VIP Password reset option through VIP Enterprise Gateway MyVIP IdP fails with status 500

Products

• VIP Service

Issue/Introduction

Password reset through MyVIP IdP on the VIP Enterprise Gateway flow fails with status 500:

java.lang.IllegalAccessError: class com.verisign.mauth.conf.enterprise.sspwebapp.SSPIDPFirstFactor (in unnamed module @0x52cc8049) cannot access class com.sun.jndi.ldap.BasicControl (in module java.naming) because module java.naming does not export com.sun.jndi.ldap to unnamed module @0x52cc8049

Environment

Enterprise Gateway 9.11

Resolution

This issue will be resolved in Enterprise Gateway 9.11.1 (TBA). 

WINDOWS:

• Use a text editor in administrator mode to edit the file: <EG_INSTALL_HOME>\IDP\services\SSP\conf\wrapper.conf
• Locate the section Java Additional Parameters. 
• Add the following line to this section: wrapper.java.additional.10=--add-exports=java.naming/com.sun.jndi.ldap=ALL-UNNAMED
  The file entry should look similar to this:
  
• Note: The 10 value in the added line in the above example is the next sequential number of the number 9 in line above it. If the existing previous line begins with wrapper.java.additional.32=, change the 10 to 33. Example: wrapper.java.additional.33=--add-exports=java.naming/com.sun.jndi.ldap=ALL-UNNAMED
• Save the changes. 
• Restart the VIP SSP/MyVIP Idp Service. 

 

LINUX:

• Use a text editor to edit the file: <EG_INSTALL_HOME>/IDP/bin/idpstartservice.
• Locate the following if statement: if [ -s "services/${SERVERNAME}/conf/ssp.conf" ]; then
• Add the following java parameter to the export CMD= value: --add-exports=java.naming/com.sun.jndi.ldap=ALL-UNNAMED
  The file entry should look similar to this:
  
• Save the changes.
• Restart the VIP SSP/MyVIP Idp Service