LDAP sync or modifying LDAP settings in Cloud director fails with 400 Bad request

Products

• VMware Cloud Director

Issue/Introduction

• Performing LDAP sync, testing LDAP connection or modifying other LDAP settings fails.
• In browser developer tool logs you may see an error such as:

 

• If public addresses have not been configured, the response in browser developer tools and HAR file may be similar to this:

  "message" : "[ XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX ] URI certificate -----BEGIN CERTIFICATE-----
<certificate data>
-----END CERTIFICATE----- provided but no associated URI specified."

• In the /opt/vmware/vcloud-director/logs/vcloud-container-debug.log or vcloud-container-info.log, you see an entry such as:

 "com.vmware.vcloud.api.presentation.service.BadRequestException: URL https://vCD-FQDN must be HTTP.\n\tat com.vmware.ssdc.backend.CAkimbiSystems.validateAndStandardizeBaseUri(CAkimbiSystems.java:1081)\n\tat com.vmware.ssdc.backend.CAkimbiSystems.updatePublicEndpointSettings(CAkimbiSystems.java:769)\n\tat com.vmware.ssdc.backend.CAkimbiSystems.updateSystemSettings(CAkimbiSystems.java:636)\n\tat com.vmware.vcloud.management.system.SystemServiceImpl.updateSystemSettings(SystemServiceImpl.java:57…ol$CleaningRunnable.run(ExtendedJettyQueuedThreadPool.java:58)\n\tat org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:969)\n\tat

• If the public addresses have not been configured, the message in vcloud-container-debug.log may be similar to the following: 

2024-12-06 22:10:18,937 | INFO     | pool-jetty-513            | Conversation                   | Transaction rolled back; session has been closed [Conversation: XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX, transaction null, transactionDepth: 0] Transaction opened at: <undefined>
current stack: java.lang.Exception
        at com.vmware.vcloud.common.persist.Conversation$1.getNewText(Conversation.java:98)
        at com.vmware.vcloud.logging.DecoratedLogger.info(DecoratedLogger.java:153)
        at com.vmware.vcloud.common.persist.Conversation.rollBackTransactionIfActive(Conversation.java:373)
...
 Conversation opened at: <undefined> | requestId=XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX,request=PUT https://vCD-FQDN/api/admin/extension/settings/ldapSettings,

Environment

VMware Cloud Director 10.x

Cause

Modifying LDAP settings is pushed via Cloud director API https://<VCD_URL>/api/admin/extension/settings/ldapSettings. This API validates system setting that includes public address and REST API URLs and this issue occurs when public addresses field contains incorrect/null values.

For ex: HTTP URL field must contain HTTP URL and HTTPS URL must contain HTTPS URL.  This error is noticed when HTTP URL field contains HTTPS URL or vice-versa.

Resolution

To resolve the issue, navigate to the VCD UI and go to Administration → Settings → Public Addresses.

In the Public Addresses section, the HTTP URL field must contain HTTP URL, and HTTPS URL must contain HTTPS URL

The ldapSettings API validation requires proper configuration of the public addresses. Verify that the values for both the Web Portal and API fields are correct, ensuring they align with the required VMware Cloud Director Public Addresses VMware Cloud Director Public Addresses