Hub Ldap over SSL not working after upgrade to UIM 20.4: 'Can't contact LDAP server'

Products

• DX Unified Infrastructure Management (Nimsoft / UIM)

Issue/Introduction

When we try to connect to CA UIM with an AD account over SSL, we get the error Invalid Credentials.

After upgrading both dev and prod from UIM 20.3 to 20.4. On production, if we select use SSL, the test connection fails and no one can log in

We did a LookUp on the Infrastructure Management client in order to test the LDAP connection but it failed.

Then we tried an ldapSearch between CA UIM and our Active Directory and it returns a Success.

We tried some ping and our Active directory is reachable.

diagnostic [(null)]Feb 10 12:00:10:619 [140654204696384] 0 hub: login [LDAP] - auth (ldap_simple_bind_s) failed: 'Can't contact LDAP server' (-1)Feb 10 12:00:10:619 [140654204696384] 0 hub: login [NimBUS] - user does not exist user=xxx.xxx ip=xx.x.xx.xxFeb 10 12:00:10:619 [140654204696384] 0 hub: Login: failed for service.nexium, ip = xx.x.XX.XX

Environment

• Release: 20.4
• Component: Hub 9.34

Cause

Defect on UIM 20.4 hub version 9.34. We found that a mismatch of openldap library and openssl library is the root cause of the issue.

 

Resolution

We have upgraded the openldap to the latest version and issued a fix:

hub 9.34 HF3-  SolutionDetails - Support Portal - Broadcom support portal