LDAP sync or modifying LDAP settings in Cloud director fails with 400 Bad request

Products

• VMware Cloud Director

Issue/Introduction

• Performing LDAP sync, testing LDAP connection or modifying other LDAP settings fails.
• In browser developer tool logs you may see an error such as:

 

• If public addresses have not been configured, the response in browser developer tools and HAR file may be similar to this:

  "message" : "[ XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX ] URI certificate -----BEGIN CERTIFICATE-----
<certificate data>
-----END CERTIFICATE----- provided but no associated URI specified."

• In the /opt/vmware/vcloud-director/logs/vcloud-container-debug.log or vcloud-container-info.log, you see an entry such as:

 "com.vmware.vcloud.api.presentation.service.BadRequestException: URL https://vCD-FQDN must be HTTP.\n\tat com.vmware.ssdc.backend.CAkimbiSystems.validateAndStandardizeBaseUri(CAkimbiSystems.java:1081)\n\tat com.vmware.ssdc.backend.CAkimbiSystems.updatePublicEndpointSettings(CAkimbiSystems.java:769)\n\tat com.vmware.ssdc.backend.CAkimbiSystems.updateSystemSettings(CAkimbiSystems.java:636)\n\tat com.vmware.vcloud.management.system.SystemServiceImpl.updateSystemSettings(SystemServiceImpl.java:57…ol$CleaningRunnable.run(ExtendedJettyQueuedThreadPool.java:58)\n\tat org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:969)\n\tat

• If the public addresses have not been configured, the message in vcloud-container-debug.log may be similar to the following: 

2024-12-06 22:10:18,937 | INFO     | pool-jetty-513            | Conversation                   | Transaction rolled back; session has been closed [Conversation: XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX, transaction null, transactionDepth: 0] Transaction opened at: <undefined>
current stack: java.lang.Exception
        at com.vmware.vcloud.common.persist.Conversation$1.getNewText(Conversation.java:98)
        at com.vmware.vcloud.logging.DecoratedLogger.info(DecoratedLogger.java:153)
        at com.vmware.vcloud.common.persist.Conversation.rollBackTransactionIfActive(Conversation.java:373)
...
 Conversation opened at: <undefined> | requestId=XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX,request=PUT https://vCD-FQDN/api/admin/extension/settings/ldapSettings,

Environment

VMware Cloud Director 10.x

Cause

Modifying LDAP settings is pushed via Cloud director API https://<VCD_URL>/api/admin/extension/settings/ldapSettings. This API validates system setting that includes public address and REST API URLs and this issue occurs when public addresses field contains incorrect/null values.

For ex: HTTP URL field must contain HTTP URL and HTTPS URL must contain HTTPS URL.  This error is noticed when HTTP URL field contains HTTPS URL or vice-versa.

Resolution

Public addresses must be configured for the ldapSettings API validation to complete.

Review public addresses field and ensure it has correct values for Web Portal and API fields - VMware Cloud Director Public Addresses