in configuration only mode.
 

[{"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSRQBP","label":"IBM Security Privileged Identity Manager"},"Component":"","Platform":[{"code":"PF004","label":"Appliance"}],"Version":"All Versions","Edition":"","Line of Business":{"code":"LOB77","label":"Automation Platform"}}]

Log InLog in to view more of this document

This document has the abstract of a technical article that is available to authorized users once you have logged on. Please use Log in button above to access the full document. After log in, if you do not have the right authorization for this document, there will be instructions on what to do next.

Document Information

Modified date:
22 June 2026

UID

ibm10738511