Disable Endpoint Identification

Disable Endpoint Identification

Issue

After upgrading LUW installation to 6.5.4.1, it was not connecting to Active Directory. After further testing, it appeared that having the IP address instead of the DNS name in the Directory Services (8090 console) was causing the issue. After switching to DNS, it connected fine.

The Environment Check, from the 8090 Console's Directory tab, shows the following when run:

Testing domain controller: dc1.example-cloud.com.
----------------------------------------------------
ERROR: javax.naming.CommunicationException: simple bind failed: 192.168.1.2:636 [Root exception is javax.net.ssl.SSLHandshakeException: No subject alternative names matching IP address 192.168.1.2 found]



Solution

Current releases of the Java JRE now default to having LDAPS Endpoint Identification enabled.
Endpoint Identification can be disabled using the following steps:
  1. Shutdown UW on the server.
  2. Edit the /stoneware/bin/webNetwork.lax using a text editor.
  3. Find the lax.nl.java.option.additional= line in the webNetwork.lax file.
  4. Add this parameter to the end of that line:
    -Dcom.sun.jndi.ldap.object.disableEndpointIdentification=true
  5. Save the webNetwork.lax file.
  6. Start the webNetwork service from Windows Services.
This needs to be done on each of your UW servers.


    Can't find the KB

    Unable to find the KB to address your issue ?  

      • Recent Articles

      • Lenovo Unified Workspace End-of-Life Questions and Answers

        Will the shutdown of LUW servers and access to downloads affect my server licensing? No, the shutdown of the customer servers and access to the product and licensing downloads will not affect your server licensing. This license is downloaded and ...
      • How do I determine my Unified Workspace license expiration date?

        The best method for determining the licensing information including the expiration date of your Unified Workspace license: Login to your 8090 management console on each server This may take remoting into each LUW server and relay, opening a browser, ...
      • Lenovo Unified Workspace 7.0.2.13 Released

        Highlights of Unified Workspace 7.0.2.13 Before you install: Please view the installation notes here. 7.0.2.13 requires a 7.0 license file. Below is a list of enhancements and fixes released in Unified Workspace 7.0.2.13 Fixed external storage ...
      • LanSchool Documentation Guides

        LanSchool Classic Teacher Console The LanSchool Teacher Console is the interface teachers will use to manage their classroom and students. It contains all the tools necessary for a teacher to effectively interact with students and create a ...
      • Lenovo Unified Workspace 7.0.1.41 Released

        Highlights of Unified Workspace 7.0.1.41 Before you install: Please view the installation notes here. 7.0.1.41 requires a 7.0 license file. Below is a list of enhancements and fixes for Unified Workspace 7.0.1.41 Updated Log4j Updated Java Updated ...
      • Related Articles

      • How to disable password saving - Chrome

        Having multiple methods for saving a password in the browser can cause confusion for the user.  To disable password saving in Chrome, launch Chrome and perform the following steps. Click the Chrome menu button in the upper right corner of the Chrome ...
      • How to disable password saving - Firefox

        Having multiple methods for saving a password in the browser can cause confusion for the user. To disable password saving in Firefox, launch Firefox and perform the following steps. Click the Firefox menu. Choose Options or Preferences (depending on ...
      • How to disable password saving - Safari

        Having multiple methods for saving a password in the browser can cause confusion for the user. To disable password saving in Safari, launch Safari and perform the following steps. Click the Safari in the top menu bar. Choose Preferences. Choose ...
      • How to disable password saving - Internet Explorer

        Having multiple methods for saving a password in the browser can cause confusion for the user.   To disable password saving in Internet Explorer, launch Internet Explorer and perform the following steps. Click the blue Settings menu icon in the upper ...
      • Disable Group Search for File Services

        Issue: In the past Unified Workspace (formerly webNetwork) required having to manually add some search indexes to prevent slowness issues in various parts of webNetwork, most notably (webStorage) File Services. When a user authenticates to Unified ...