[
https://issues.apache.org/jira/browse/AMBARI-24827?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Robert Levas updated AMBARI-24827:
----------------------------------
Affects Version/s: (was: 2.6.2)
2.7.3
> LDAP users fail to authenticate using LDAPS due to `No subject alternative
> DNS name` exception
> ----------------------------------------------------------------------------------------------
>
> Key: AMBARI-24827
> URL: https://issues.apache.org/jira/browse/AMBARI-24827
> Project: Ambari
> Issue Type: Bug
> Components: ambari-server
> Affects Versions: 2.7.3
> Reporter: Robert Levas
> Assignee: Robert Levas
> Priority: Major
> Fix For: 2.7.3
>
>
> LDAP users fail to authenticate using LDAPS due to `No subject alternative
> DNS name` exception:
> {noformat}
> 2018-10-26 14:49:45,716 WARN [ambari-client-thread-37]
> AmbariLdapAuthenticationProvider:126 - Failed to communicate with the LDAP
> server: simple bind failed: ad.example.com:636; nested exception is
> javax.naming.CommunicationException: simple bind failed: ad.example.com:636
> [Root exception is javax.net.ssl.SSLHandshakeException:
> java.security.cert.CertificateException: No subject alternative DNS name
> matching ad.example.com found.]
> {noformat}
> This is the other half of the issue from AMBARI-24533 (which was related to
> the LDAP sync process).
> Note: If LDAP sync is performed before a user attempts to log in, then the
> issue will not be seen since the system property,
> {{com.sun.jndi.ldap.object.disableEndpointIdentification}}, would have
> already been set to "true". However, the logic path setting this value is
> not reached for an authentication attempt.
> Note: This occurs with OpenJDK 1.8.0.191 and maybe some earlier versions.
> {noformat}
> openjdk version "1.8.0_191"
> OpenJDK Runtime Environment (build 1.8.0_191-b12)
> OpenJDK 64-Bit Server VM (build 25.191-b12, mixed mode)
> {noformat}
> This does not occur with Oracle JDK 1.8.0.112
> {noformat}
> java version "1.8.0_112"
> Java(TM) SE Runtime Environment (build 1.8.0_112-b15)
> Java HotSpot(TM) 64-Bit Server VM (build 25.112-b15, mixed mode)
> {noformat}
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
