Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I need to replace two web servers with IIS 6 and Coldfusion MX Enterprise, but I'm having trouble connecting to LDAPS with the replacement servers. I followed the instructions at, to no avail. I know that it isn't a coding problem, as the same test page works in production.

Here are the steps I have taken

  • Updated Coldfusion to 7,0,2,142559
  • Installed Hotfix 3 cumulative (chf7020003.jar)
  • installed j2sdk1.4.2_11, which is the same version as is currently running in production.
  • configured Coldfusion to use this JVM (C:\j2sdk1.4.2_11\jre)
  • imported the same CA cert as is in production to the cacerts store under C:\j2sdk1.4.2_11\jre\lib\security\cacerts
  • ran this coldfusion page to test the connection (works fine in production)

    <cfldap action="QUERY"
       username= "uid=user,ou=accounts,dc=company,dc=com" 
       password= "password1"
     LDAPS is Working
      LDAPS is not working
  • I can telnet to the LDAPS server successfully, so it is not a firewall problem

I'm not sure what other details would be useful for me to provide, please let me know.


I got in touch with the LDAP admin to see if he could send me any log excerpts. He said that the logging was fairly useless, but pointed me to an updated cert. I installed the new cert and things are working now. Not sure why production works with the old cert and the new server doesn't, but things are working now. Thank you Terry and squillman for your help.

share|improve this question
What error message do you get when you try to connect and it fails? – Terry Ryan Nov 6 '09 at 18:20
Here is the Exception from Coldfusion: 14:09:14.014 - Application Exception - in C:\Inetpub\wwwroot\ldap-try.cfm : line 11 Connection to LDAP Server failed – JamesCW Nov 6 '09 at 19:09
up vote 0 down vote accepted

My first thought would be a certificate problem when trying to establish the SSL connection. Do you see any connection attempts from the CF server in the LDAP server log? If so, what do they say?

share|improve this answer
Sadly, the LDAP server I have been trying to hit is maintained in a different department. I will have to set it up to connect to an LDAP server where I can get to the logs on Monday and let you know. – JamesCW Nov 7 '09 at 16:18

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.