ERROR in SDM jstd.log file error accessing workflow

[Devang Patel]

We have SDM 14.1 integrated with ITPAM 4.3 and all the workflow were working fine untill i get the below error after starting SDM services. Error is in jstd.log file.
01/13 12:46:40.757[ITPAM_Retry_Task] ERROR ItpamWorkflow 339 Error accessing ITPAM Service at: java.security.cert.CertificateException: No subject alternative names present
Need help to identify this error.
Have attached the SDM and PAM log files.

[Karen Matoke]

Hi Devang,

If I've understood correctly, it seems you are using LDAP with JDK 8u18 or above in-use, and if so, then you may need to take one of these two steps:

1. have the Certificate Authority generate a new SSL Certificate which includes a  SAN (Subject Alternative Name) that of the LDAP server hostname
2. work-around the issue by disabling endpoint identification by setting the system property com.sun.jndi.ldap.object.disableEndpointIdentification = true

References: 

https://ca-broadcomcsm.wolkenservicedesk.com/wolken/esd/knowledgebase_search?articleId=137303

https://www.oracle.com/technetwork/java/javase/8u181-relnotes-4479407.html , search for "Improve LDAP support"

Regards,

Karen

------------------------------
Broadcom
------------------------------