Cannot search directory in CUPC after configuring LDAP over SSL on CUPS

[gangche]

Greeting,

I have already done the CUCM/CUPS to secure connections (in CUCM, configured LDAP over SSL for LDAP directory and LDAP authentication, and imported root CA certicate in CUCM and CUPS), it can login both http://cucm/ccmuser and http://cups/ccmuser.

Now I am configuring LDAP over SSL in CUPS under CUPS > Application > Cisco Unified Personal Communicator > LDAP server to support directory search over SSL, but i meet problem here.

My configuration as following:

hostname: hostname.com

port: 636

Protocol Type: TLS

in CUPC logs i see:

      <serverHealthInformation>

        <ns4:serverType>LDAP</ns4:serverType>

        <ns4:status>NOT_CONFIGURED</ns4:status>

        <ns4:serverFriendlyName>LDAP Server</ns4:serverFriendlyName>

        <ns4:serverAddress>hostname.com</ns4:serverAddress>

        <ns4:serverPort>636</ns4:serverPort>

        <ns4:transportProtocol>ldaps</ns4:transportProtocol>

        <ns4:failureCode>1910</ns4:failureCode>

      </serverHealthInformation>

Address          : hostname.com

FriendlyName     : LDAP Server

Port             : 636

Type             : Ldap

ConnectionStatus : NotConfigured

HealthStatus : Unhealthy

FailureCode : 1910

  <SOAP-ENV:Body>

    <ns6:onError xmlns:ns6="http://v2.soap.uc.cisco.com/Base" xmlns:ns3="http://client.contact.v2.soap.uc.cisco.com" xmlns:ns4="http://contact.v2.soap.uc.cisco.com/types" xmlns:ns5="http://presence.v2.soap.uc.cisco.com/types" xmlns="">

      <ns6:sequenceNumber>25</ns6:sequenceNumber>

      <ns6:clientId>CcClient-1</ns6:clientId>

      <ns6:Error>

        <ns6:code>1910</ns6:code>

        <ns6:details>

          <ns6:key>ExceptionMessage</ns6:key>

          <ns6:value>Problem authenticating with LDAP server.</ns6:value>

        </ns6:details>

        <ns6:details>

          <ns6:key>ParameterValue</ns6:key>

          <ns6:value>Unable to establish secure connection to LDAP server. Check your security configuration, and determine if you need to include a valid cert.</ns6:value>

        </ns6:details>

        <ns6:details>

          <ns6:key>ParameterName</ns6:key>

          <ns6:value>Unable to establish secure connection to LDAP server. Check your security configuration, and determine if you need to include a valid cert.</ns6:value>

        </ns6:details>

      </ns6:Error>

    </ns6:onError>

  </SOAP-ENV:Body>

2011-10-13 20:03:50,125 DEBUG [4 ]  [Cisco.Uc.Clients.Common.ServiceAdaptors.CoreServices.CallbackService]  [ContactCallbackService.onError(0)] - ContactCallbackService.onError:  1910

What's the problem actually? What certificate it expects regarding the error code 1910? i also see 1923 error.

[gangche]

who can help me on this issue? very appreciate!