Troubleshooting
Problem
PIM no longer able to connect to LDAP server - Exception : simple bind failed: ldapserver.ibm.com:636
PIM VA restart and restarting the LDAP service and associated DB2 instance fail to resolve issue.
Symptom
Privileged identity manager Directory Server status is stopped and log indicates
" 00000021 com.ibm.identity.utils.IdentityLogger E Exception occured while trying to get LDAP connection. Exception : simple bind failed: ldapserver.ibm.com:636"
Errors in the SystemOut.log
00000140 LTPAServerObj E SECJ0369E: Authentication failed when using LTPA.
The exception is com.ibm.itim.authentication.AuthenticationFailedException: simple bind failed: ldapserver.ibm.com:636.
FormLoginExte E SECJ0118E: Authentication error during authentication for user PIM Manager
Errors in the msg.log:
<Message Id="CTGIMO014E" Severity="WARN">
<Server Format="IP">ldapserver.ibm.com</Server>
<ProductId>CTGIM</ProductId>
<Component>com.ibm.itim.dataservices.model</Component>
<ProductInstance>server1</ProductInstance>
<LogText><![CDATA[CTGIMO014E Communication Failure. The directory server is not available.
Error: simple bind failed: ldapserver.ibm.com:636 ]]></LogText>
<Source FileName="com.ibm.itim.dataservices.model.CategoryTable"
Method="CategoryTable"/>
<TranslationInfo Type="JAVA" Catalog="tmsMessages"
MsgKey="standardException.jndiCommunicationException"><Param><![CDATA[simple
bind failed: ldapserver.ibm.com:636]]></Param></TranslationInfo>
</Message>
Errors in the Trace.log:
<Trace Level="MIN">
<Server Format="IP">server.ibm.com</Server>
<ProductId>CTGIM</ProductId>
<Component>com.ibm.itim.remoteservices.ejb.mediation</Component>
<ProductInstance>server1</ProductInstance>
<LogText><![CDATA[]]></LogText>
<Source FileName="com.ibm.itim.remoteservices.ejb.mediation.PendingMessage"
Method="getServiceFromLock"/>
<Thread>SIBJMSRAThreadPool : 0</Thread>
<Exception><![CDATA[com.ibm.itim.dataservices.model.ModelCommunicationException:
CTGIMO014E Communication Failure. The directory server is not available.
Error: simple bind failed: ldapserver.ibm.com:636
<Trace Level="MIN">
<Server Format="IP">server.ibm.com</Server>
<ProductId>CTGIM</ProductId>
<Component>com.ibm.itim.dataservices.model.domain</Component>
<ProductInstance>server1</ProductInstance>
<LogText><![CDATA[]]></LogText>
<Source FileName="com.ibm.itim.dataservices.model.domain.ServiceSearch"
Method="lookup()"/>
<Thread>SIBJMSRAThreadPool : 2</Thread>
<Exception><![CDATA[com.ibm.itim.dataservices.ldap.LDAPServerException:
com.ibm.itim.dataservices.ldap.SERVER_NOT_AVAILABLE
.
.
.
.
Caused by: javax.naming.CommunicationException: simple bind failed: ldapserver.ibm.com:636 [Root exception is javax.net.ssl.SSLHandshakeException:
Remote host closed connection during handshake]
Restarting the LDAP service and associated DB2 instance. The following was in ibmslapd.log:
GLPSSL011E The certificate in the SSL key database file serverlabel has expired.
GLPSRV114E Server failed to start normally with SSL; starting in configuration only mode without SSL.
GLPCOM003I Non-SSL port initialized to 389.
GLPSRV009I 6.4.0.0 server started.
GLPSRV036E Errors were encountered while starting the server; started in configuration only mode.
Log InLog in to view more of this document
Was this topic helpful?
Document Information
Modified date:
22 June 2026
UID
ibm10738511