"Error enabling StartTLS encryption with server" when attempting to configure LDAP authentication in Empower 3 FR5 - WKB110163

SYMPTOMS

• The following error messages appear when logging in to or testing the LDAP connection parameters in Empower:
  • Error enabling StartTLS encryption with server 'ldap-server'
  • Connection to LDAP server 'ldap-server' on port XXXX failed.
  • Server is not willing to handle directory requests.

ENVIRONMENT

• Empower 3 Feature Release 5
• LDAP authentication

CAUSE

An alias is used to route LDAP authentication requests to a load balancer. The load balance does not support StartTLS.

FIX or WORKAROUND

1. Discontinue use of the alias and / or load balancer.
2. Configure Empower to point to specific directory servers to service LDAP authentication requests.

ADDITIONAL INFORMATION