IDM 4.7.2 - after upgrading Java unable to use eDirectory hostname alias

  • 7023674
  • 25-Jan-2019
  • 07-Feb-2019

Environment

IDM 4.7.2

Situation

Identity Manager 4.7.2 upgrades Java to 1.8.0_192. Java has enabled endpoint identification on LDAPS connections from JRE 1.8.0_181. This requires you to use the same server name for connecting to the Identity Manager server that was provided with the LDAP server certificate subject. Otherwise, the connection fails. You need to continue to use an alias for the eDirectory connection specified in the configupdate settings (/opt/netiq/idm/apps/tomcat/conf/ism-configuration.properties)

Resolution

On Linux edit the file /opt/netiq/idm/apps/tomcat/bin/setenv.sh and update the "CATALINA_OPTS" setting and add "-Dcom.sun.jndi.ldap.object.disableEndpointIdentification=true" 

On Windows edit the file C:\netiq\idm\apps\tomcat\bin\setenv.bat and update the "CATALINA_OPTS" setting and add "-Dcom.sun.jndi.ldap.object.disableEndpointIdentification=true"