DSCC showing DS as 636 disabled, unexpected error,err=1 and 80

Question

Dear All,
Am adding new DS on an existing DSEE 6.3 environment. Up to now, created a new DS instance remotely from the DSCC server, copied configuration settings from an existing DS server. After that stage, dscc was showing remote DS server as 636 (disabled} and unexpected error. This was expected due to SSL certs are not added in the DS. Today we have added the SSL cert and Root CA. And restarted the DS, and unregistered and registered back the DS on DSCC. But still the DS status on DSCC showing as 636 disabled, unexpected error
On more investigation, able to see like ldapsearch on secure port on local DS giving result, but when doing remotely from the DSCC server to DS server, result as below
bash-3.00$ sudo ./ldapsearch -D "cn=directory manager" -w xxx -h remote-host -p 636 -Z -P /opt/SUNWdsee/AAAinst/alias/slapd-cert8.db   -b "" -s base objectclass=
ldap_simple_bind: Can't contact LDAP server
SSL error -8156 (Issuer certificate is invalid.)
Please advise me here,
Below are the logs am able to see from DS access and error log, please help.
[12/Sep/2011:19:31:24 +1000] conn=233 op=0 msgId=1 - EXT oid="1.3.6.1.4.1.1466.20037"
[12/Sep/2011:19:31:24 +1000] conn=233 op=0 msgId=1 - RESULT err=0 tag=120 nentries=0 etime=0, Start TLS request accepted.Server willing to negotiate SSL.
[12/Sep/2011:19:31:24 +1000] conn=233 op=-1 msgId=-1 - SSL 128-bit RC4
[12/Sep/2011:19:31:24 +1000] conn=233 op=1 msgId=2 - BIND dn="cn=admin,cn=Administrators,cn=dscc" method=128 version=3
[12/Sep/2011:19:31:25 +1000] conn=233 op=1 msgId=2 - RESULT err=1 tag=97 nentries=0 etime=1, Can't connect to the LDAP server
[12/Sep/2011:19:31:25 +1000] conn=234 op=-1 msgId=-1 - fd=26 slot=26 LDAP connection from 58.163.116.188:64087 to 172.17.67.235
[12/Sep/2011:19:31:25 +1000] conn=234 op=0 msgId=1 - BIND dn="cn=admin,cn=Administrators,cn=dscc" method=128 version=3
[12/Sep/2011:19:31:25 +1000] conn=234 op=0 msgId=1 - RESULT err=1 tag=97 nentries=0 etime=0, Can't connect to the LDAP server
[12/Sep/2011:19:31:25 +1000] conn=234 op=1 msgId=0 - RESULT err=80 tag=120 nentries=0 etime=0
[12/Sep/2011:19:31:25 +1000] conn=234 op=-1 msgId=-1 - closing from 58.163.116.188:64087 - A1 - Client aborted connection -
[12/Sep/2011:19:31:25 +1000] conn=234 op=-1 msgId=-1 - closed.
[12/Sep/2011:19:31:25 +1000] conn=235 op=-1 msgId=-1 - fd=26 slot=26 LDAPS connection from 58.163.116.188:64088 to 172.17.67.235
[12/Sep/2011:19:31:25 +1000] conn=235 op=-1 msgId=-1 - SSL 128-bit RC4
error
12/Sep/2011:19:38:44 +1000] - ERROR<53761> - Plugins - conn=-1 op=-1 msgId=-1 - Connection Bind through PTA failed (91).
[12/Sep/2011:19:38:44 +1000] - ERROR<53761> - Plugins - conn=-1 op=-1 msgId=-1 - Connection Bind through PTA failed (91). Retrying...
[12/Sep/2011:19:38:44 +1000] - ERROR<53761> - Plugins - conn=-1 op=-1 msgId=-1 - Connection Bind through PTA failed (91).
Thanks,
Edited by: user1175091 on Sep 12, 2011 4:34 AM

Answer 1

Dear All,
We were able to find the root cause for the above issue, the DSEE still using the default certificate instead of new SSL host certificate.
ssl-enabled : on
ssl-rsa-cert-name : defaultCert
Could you guide me the commands for changing this to new SSL certificate, through DSCC due to environmental problem we are not able to achieve this.