Issue
After upgrading LUW installation to 6.5.4.1, it was not connecting to Active Directory. After further testing, it appeared that having the IP address instead of the DNS name in the Directory Services (8090 console) was causing the issue. After switching to DNS, it connected fine.
The Environment Check, from the 8090 Console's Directory tab, shows the following when run:
Testing domain controller: dc1.example-cloud.com.
----------------------------------------------------
ERROR: javax.naming.CommunicationException: simple bind failed: 192.168.1.2:636 [Root exception is javax.net.ssl.SSLHandshakeException: No subject alternative names matching IP address 192.168.1.2 found]
Solution
Current releases of the Java JRE now default to having LDAPS Endpoint Identification enabled.
Endpoint Identification can be disabled using the following steps:
- Shutdown UW on the server.
- Edit the /stoneware/bin/webNetwork.lax using a text editor.
- Find the lax.nl.java.option.additional= line in the webNetwork.lax file.
- Add this parameter to the end of that line:
-Dcom.sun.jndi.ldap.object.disableEndpointIdentification=true - Save the webNetwork.lax file.
- Start the webNetwork service from Windows Services.
This needs to be done on each of your UW servers.