Wednesday, June 11, 2008

Error ‘LDAP Server Down’ while connecting to CE 3.5.1 through Citrix after migration of existing e-Directory to a new server.

Problem: Consider a scenario where a user successfully accesses CE Server through FileNet Enterprise Manager (FEM) from a Windows 2003 server (SP1) box but gets ‘LDAP Server Down’ error while coming from Citrix URL.This error started happening after the migration of existing e-directory to a new server.The problem still remained even if the firewall rules were set to allow all incoming and outgoing traffic between e-Directory server and Citrix server hosting FEM application.
Reason: Tracing was configured on e-Directory server to track all incoming requests and outgoing responses. It was found that the requests coming through Citrix were failing while the one coming directly from the physical machine (Windows 2003 server machine) were getting processed successfully by e-Directory. It was later found that the security certificate, which was installed on the Citrix server to communicate with e-directory was meant for a user profile and not for the Local computer and that’s why not allowing anybody to launch FEM through Citrix.
Solution: Imported Security certificate through MMC console for the Local Computer not for a user profile.

No comments: