If your eDirectory uses LDAPS protocol with SSLv3 for a secure communication, be aware that SSLv3 is vulnerable to POODLE attack as per CVE-2014-3566.
By default, eDirectory runs in FIPS mode and does not allow communication over SSLv3. See Configuring eDirectory in FIPS Mode for more information. If you disable FIPS mode for TLS on your eDirectory server, you may want to disable SSLv3 for LDAP using the following procedure:
Workaround:
Download and install the latest Identity Console for eDirectory from the Software License and Download portal.
Launch Identity Console.
On the NetIQ Identity Console home page, click the LDAP Configuration tile.
Select LDAP Server.
On the Modify LDAP Server page > Configuration drop down > select SSLv3 check box.
Click Save.
NOTE:In a non-English environment, you cannot access the SSLv3 option. To access this option, change the preferred display language to English.
Unload and load the LDAP Services for eDirectory.
For more information, see Loading and Unloading LDAP Services for eDirectory.