Connection/Aggregation error to Active Directory sources

Identity Security Cloud (ISC) ISC Discussion and Questions
,
1

Hello,

Would like to seek assistance on an issue we are having. We are experiencing errors to our AD sources where both Aggregation and Test connection fails. Weird thing is test connections result in successful and error inconsistently (works now errors out later). see screenshot below for the error message.

image
image601×528 20.1 KB

Few items we did and verify but still giving same results:

  • Certificates are not expired
  • certificate string (*.pem) reapplied to VA but still failing
  • updated IQservices
  • VA CCG is updated
  • Aggregations/Test Connection are successful when sources are set to use non-TLS

In VA, it shows the below error when running the command openssl s_client -connect LDAP.server.FQDN:636

image
image744×289 23.3 KB

Thanks.

2

Hi @renzambos it seems that the certificates on your DCs are somehow customized (couldn’t find much on this error you are facing). I would create new ones, install them on the DCs then on the VAs and retry.

3

Hi @renzambos,

We have encountered similar issue, it was fixed by following below document:

Support Articles - PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

Hope this will help!

1 Like