Event ID1220 LDAP over Secure Sockets Layer (SSL) will be unavailable at this time because the server was unable to obtain a certificate.

event warning 1220 generated in domain,deleted , recreate new certificate having same problem.

  ldap on secure sockets layer (ssl) unavailable @ time because server unable obtain certificate. 
 
additional data 
error value: 8009030e no credentials available in security package

 urce:        microsoft-windows-activedirectory_domainservice

date:          1/4/2014 1:00:39 pm
event id:      1220
task category: ldap interface
level:         warning
keywords:      classic
user:          n/a
computer:      dc2.chickbuns.com
description:
ldap on secure sockets layer (ssl) unavailable @ time because server unable obtain certificate. 

additional data 
error value:
8009030e no credentials available in security package
event xml:
<event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <system>
    <provider name="microsoft-windows-activedirectory_domainservice" guid="{0e8478c5-3605-4e8c-8497-1e730c959516}" eventsourcename="ntds ldap" />
    <eventid qualifiers="32768">1220</eventid>
    <version>0</version>
    <level>3</level>
    <task>16</task>
    <opcode>0</opcode>
    <keywords>0x8080000000000000</keywords>
    <timecreated systemtime="2014-01-04t10:00:39.545990500z" />
    <eventrecordid>3300</eventrecordid>
    <correlation />
    <execution processid="508" threadid="648" />
    <channel>directory service</channel>
    <computer>dc2.chickbuns.com</computer>
    <security />
  </system>
  <eventdata>
    <data>8009030e</data>
    <data>no credentials available in security package</data>
  </eventdata>
</even

  

hi,

based on research, event id 1220 logged on domain controller when client computers attempt make ldap-over-ssl connection directory when ssl connections not enabled on directory.

if want domain controller or ad lds server support ssl connections, need provide certificate for ad ds or ad lds.

have installed active directory certificate services on domain controller?

if have, please make sure certificate valid.

if not, can install , configure active directory certificate services (ad cs) role on domain controller or can import certificate trusted certification authority (ca).

here related links below useful you:

event id 1220 — ldap on ssl

http://technet.microsoft.com/en-us/library/dd941846(v=ws.10).aspx

ldap connection error on ssl 636 port

http://social.technet.microsoft.com/forums/windowsserver/en-us/bb0327c7-a9e3-4b99-b3f4-c144f4ec2eea/ldap-connection-error-over-ssl-636-port?forum=winserverds

i hope helps.

best regards,

amy wang

Windows Server  >  Windows Server General Forum