The ldap server's certificate must be imported into the glassfish truststore - <gf-domain>/config/cacerts.jks using the keytool command:
keytool -importcert -alias "LDAP certificate" -keystore <GF_DOMAIN-DIR>/config/cacerts.jks -file <certificate file>
HTH
Nithya
[Message sent by forum member 'nitkal']
http://forums.java.net/jive/thread.jspa?messageID=480365