Error 81 after switching LDAP Policy store from Oracle to CA directory for SSL
Customer test the connection with JExplorer over SSL and using Policy server tool LDAPSearch
/opt/siteminder/bin/ldapsearch -b "o=siteminder" -h example.com:636 -Z -P /opt/siteminder/certdb/cert7.db -D "cn=<name>,o=example.com,c=us" -w <passwd> cn=* 2>&1
Both test successful
Steps performed that failed:
Troubleshooting steps
Proper steps to test/Change from Oracle LDAP to CA Directory over SSL
The Policy Server uses a Mozilla LDAP SDK to communicate with LDAP directories (Policy store/User Store etc.). The Mozilla LDAP SDK implements the NSS kit/libraries. Support for security protocols SSL/TLS 1.0/1.1/1.2 … depends on the bundled NSS libraries used by the specific policy server
How to create/add PEM files the DB file:
Copy all DB files (cert7.db of cert8.db, key3.db, secmod.db) to the location defined in smconsole
SMCONSOLE (Netscape Certificate Database file – pints to the cert7.db/cert8.db)