LDAP Settings are reset after DSM upgrade from version 2.0.3 to 2.1

Products

• VMware Data Services Manager

Issue/Introduction

Symptoms:

Upgrade of Data Services Manager from version 2.0.3 to 2.1 might result in reset of LDAP Settings and user is unable to login with LDAP user(s)/credentials.

Environment

VCF and Data Services Manager (DSM) 2.1

Cause

In some cases DSM is unable to find leaf (or Root) certificate of the LDAP server and errors out in migration. Errors similar to below might be thrown:

2024-07-26 01:48:11.067 ERROR [main           ] .s.PostUpgradeProcessorService - Exception fetching cert by url, skipping DirectoryService migration
com.vmware.tdm.sp.common.exception.TdmException: Certificate for the server ldaps://example_ldap_host:636 should be self-signed or issuer CA certificate should be added to the Trusted Root Certificates.

Resolution

To remediate this, user needs to re-add Root Certificates and reconfigure Directory Service 

1. Login to the DSM UI with a local created user
(NOTE: DSM Plugin in vCenter Server can be used to create local user if one was not created previously)
2. Navigate to Settings 
3. Add Root Certificates
4. Reconfigure LDAP(s)
5. Confirm login with LDAP user/credentials