AD Test Connection Error with TLS Configurations

[maheshtare]

Hi Folks,

Need your help on following error in AD Test Connection with TLS configurations. Non-TLS is working fine.

If we use FQN in connection settings, we get following error.

If we use IP address in connection settings, we get following error.

[suresh1_munuswamy (Suresh M)]

Check the IP or host name resolves in your VA

[maheshtare]

Hi Suresh,

Can you please help me where to check or where to update. I have tried with hosts.yaml but not sure whether that’s the right to place to update or not.

[gauravsajwan1 (Gaurav Sajwan)]

Hello @maheshtare , you may find below link useful -

https://community.sailpoint.com/t5/IdentityNow-Connectors/IQService-TLS-and-Client-Authentication-Configuration-for/ta-p/138889

[RAKGDS (Rakesh Bhati)]

Hi Mahesh,
How many VA servers you have ? Have you placed your certificate in /home/sailpoint/certificates/

Also after you have updated the hosts.yaml file did you reboot ccg ?

Please check the above it should fix the issue

[maheshtare]

Hello Rakesh,

I have updated the certificate in all the VAs. We don’t have any hosts.yaml file in any of the VAs, so Can I create it or can you help me with the file path and format in which it needs to be updated?

[RAKGDS (Rakesh Bhati)]

Hi Mahesh,

You need to update the hosts.yaml file across the VA at path /home/sailpoint/hosts.yaml

The format will be like the below mentioned format. Could you please go through this and let me know once updated.

Enter any entries needed in the /etc/hosts file

Note: A space is needed between each key: value

hosts:
X.X.X.X:

• DNS Name

Thanks

[maheshtare]

Hi @RAKGDS,

It worked. The ideal configuration file should be as followed.

Enter any entries needed in the /etc/hosts file

Note: A space is needed between each key: value

hosts:
X.X.X.X:

• DNS Name1
• DNS Name2