Check the current server state by using the bin/server-state command. If the server does not appear to be accepting connections from clients, reasons can include the following:

  • The server is not running.
  • The underlying system on which the server is installed is not running.
  • The server is running, but is not reachable as a result of a network or firewall configuration problem. If that is the case, connection attempts should time out rather than be rejected.
  • If the server is configured to allow secure communication through SSLSSL (Secure Sockets Layer) A protocol for authenticated and encrypted links between networked machines, typically over HTTPS. SSL was deprecated in 1999 in favor of Transport Layer Security (TLS). or StartTLS, a problem with the key manager or trust manager configuration can cause connection rejections. Messages are written to the server access log for each failed connection attempt.
  • The server might have reached its maximum number of allowed connections. Messages should be written to the server access log for each rejected connection attempt.
  • If the server is configured to restrict access based on the address of the client, messages should be written to the server access log for each rejected connection attempt.
  • If a connection handler encounters a significant error, it can stop listening for new requests. A message should be written to the server error log with information about the problem. Restarting the server can also solve the issue. Another option is to create an LDIFLDIF (LDAP Data Interchange Format) An IETF standard file format for representing LDAP directory content and modifications to directory content. Typically used to import and export LDAP-based directory information. file that disables and then re-enables the connection handler, create the config/auto-process-ldif directory if it does not already exist, and then copy the LDIF file into it.