CA IDM unable to connect to AWS LDAP server

Products

• CA Identity Manager
• CA Identity Suite

Issue/Introduction

Creating User Store Directory in AWS Open LDAP server.  It could not connect to it even though username/password is correct and no problem connecting to the hostname and port

 

a

Cause

This is due to a Java version upgrade.  Starting from release 1.8.0_181, Java has enabled endpoint identification by default to improve the robustness of LDAPS connections. 

Resolution

Add the line 

JAVA_OPTS="$JAVA_OPTS -Dcom.sun.jndi.ldap.object.disableEndpointIdentification=true

 

during IDM start up.