Environment
Identity Manager 4.5
Identity Manager Driver - Bidirectional eDirectory Driver 4.0.4.0
Identity Manager Driver - Bidirectional eDirectory Driver 4.0.4.0
Situation
After upgrading to IDM 4.7 and the Bidirectional eDirectory Driver 4.0.4.0, the driver will not connect over SSL, the secure LDAP port (636). However it will connect over the unsecure LDAP port (389).
[05/16/18 13:45:55.081]:eDirectory ST:eDirectory: OpenLDAPConnection - Connect to the server
[05/16/18 13:45:55.082]:eDirectory ST:eDirectory: Error occured while getting socket factory. Reason : null
[05/16/18 13:45:55.082]:eDirectory ST:eDirectory: Schema.Schema() - LDAPException: Unable to initiallize socket factory (80) Other
java.lang.NullPointerException
[05/16/18 13:45:55.083]:eDirectory ST:SubscriptionShim.init() returned:
[05/16/18 13:45:55.083]:eDirectory ST:
<nds dtdversion="4.0">
<source>
<product build="20180222_0550" instance="eDirectory" version="4.0.4.0">Identity Manager Bi-directional Driver for eDirectory</product>
<contact>NetIQ Corporation</contact>
</source>
<output>
<status level="success"/>
</output>
</nds>
[05/16/18 13:45:55.081]:eDirectory ST:eDirectory: OpenLDAPConnection - Connect to the server
[05/16/18 13:45:55.082]:eDirectory ST:eDirectory: Error occured while getting socket factory. Reason : null
[05/16/18 13:45:55.082]:eDirectory ST:eDirectory: Schema.Schema() - LDAPException: Unable to initiallize socket factory (80) Other
java.lang.NullPointerException
[05/16/18 13:45:55.083]:eDirectory ST:SubscriptionShim.init() returned:
[05/16/18 13:45:55.083]:eDirectory ST:
<nds dtdversion="4.0">
<source>
<product build="20180222_0550" instance="eDirectory" version="4.0.4.0">Identity Manager Bi-directional Driver for eDirectory</product>
<contact>NetIQ Corporation</contact>
</source>
<output>
<status level="success"/>
</output>
</nds>
Resolution
This issue is resolved with the Bidirectional eDirectory driver 4.0.5.0 or later.
Cause
There was an issue when Use SSL is set to YES, and Always Accept Server Certificate is set to YES, that the driver did not pull the certificate properly from the connected side LDAP server.
Workaround is to set Always Accept Server Certificate is set to NO and define the certificate information in the Driver Parameters. (Driver properties, Driver Configuration tab, Driver Parameters section, Driver Settings)
Workaround is to set Always Accept Server Certificate is set to NO and define the certificate information in the Driver Parameters. (Driver properties, Driver Configuration tab, Driver Parameters section, Driver Settings)