Active Directory connection timed out issue

nchellamuthu · June 2, 2025, 4:21pm

Which IIQ version are you inquiring about?

IIQ8.2P5

Please share any other relevant files that may be required (for example, logs).

IIQ Logs:
2025-06-02T11:53:11,250 ERROR https-jsse-nio-8443-exec-1 sailpoint.connector.ADLDAPConnector:4886 - 722146298 Test configuration failed for application: Active Directory Cause for failure: sailpoint.tools.GeneralException: Connection timed out (Connection timed out)
2025-06-02T11:53:11,250 ERROR https-jsse-nio-8443-exec-1 sailpoint.connector.ADLDAPConnector:4886 - 722146298 Test configuration failed for application: Active Directory Cause for failure: sailpoint.tools.GeneralException: Connection timed out (Connection timed out)
2025-06-02T11:53:11,269 ERROR https-jsse-nio-8443-exec-1 sailpoint.web.ApplicationObjectBean:2850 - Connector failed.
sailpoint.connector.ConnectorException: Connection timed out (Connection timed out)
    at sailpoint.connector.ADLDAPConnector.testIQServiceConnection(ADLDAPConnector.java:4940) ~[?:?]
    at sailpoint.connector.ADLDAPConnector.testConfiguration(ADLDAPConnector.java:4875) ~[?:?]
    at sailpoint.connector.ConnectorProxy.testConfiguration(ConnectorProxy.java:411) ~[connector-bundle-identityiq.jar:8.2p5]
    at sailpoint.web.ApplicationObjectBean.testConnectorAction(ApplicationObjectBean.java:2844) [identityiq.jar:8.2p5 Build dedd9529823-20230427-083919]
    at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) ~[?:1.8.0_452]
    at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) ~[?:1.8.0_452]
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) ~[?:1.8.0_452]
    at java.lang.reflect.Method.invoke(Method.java:498) ~[?:1.8.0_452]
    at org.apache.el.parser.AstValue.invoke(AstValue.java:252) [jasper-el.jar:9.0.58]
    at org.apache.el.MethodExpressionImpl.invoke(MethodExpressionImpl.java:266) [jasper-el.jar:9.0.58]
    at com.sun.faces.facelets.el.TagMethodExpression.invoke(TagMethodExpression.java:105) [javax.faces-2.2.20.jar:2.2.20]
    at javax.faces.component.MethodBindingMethodExpressionAdapter.invoke(MethodBindingMethodExpressionAdapter.java:87) [javax.faces-2.2.20.jar:2.2.20]
    at com.sun.faces.application.ActionListenerImpl.processAction(ActionListenerImpl.java:102) [javax.faces-2.2.20.jar:2.2.20]
    at sailpoint.web.util.SailPointActionListener.processAction(SailPointActionListener.java:42) [identityiq.jar:8.2p5 Build dedd9529823-20230427-083919]
    at javax.faces.component.UICommand.broadcast(UICommand.java:315) [javax.faces-2.2.20.jar:2.2.20]
    at javax.faces.component.UIViewRoot.broadcastEvents(UIViewRoot.java:790) [javax.faces-2.2.20.jar:2.2.20]
    at javax.faces.component.UIViewRoot.processApplication(UIViewRoot.java:1282) [javax.faces-2.2.20.jar:2.2.20]
    at com.sun.faces.lifecycle.InvokeApplicationPhase.execute(InvokeApplicationPhase.java:81) [javax.faces-2.2.20.jar:2.2.20]
    at com.sun.faces.lifecycle.Phase.doPhase(Phase.java:101) [javax.faces-2.2.20.jar:2.2.20]
    at com.sun.faces.lifecycle.LifecycleImpl.execute(LifecycleImpl.java:198) [javax.faces-2.2.20.jar:2.2.20]
    at javax.faces.webapp.FacesServlet.service(FacesServlet.java:658) [javax.faces-2.2.20.jar:2.2.20]
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:227) [catalina.jar:9.0.58]
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:162) [catalina.jar:9.0.58]
    at org.apache.myfaces.webapp.filter.ExtensionsFilter.doFilter(ExtensionsFilter.java:357) [tomahawk20-1.1.14.jar:1.1.14]
    at sailpoint.web.MyFacesExtensionsFilter.doFilter(MyFacesExtensionsFilter.java:62) [identityiq.jar:8.2p5 Build dedd9529823-20230427-083919]
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:189) [catalina.jar:9.0.58]
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:162) [catalina.jar:9.0.58]
    at org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:53) [tomcat-websocket.jar:9.0.58]
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:189) [catalina.jar:9.0.58]
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:162) [catalina.jar:9.0.58]
    at sailpoint.web.SailPointResponseFilter.doFilter(SailPointResponseFilter.java:88) [classes/:8.2p5 Build dedd9529823-20230427-083919]
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:189) [catalina.jar:9.0.58]
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:162) [catalina.jar:9.0.58]
    at sailpoint.web.PageAuthorizationFilter.doFilter(PageAuthorizationFilter.java:97) [identityiq.jar:8.2p5 Build dedd9529823-20230427-083919]
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:189) [catalina.jar:9.0.58]
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:162) [catalina.jar:9.0.58]
    at sailpoint.web.PageAuthenticationFilter$Chainlink.doFilter(PageAuthenticationFilter.java:273) [identityiq.jar:8.2p5 Build dedd9529823-20230427-083919]
    at sailpoint.service.PageAuthenticationService.handleFinally(PageAuthenticationService.java:492) [identityiq.jar:8.2p5 Build dedd9529823-20230427-083919]
    at sailpoint.web.PageAuthenticationFilter$MyHandler.handle(PageAuthenticationFilter.java:316) [identityiq.jar:8.2p5 Build dedd9529823-20230427-083919]
    at sailpoint.web.PageAuthenticationFilter.doFilter(PageAuthenticationFilter.java:126) [identityiq.jar:8.2p5 Build dedd9529823-20230427-083919]
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:189) [catalina.jar:9.0.58]
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:162) [catalina.jar:9.0.58]
    at sailpoint.web.SailPointContextRequestFilter.doFilter(SailPointContextRequestFilter.java:61) [identityiq.jar:8.2p5 Build dedd9529823-20230427-083919]
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:189) [catalina.jar:9.0.58]
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:162) [catalina.jar:9.0.58]
    at sailpoint.web.util.MethodFilter.doFilter(MethodFilter.java:51) [identityiq.jar:8.2p5 Build dedd9529823-20230427-083919]
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:189) [catalina.jar:9.0.58]
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:162) [catalina.jar:9.0.58]
    at sailpoint.web.SailPointPollingRequestFilter.doFilter(SailPointPollingRequestFilter.java:151) [identityiq.jar:8.2p5 Build dedd9529823-20230427-083919]
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:189) [catalina.jar:9.0.58]
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:162) [catalina.jar:9.0.58]
    at sailpoint.web.util.TimingFilter.doFilter(TimingFilter.java:88) [identityiq.jar:8.2p5 Build dedd9529823-20230427-083919]
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:189) [catalina.jar:9.0.58]
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:162) [catalina.jar:9.0.58]
    at sailpoint.web.ResponseHeaderFilter.doFilter(ResponseHeaderFilter.java:63) [identityiq.jar:8.2p5 Build dedd9529823-20230427-083919]
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:189) [catalina.jar:9.0.58]
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:162) [catalina.jar:9.0.58]
    at org.springframework.web.filter.CharacterEncodingFilter.doFilterInternal(CharacterEncodingFilter.java:201) [spring-web-5.2.20.RELEASE.jar:5.2.20.RELEASE]
    at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:119) [spring-web-5.2.20.RELEASE.jar:5.2.20.RELEASE]
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:189) [catalina.jar:9.0.58]
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:162) [catalina.jar:9.0.58]
    at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:183) [catalina.jar:9.0.58]
    at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:97) [catalina.jar:9.0.58]
    at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:540) [catalina.jar:9.0.58]
    at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:135) [catalina.jar:9.0.58]
    at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:92) [catalina.jar:9.0.58]
    at org.apache.catalina.valves.AbstractAccessLogValve.invoke(AbstractAccessLogValve.java:687) [catalina.jar:9.0.58]
    at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:78) [catalina.jar:9.0.58]
    at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:359) [catalina.jar:9.0.58]
    at org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:399) [tomcat-coyote.jar:9.0.58]
    at org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:65) [tomcat-coyote.jar:9.0.58]
    at org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:889) [tomcat-coyote.jar:9.0.58]
    at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1735) [tomcat-coyote.jar:9.0.58]
    at org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49) [tomcat-coyote.jar:9.0.58]
    at org.apache.tomcat.util.threads.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1191) [tomcat-util.jar:9.0.58]
    at org.apache.tomcat.util.threads.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:659) [tomcat-util.jar:9.0.58]
    at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61) [tomcat-util.jar:9.0.58]
    at java.lang.Thread.run(Thread.java:750) [?:1.8.0_452]
Caused by: sailpoint.tools.GeneralException: Connection timed out (Connection timed out)
    at sailpoint.connector.RPCService.execute(RPCService.java:552) ~[identityiq.jar:8.2p5]
    at sailpoint.connector.ADLDAPConnector.testIQServiceConnection(ADLDAPConnector.java:4934) ~[?:?]
    ... 77 more
Caused by: java.net.ConnectException: Connection timed out (Connection timed out)
    at java.net.PlainSocketImpl.socketConnect(Native Method) ~[?:1.8.0_452]
    at java.net.AbstractPlainSocketImpl.doConnect(AbstractPlainSocketImpl.java:350) ~[?:1.8.0_452]
    at java.net.AbstractPlainSocketImpl.connectToAddress(AbstractPlainSocketImpl.java:206) ~[?:1.8.0_452]
    at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:188) ~[?:1.8.0_452]
    at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) ~[?:1.8.0_452]
    at java.net.Socket.connect(Socket.java:607) ~[?:1.8.0_452]
    at java.net.Socket.connect(Socket.java:556) ~[?:1.8.0_452]
    at java.net.Socket.<init>(Socket.java:452) ~[?:1.8.0_452]
    at java.net.Socket.<init>(Socket.java:229) ~[?:1.8.0_452]
    at sailpoint.connector.RPCService.openSocket(RPCService.java:745) ~[identityiq.jar:8.2p5]
    at sailpoint.connector.RPCService.openSocket(RPCService.java:704) ~[identityiq.jar:8.2p5]
    at sailpoint.connector.RPCService.execute(RPCService.java:510) ~[identityiq.jar:8.2p5]
    at sailpoint.connector.ADLDAPConnector.testIQServiceConnection(ADLDAPConnector.java:4934) ~[?:?]
    ... 77 more

IQService Logs:
06/02/2025 15:51:55 : RpcServer [ Thread-8 ] DEBUG : "listening on port : 443"
06/02/2025 15:51:55 : RpcServer [ Thread-8 ] DEBUG : "Execution registry has [0] items."
06/02/2025 15:51:55 : Util [ Thread-8 ] DEBUG : "Found 2 certificate/s for subject chd-vpd-spc1.corp.svbank.com"
06/02/2025 15:51:55 : Util [ Thread-8 ] DEBUG : "Found 2 certificate/s with private key "
06/02/2025 15:51:55 : Util [ Thread-8 ] INFO : "Found multiple cert with Private Keys, Run IQService.exe -m <SN:SerialNumberOfcertificate> for best match of certificate."
06/02/2025 15:51:55 : RpcServer [ Thread-8 ] DEBUG : "New Listener Thread Created..."
06/02/2025 15:51:55 : RpcServer [ Thread-9 ] DEBUG : "New Connection..."
06/02/2025 15:51:55 : RpcHandler [ Thread-9 ] DEBUG : "Header [GET / HTTP/1.1
Host:ServerName.domain.com:443]"
06/02/2025 15:51:55 : RpcHandler [ Thread-9 ] INFO : "OutgoingResponse:
<?xml version="1.0" encoding="utf-8"?>
<RpcResponse version="1.0" requestId="" complete="false">
<RpcErrors>
<List>
<String>Invalid payload header! 'GET / HTTP/1.1
Host:ServerName.domain.com:443'</String>
</List>
</RpcErrors>

Share all details about your problem, including any error messages you may have received.

Hi team,
I am trying to connect Active Directory application from SailPoint and getting connection timed out error. I am able to successfully ping IQService server and Domain controllers without any issues but test connection is failing with above error. Enabled logging “logger.connector.name = sailpoint.connector.ADLDAPConnector
logger.connector.level = info” and updated IQService log to debug then attached both the logs above,but i am not able to figure out the root cause of this issue. Network team installed the required certificates as well.

Operating system: RHEL
App Server: Tomcat

Any pointers would be really helpful and thanks in advance.

pattabhi · June 2, 2025, 4:34pm

Nithyanandan Chellamuthu:

IQService Logs:
06/02/2025 15:51:55 : RpcServer [ Thread-8 ] DEBUG : "listening on port : 443"
06/02/2025 15:51:55 : RpcServer [ Thread-8 ] DEBUG : "Execution registry has [0] items."
06/02/2025 15:51:55 : Util [ Thread-8 ] DEBUG : "Found 2 certificate/s for subject chd-vpd-spc1.corp.svbank.com"
06/02/2025 15:51:55 : Util [ Thread-8 ] DEBUG : "Found 2 certificate/s with private key "
06/02/2025 15:51:55 : Util [ Thread-8 ] INFO : "Found multiple cert with Private Keys, Run IQService.exe -m <SN:SerialNumberOfcertificate> for best match of certificate."
06/02/2025 15:51:55 : RpcServer [ Thread-8 ] DEBUG : "New Listener Thread Created..."
06/02/2025 15:51:55 : RpcServer [ Thread-9 ] DEBUG : "New Connection..."
06/02/2025 15:51:55 : RpcHandler [ Thread-9 ] DEBUG : "Header [GET / HTTP/1.1
Host:ServerName.domain.com:443]"
06/02/2025 15:51:55 : RpcHandler [ Thread-9 ] INFO : "OutgoingResponse:
<?xml version="1.0" encoding="utf-8"?>
<RpcResponse version="1.0" requestId="" complete="false">
<RpcErrors>
<List>
<String>Invalid payload header! 'GET / HTTP/1.1
Host:ServerName.domain.com:443'</String>
</List>
</RpcErrors>

Hi @nchellamuthu

Verify IQService Port in IdentityIQ AD Application Configuration.

Go to IdentityIQ > Applications > Active Directory > Application Configuration.
Confirm IQService Port is 443.
Confirm Use SSL is checked.
Save and test connection.

nchellamuthu · June 2, 2025, 5:27pm

Hi,
Port 5050 is also open and listening successfully. Configured the AD connection to use non-secure port which is 5050.

pattabhi · June 2, 2025, 7:02pm

Address Multiple Certificates in IQService:

On the IQService server, identify the correct SSL certificate to use.
Configure IQService to explicitly use that certificate using
IQService.exe -m <SerialNumberOfcertificate>
Restart the IQService Windows service.

Thanks,

ryan_toornburg · June 2, 2025, 10:32pm

Hi @nchellamuthu - usually a timeout means that the request does not come back. It is possible port 5050 is not somewhere on the return trip. (Firewall issue, defender, AV software). Test connection will attempt to hit the IQService first. I see you are using non-TLS port so it is not a TLS issue. I do however, see that there are 2 certs in your IQService log which should be resolved. If you do an netstat -an on the IQService host, does it show that the server is listening on 5050 on the correct IP? Also verify that the Hostname you are using resolves to that IP.

tsandeepsTmob · June 3, 2025, 12:56am

Nithyanandan Chellamuthu:

IQService Logs:
06/02/2025 15:51:55 : RpcServer [ Thread-8 ] DEBUG : "listening on port : 443"
06/02/2025 15:51:55 : RpcServer [ Thread-8 ] DEBUG : "Execution registry has [0] items."
06/02/2025 15:51:55 : Util [ Thread-8 ] DEBUG : "Found 2 certificate/s for subject chd-vpd-spc1.corp.svbank.com"
06/02/2025 15:51:55 : Util [ Thread-8 ] DEBUG : "Found 2 certificate/s with private key "
06/02/2025 15:51:55 : Util [ Thread-8 ] INFO : "Found multiple cert with Private Keys, Run IQService.exe -m <SN:SerialNumberOfcertificate> for best match of certificate."
06/02/2025 15:51:55 : RpcServer [ Thread-8 ] DEBUG : "New Listener Thread Created..."
06/02/2025 15:51:55 : RpcServer [ Thread-9 ] DEBUG : "New Connection..."
06/02/2025 15:51:55 : RpcHandler [ Thread-9 ] DEBUG : "Header [GET / HTTP/1.1
Host:ServerName.domain.com:443]"
06/02/2025 15:51:55 : RpcHandler [ Thread-9 ] INFO : "OutgoingResponse:
<?xml version="1.0" encoding="utf-8"?>
<RpcResponse version="1.0" requestId="" complete="false">
<RpcErrors>
<List>
<String>Invalid payload header! 'GET / HTTP/1.1
Host:ServerName.domain.com:443'</String>
</List>
</RpcErrors>

As per the logs, you have issue on SSL certificates.

If could share your Application xml.

pattabhi · June 3, 2025, 4:56am

After resolving Multiple Certificates in IQService, look at
IQService Port: This MUST be the port number you found in IQService.exe.config (e.g., 5050 or 5051).

If RPCServer.UseSSL="true" in IQService.exe.config, check this box in IdentityIQ.
If RPCServer.UseSSL="false" in IQService.exe.config, uncheck this box.

Save the application.

Go to Debug pages > Clear Cache
Retest Connection: Go back to your Active Directory application definition in IdentityIQ and click "Test Connection.

Steps which you have followed to install IQService will help us understand better your configuration.

nchellamuthu · June 4, 2025, 6:24pm

Hi All,
We are able to resolve the SSL certificate issue and IQService is configured to use only port 5050. But now we are getting the below error in IIQ logs and nothing in IQService logs.

IIQ Logs:

2025-06-04T13:58:50,707 ERROR https-jsse-nio-8443-exec-4 sailpoint.connector.ADLDAPConnector:4886 - 537298750 Test configuration failed for application: Active Directory Cause for failure: sailpoint.tools.GeneralException: Connection timed out (Read failed)
2025-06-04T13:58:50,707 ERROR https-jsse-nio-8443-exec-4 sailpoint.connector.ADLDAPConnector:4886 - 537298750 Test configuration failed for application: Active Directory Cause for failure: sailpoint.tools.GeneralException: Connection timed out (Read failed)
2025-06-04T13:58:50,730 ERROR https-jsse-nio-8443-exec-4 sailpoint.web.ApplicationObjectBean:2850 - Connector failed.
sailpoint.connector.ConnectorException: Connection timed out (Read failed)
    at sailpoint.connector.ADLDAPConnector.testIQServiceConnection(ADLDAPConnector.java:4940) ~[?:?]
    at sailpoint.connector.ADLDAPConnector.testConfiguration(ADLDAPConnector.java:4875) ~[?:?]
    at sailpoint.connector.ConnectorProxy.testConfiguration(ConnectorProxy.java:411) ~[connector-bundle-identityiq.jar:8.2p5]
    at sailpoint.web.ApplicationObjectBean.testConnectorAction(ApplicationObjectBean.java:2844) [identityiq.jar:8.2p5 Build dedd9529823-20230427-083919]
    at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) ~[?:1.8.0_452]
    at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) ~[?:1.8.0_452]
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) ~[?:1.8.0_452]
    at java.lang.reflect.Method.invoke(Method.java:498) ~[?:1.8.0_452]
    at org.apache.el.parser.AstValue.invoke(AstValue.java:252) [jasper-el.jar:9.0.58]
    at org.apache.el.MethodExpressionImpl.invoke(MethodExpressionImpl.java:266) [jasper-el.jar:9.0.58]
    at com.sun.faces.facelets.el.TagMethodExpression.invoke(TagMethodExpression.java:105) [javax.faces-2.2.20.jar:2.2.20]
    at javax.faces.component.MethodBindingMethodExpressionAdapter.invoke(MethodBindingMethodExpressionAdapter.java:87) [javax.faces-2.2.20.jar:2.2.20]
    at com.sun.faces.application.ActionListenerImpl.processAction(ActionListenerImpl.java:102) [javax.faces-2.2.20.jar:2.2.20]
    at sailpoint.web.util.SailPointActionListener.processAction(SailPointActionListener.java:42) [identityiq.jar:8.2p5 Build dedd9529823-20230427-083919]
    at javax.faces.component.UICommand.broadcast(UICommand.java:315) [javax.faces-2.2.20.jar:2.2.20]
    at javax.faces.component.UIViewRoot.broadcastEvents(UIViewRoot.java:790) [javax.faces-2.2.20.jar:2.2.20]
    at javax.faces.component.UIViewRoot.processApplication(UIViewRoot.java:1282) [javax.faces-2.2.20.jar:2.2.20]
    at com.sun.faces.lifecycle.InvokeApplicationPhase.execute(InvokeApplicationPhase.java:81) [javax.faces-2.2.20.jar:2.2.20]
    at com.sun.faces.lifecycle.Phase.doPhase(Phase.java:101) [javax.faces-2.2.20.jar:2.2.20]
    at com.sun.faces.lifecycle.LifecycleImpl.execute(LifecycleImpl.java:198) [javax.faces-2.2.20.jar:2.2.20]
    at javax.faces.webapp.FacesServlet.service(FacesServlet.java:658) [javax.faces-2.2.20.jar:2.2.20]
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:227) [catalina.jar:9.0.58]
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:162) [catalina.jar:9.0.58]
    at org.apache.myfaces.webapp.filter.ExtensionsFilter.doFilter(ExtensionsFilter.java:357) [tomahawk20-1.1.14.jar:1.1.14]
    at sailpoint.web.MyFacesExtensionsFilter.doFilter(MyFacesExtensionsFilter.java:62) [identityiq.jar:8.2p5 Build dedd9529823-20230427-083919]
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:189) [catalina.jar:9.0.58]
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:162) [catalina.jar:9.0.58]
    at org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:53) [tomcat-websocket.jar:9.0.58]
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:189) [catalina.jar:9.0.58]
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:162) [catalina.jar:9.0.58]
    at sailpoint.web.SailPointResponseFilter.doFilter(SailPointResponseFilter.java:88) [classes/:8.2p5 Build dedd9529823-20230427-083919]
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:189) [catalina.jar:9.0.58]
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:162) [catalina.jar:9.0.58]
    at sailpoint.web.PageAuthorizationFilter.doFilter(PageAuthorizationFilter.java:97) [identityiq.jar:8.2p5 Build dedd9529823-20230427-083919]
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:189) [catalina.jar:9.0.58]
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:162) [catalina.jar:9.0.58]
    at sailpoint.web.PageAuthenticationFilter$Chainlink.doFilter(PageAuthenticationFilter.java:273) [identityiq.jar:8.2p5 Build dedd9529823-20230427-083919]
    at sailpoint.service.PageAuthenticationService.handleFinally(PageAuthenticationService.java:492) [identityiq.jar:8.2p5 Build dedd9529823-20230427-083919]
    at sailpoint.web.PageAuthenticationFilter$MyHandler.handle(PageAuthenticationFilter.java:316) [identityiq.jar:8.2p5 Build dedd9529823-20230427-083919]
    at sailpoint.web.PageAuthenticationFilter.doFilter(PageAuthenticationFilter.java:126) [identityiq.jar:8.2p5 Build dedd9529823-20230427-083919]
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:189) [catalina.jar:9.0.58]
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:162) [catalina.jar:9.0.58]
    at sailpoint.web.SailPointContextRequestFilter.doFilter(SailPointContextRequestFilter.java:61) [identityiq.jar:8.2p5 Build dedd9529823-20230427-083919]
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:189) [catalina.jar:9.0.58]
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:162) [catalina.jar:9.0.58]
    at sailpoint.web.util.MethodFilter.doFilter(MethodFilter.java:51) [identityiq.jar:8.2p5 Build dedd9529823-20230427-083919]
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:189) [catalina.jar:9.0.58]
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:162) [catalina.jar:9.0.58]
    at sailpoint.web.SailPointPollingRequestFilter.doFilter(SailPointPollingRequestFilter.java:151) [identityiq.jar:8.2p5 Build dedd9529823-20230427-083919]
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:189) [catalina.jar:9.0.58]
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:162) [catalina.jar:9.0.58]
    at sailpoint.web.util.TimingFilter.doFilter(TimingFilter.java:88) [identityiq.jar:8.2p5 Build dedd9529823-20230427-083919]
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:189) [catalina.jar:9.0.58]
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:162) [catalina.jar:9.0.58]
    at sailpoint.web.ResponseHeaderFilter.doFilter(ResponseHeaderFilter.java:63) [identityiq.jar:8.2p5 Build dedd9529823-20230427-083919]
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:189) [catalina.jar:9.0.58]
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:162) [catalina.jar:9.0.58]
    at org.springframework.web.filter.CharacterEncodingFilter.doFilterInternal(CharacterEncodingFilter.java:201) [spring-web-5.2.20.RELEASE.jar:5.2.20.RELEASE]
    at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:119) [spring-web-5.2.20.RELEASE.jar:5.2.20.RELEASE]
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:189) [catalina.jar:9.0.58]
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:162) [catalina.jar:9.0.58]
    at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:183) [catalina.jar:9.0.58]
    at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:97) [catalina.jar:9.0.58]
    at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:540) [catalina.jar:9.0.58]
    at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:135) [catalina.jar:9.0.58]
    at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:92) [catalina.jar:9.0.58]
    at org.apache.catalina.valves.AbstractAccessLogValve.invoke(AbstractAccessLogValve.java:687) [catalina.jar:9.0.58]
    at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:78) [catalina.jar:9.0.58]
    at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:359) [catalina.jar:9.0.58]
    at org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:399) [tomcat-coyote.jar:9.0.58]
    at org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:65) [tomcat-coyote.jar:9.0.58]
    at org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:889) [tomcat-coyote.jar:9.0.58]
    at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1735) [tomcat-coyote.jar:9.0.58]
    at org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49) [tomcat-coyote.jar:9.0.58]
    at org.apache.tomcat.util.threads.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1191) [tomcat-util.jar:9.0.58]
    at org.apache.tomcat.util.threads.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:659) [tomcat-util.jar:9.0.58]
    at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61) [tomcat-util.jar:9.0.58]
    at java.lang.Thread.run(Thread.java:750) [?:1.8.0_452]
Caused by: sailpoint.tools.GeneralException: Connection timed out (Read failed)
    at sailpoint.connector.RPCService.execute(RPCService.java:552) ~[identityiq.jar:8.2p5]
    at sailpoint.connector.ADLDAPConnector.testIQServiceConnection(ADLDAPConnector.java:4934) ~[?:?]
    ... 77 more
Caused by: java.net.SocketException: Connection timed out (Read failed)
    at java.net.SocketInputStream.socketRead0(Native Method) ~[?:1.8.0_452]
    at java.net.SocketInputStream.socketRead(SocketInputStream.java:116) ~[?:1.8.0_452]
    at java.net.SocketInputStream.read(SocketInputStream.java:171) ~[?:1.8.0_452]
    at java.net.SocketInputStream.read(SocketInputStream.java:141) ~[?:1.8.0_452]
    at sun.nio.cs.StreamDecoder.readBytes(StreamDecoder.java:284) ~[?:1.8.0_452]
    at sun.nio.cs.StreamDecoder.implRead(StreamDecoder.java:326) ~[?:1.8.0_452]
    at sun.nio.cs.StreamDecoder.read(StreamDecoder.java:178) ~[?:1.8.0_452]
    at java.io.InputStreamReader.read(InputStreamReader.java:184) ~[?:1.8.0_452]
    at java.io.BufferedReader.fill(BufferedReader.java:161) ~[?:1.8.0_452]
    at java.io.BufferedReader.readLine(BufferedReader.java:324) ~[?:1.8.0_452]
    at java.io.BufferedReader.readLine(BufferedReader.java:389) ~[?:1.8.0_452]
    at sailpoint.connector.RPCService.readStringFromSocket(RPCService.java:356) ~[identityiq.jar:8.2p5]
    at sailpoint.connector.RPCService.readResponseFromInputStream(RPCService.java:817) ~[identityiq.jar:8.2p5]
    at sailpoint.connector.RPCService.parseResponse(RPCService.java:792) ~[identityiq.jar:8.2p5]
    at sailpoint.connector.RPCService.execute(RPCService.java:531) ~[identityiq.jar:8.2p5]
    at sailpoint.connector.ADLDAPConnector.testIQServiceConnection(ADLDAPConnector.java:4934) ~[?:?]
    ... 77 more
``````````````````

paul_hilchey · June 4, 2025, 9:42pm

Hi @nchellamuthu, how long does it take before you get the timeout error?
You could check if the network connection is being opened. eg: if your application server is on linux, run “netstat -at” and see if the connection is open. If you see it in the SYN_SENT state, then you have a network issue.

kumar_priya · June 7, 2025, 8:50am

IQ Service may not have logs due it is not connected yet to the AD, check firewall ports, especially check for all domain controllers associated with AD if you are able to discover domain using this connection.

nchellamuthu · June 10, 2025, 6:17pm

Hi Paul,
We are able to see the connection is established but getting a “Connection closed by foreign host” message when we tried to do telnet.

drosenbauer · June 10, 2025, 8:12pm

I agree with the firewall suggestion above. “Connection closed by foreign host” is a typical firewall message. You may have a stateful firewall that doesn’t allow connections to be “silent” for more than a certain time, for example?

ryan_toornburg · June 11, 2025, 2:55pm

Agree with @drosenbauer - we have seen some pretty odd things with firewalls. See if you can get a network engineer to monitor any appliances in that route while you test the connection.

nchellamuthu · June 26, 2025, 5:11pm

Hello Everyone,
After trying out all the possible troubleshooting methods, we found that the issue is with wrong VIP configuration on the IQService load balancer server. So we worked with network team and fixed the issue and connection is working fine now. Really appreciate everyone for helping me with the multiple suggestions and resoultions.
Thanks.

system · August 25, 2025, 5:12pm

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Timeout for the Active Directory Source Test Connection ISC Discussion and Questions identity-security-cloud , provisioning , connectors	6	405	November 7, 2024
IIQ 8.5 IQservices issue IIQ Discussion and Questions identityiq	15	114	October 19, 2025
Active Directory Connection Error ISC Discussion and Questions identity-security-cloud	28	425	October 9, 2024
IQService connection timeout ISC Discussion and Questions identity-security-cloud , iqservice	4	825	June 4, 2024
[IDN] Fail to connection the IIQ service ISC Discussion and Questions identity-security-cloud	8	151	January 13, 2025

Active Directory connection timed out issue

Which IIQ version are you inquiring about?

Please share any other relevant files that may be required (for example, logs).

Share all details about your problem, including any error messages you may have received.

Related topics