CA LDAP fails startup when trying to activate SSL.

Products

• 24X7 High-Availability Manager for DB2 for z/OS
• Batch Processor
• Compile QQF
• Data Compressor for DB2 for z/OS
• CA Unicenter NSM
• RC/Update for DB2 for z/OS
• DB2 TOOLS- DATABASE MISC

Issue/Introduction

Trying to activate SSL in CA LDAP. After modifying the slapd.conf file with the keyring, CA LDAP fails when starting up with:

ETLDP27I CA LDAP Server load of module back_catss_utf.dll succeeded
ETLDP32I CA LDAP Server registration of module back_catss_utf.dll (15.1.2017.0
ETLDP03I CA LDAP Server r15.1 has ended
IEF142I CALDAP15 CALDAP15 - STEP WAS EXECUTED - COND CODE 0256

 

Environment

Release:
Component: GEN

Resolution

The keyring label is case sensitive and must match the LABLRING keyword when defining the keyring to the CA LDAP started task.

Example adding a keyring to the CA LDAP started task:

TSS ADD(CALDAP) KEYRING(LDAPRING) LABLRING(LDAPRing)

'LDAPRing' must be added exactly to the slapd.conf keyring specification.