LDAP & Mid Server Issue

[Kenisha Morgan1]

Hey Everyone, 

We are having a problem with our Mid Server connection with LDAP. The error code that LDAP is producing is 10300 which is a LDAP_ERROR_COMMUNICATION_EXCEPTION. I don't know much about Mid Server and LDAP, but  how do you resolve this issue? How can I find the exception to fix the issue? 

Sincerely, 

Kenisha 

[johndurden]

It turned out this was a problem with the certificate our MID server had installed for LDAP. We spoke to our LDAP group and they provided us a fresh cert. We installed it, and the problem went away. I'm not sure why this would have happened after upgrading to Quebec, but either way here we are.

[Aare Pajuste]

* This issue is caused due to known problem in Quebec PRB1477421 which is fixed permanently in Rome.

Please follow the below workaround mentioned in PRB1477421 to fix this issue in quebec.
https://support.servicenow.com/kb?id=kb_article_view&sys_kb_id=710bb3ecdbe7e450ddb1d9d9689619a7

Workaround:
*************
On the MID Server host machine, execute the following steps:

1. Navigate to the agent directory.
2. Navigate to the ../jre/conf/security directory.
3. Open the java.security file.
4.Comment out the property: ssl.SocketFactory.provider=com.service_now.mid.security.policy.PolicyBasedSSLSocketFactory
5. Save the change.
6. Restart the MID Server.

Note: Commenting out the property does not mean we will not use LDAPS, it means we will use the JVM ssl.SocketFactory.provider which is used on all MID servers in Paris and older releases. If the LDAP server certificate is added on MID, and the LDAP server configuration on the platform is configured to use ldaps it will use ldaps.

^This is how I solved it with the ServiceNow support engineer
but note that this was identified by SSL logs after we enabled the wrapper logging for SSL

04/30/21 05:44:23 (667) glide.ldap.listener-xxx LDAP API - LDAPLogger : Communication error: vm-xx-xx.xxx.local:636
04/30/21 05:44:23 (667) glide.ldap.listener-xxx LDAP API - LDAPLogger : java.net.SocketException: Unconnected sockets not implemented
04/30/21 05:44:23 (667) glide.ldap.listener-xxx WARNING *** WARNING *** LDAP API - LDAPLogger : Connection error. Waiting 64 seconds to retry