Release Notes › Policy Server Release Notes › Installation and Upgrade Considerations › Solaris Considerations › Policy Server Fails to Connect to LDAP User Stores (82268, 67022)

Policy Server Fails to Connect to LDAP User Stores (82268, 67022)

The Policy Server fails to connect to LDAP user stores that use SSL certificates with AKI extensions.

Solution

This is a known issue with the Solaris SSL driver that occurs when it communicates with a Windows 2003 server. To solve this problem, replace the following five libraries with newer versions by installing the patch that corresponds to your version of Solaris:

• libplc4.so
• libnspr4.so
• libplds4.so
• libssl3.so
• libnss3.so

The Solaris patches are:

Solaris 9: 119211-12

Solaris 10: 119213-12

The libraries are installed in the following locations:

• The Solaris 9 patch installs the libraries in the following directory: /usr/lib/mps/secv1.
• The Solaris 10 patch installs the libraries in the following directory: /usr/lib/mps.

Verify that the NSS libraries are version 3.9.3 or greater and that the NSPR libraries are version 4.5 or greater.

Note: For Solaris 10, the newer libraries may already be in place, and the patch may not be needed.