LDAP SSL error

[Fabio Flori]

HI,

I configured ISEv2.0 with External Database LDAP feature.

Test by LDAP bind  from Primary Master ISE it'ok but the other ISE in grid tells ERROR.

Anyone can tell me why?

139713221547776:error:1409E0E5:SSL routines:SSL3_WRITE_BYTES:ssl handshake failure:s3_pkt.c:637 

[hslai · Accepted solution]

I would suggest to do a TCPDUMP or similar wired capture between ISE primary node and the LDAP server in question. Then, review the pcap file in WireShark or similar tool to examine the SSL packet exchange details.

[Fabio Flori]

Hi,

I find the solution :d

In External Identity Source when I configured LDAP external server via LDAPS  I had select the "Issuer CA of ISE Certificates" and I had the error, with only the "LDAP Server Root CA" the problem isn't. 

Thanks for your help!!