OpenLDAP and SSL (Java)

[Sebastian Szuber <szuber@man.poznan.pl>]

Does anyone succeeded connecting to OpenLDAP using SSL and Netscape Java LDAP SDK 4.1?
I started OpenLDAP with SSL listener and I can connect to it using LDAP Browser\Editor 
2.8.2. But when I try to connect from my clien using NS SDK it gets error.

In Java code I use:

ld = new LDAPConnection(new netscape.ldap.factory.JSSESocketFactory(null));
ld.authenticate(dn, password);

and after a while I get LDAPException:

netscape.ldap.LDAPException: The connection is not available (80); Unknown error
        at netscape.ldap.LDAPConnection.sendRequest(LDAPConnection.java:1809)
        at netscape.ldap.LDAPConnection.internalBind(LDAPConnection.java:1754)
        at netscape.ldap.LDAPConnection.authenticate(LDAPConnection.java:1294)
        at netscape.ldap.LDAPConnection.authenticate(LDAPConnection.java:1303)
        at netscape.ldap.LDAPConnection.authenticate(LDAPConnection.java:1221)
...

In OpenLDAP log I get:

Aug 23 10:28:27 pine slapd[8776]: slapd starting
Aug 23 10:28:27 pine slapd[8778]: daemon: added 6r
Aug 23 10:28:27 pine slapd[8778]: daemon: added 7r
Aug 23 10:28:27 pine slapd[8778]: daemon: select: listen=6 active_threads=0 tvp=NULL
Aug 23 10:28:27 pine slapd[8778]: daemon: select: listen=7 active_threads=0 tvp=NULL
Aug 23 10:58:48 pine slapd[8778]: daemon: activity on 1 descriptors
Aug 23 10:58:48 pine slapd[8778]: daemon: new connection on 10
Aug 23 10:58:48 pine slapd[8778]: daemon: conn=0 fd=10 connection from IP=client.host:1125 
(IP=serwer.host:25606) accepted.
Aug 23 10:58:48 pine slapd[8778]: daemon: added 10r
Aug 23 10:58:48 pine slapd[8778]: daemon: activity on:
Aug 23 10:58:48 pine slapd[8778]:
Aug 23 10:58:48 pine slapd[8778]: daemon: select: listen=6 active_threads=0 tvp=NULL
Aug 23 10:58:48 pine slapd[8778]: daemon: select: listen=7 active_threads=0 tvp=NULL
Aug 23 10:58:56 pine slapd[8778]: daemon: activity on 1 descriptors
Aug 23 10:58:56 pine slapd[8778]: daemon: activity on:
Aug 23 10:58:56 pine slapd[8778]:  10r
Aug 23 10:58:56 pine slapd[8778]:
Aug 23 10:58:56 pine slapd[8778]: daemon: read activity on 10
Aug 23 10:58:56 pine slapd[8778]: daemon: select: listen=6 active_threads=0 tvp=NULL
Aug 23 10:58:56 pine slapd[8778]: daemon: select: listen=7 active_threads=0 tvp=NULL
Aug 23 10:58:57 pine slapd[8778]: daemon: activity on 1 descriptors
Aug 23 10:58:57 pine slapd[8778]: daemon: activity on:
Aug 23 10:58:57 pine slapd[8778]:  10r
Aug 23 10:58:57 pine slapd[8778]:
Aug 23 10:58:57 pine slapd[8778]: daemon: read activity on 10
Aug 23 10:58:57 pine slapd[8778]: daemon: removing 10
Aug 23 10:58:57 pine slapd[8778]: conn=-1 fd=10 closed
Aug 23 10:58:57 pine slapd[8778]: daemon: select: listen=6 active_threads=0 tvp=NULL
Aug 23 10:58:57 pine slapd[8778]: daemon: select: listen=7 active_threads=0 tvp=NULL
Aug 23 10:58:57 pine slapd[8778]: daemon: activity on 1 descriptors
Aug 23 10:58:57 pine slapd[8778]: daemon: select: listen=6 active_threads=0 tvp=NULL
Aug 23 10:58:57 pine slapd[8778]: daemon: select: listen=7 active_threads=0 tvp=NULL

And one general question: will be JNDI better to use? Does anyone use JNDI with OpenLDAP 
and SSL without (many) problems?

Thanks,
	S.

--

/*
 * Sebastian Szuber, Poznan Supercomputing and Networking Center
 * email: szuber@man.poznan.pl
 * phone: (+48 61) 858-20-34, fax: (+48 61) 852-59-54
 *
 */