Environment
Self Service Password Reset
SSPR 4.x
Situation
Error 5017 authenticating to SSPR
Error 5059 - A certificate error has been encountered
Directory unavailable after certificates on the LDAP server were updated
Users unable to login after updating certs on LDAP server
Resolution
Reset the LDAP certificates by deleting and re-importing them through SSPR Config Editor
Steps if using SSPR Appliance:
- Open the SSPR Appliance (port 9443) https://server.whatever.com:9443
- Open Administrative Commands
- Select Unlock configuration
- Open SSPR Configuration Editor by going direrectly to https://server.whatever.com/sspr/private/config/editor (you might need to use a browser other than IE)
- In Config Editor, select LDAP ⇨ LDAP Directories ⇨ default ⇨ Connection, LDAP Certificates
- Select Clear
- Select Import from server
- Save Changes
- Go back to the appliance (port 9443) https://server.whatever.com:9443
- Open Administrative Commands
- Select Lock configuration
Steps if using Linux (.war) or Windows (.msi) implementations of SSPR:
- Edit SSPRConfiguration.xml and set "configIsEditable" to true. It should look like this: <property key="configIsEditable">true</property> (for more detail see KB 7014954, "SSPR config manager not available" at https://support.microfocus.com/kb/doc.php?id=7014954
- Open SSPR Configuration Editor by going direrectly to https://server.whatever.com/sspr/private/config/editor (you might need to use a browser other than IE)
- In Config Editor, select LDAP ⇨ LDAP Directories ⇨ default ⇨ Connection, LDAP Certificates
- Select Clear
- Select Import from server
- Save Changes