You are currently reviewing an older revision of this page.

KB-1644 LDAP Sync service from the LDAP Tools plugin fails with a after updating to Java 1.8_181


After updating Java to 1.8_181, the LDAP Sync service provided by the LDAP Tools plugin fails with a such as the one below:

ERROR com.appiancorp.process.engine.UnattendedJavaActivityRequest - An error occurred while executing activity: id=<ID>, 
05:00:03,234 INFO [stdout] (Appian Work Item - 85150 - ProcessExec01 : UnattendedJavaActivityRequest) java.lang.RuntimeException: javax.naming.CommunicationException: <IP_ADDRESS>:636 [Root exception is No subject alternative names matching IP address found]


Oracle has enabled stricter endpoint verification for LDAPS connections by default in Java 1.8_181. As a result, the LDAP sync process is calling the LDAP server by an IP or hostname that is not present in the LDAP server certificate's subject or SAN field, causing the call to fail.


Update the certificate presented by the LDAP server to include the URL or the IP address that the LDAP sync process is calling in the certificate's SAN field. Alternatively, update the LDAP sync settings to call the LDAP server by the certificate's subject or an entry in the certificate's SAN field.


The endpoint verification can be disabled by performing the following steps:

Tomcat (Appian 18.3 and later):

1. Navigate to <APPIAN_HOME>\tomcat\apache-tomcat\bin.

2. Add the following line to the|bat file:

export CATALINA_OPTS="$CATALINA_OPTS -Dcom.sun.jndi.ldap.object.disableEndpointIdentification=true"

3 Restart the Tomcat application server.


1. Navigate to <REPO_HOME>/bin/jboss/jboss-eap-6.4/bin.

2. Add the following line to|bat 


3. Using the Configure Script, deploy the changes to JBoss.

4. Restart JBoss.


1. Navigate to <WEBLOGIC_HOME>/<project_name>/domains/<domain_name>/bin

2. Add the following line to the JAVA_OPTIONS in|.bat : 


3. Run $DOMAIN_HOME/bin/|.bat

4. Restart the Weblogic server.

Note: Cloud customers should open a Support Case on Community to request that this property be added to their site.

Affected Versions

This article applies to all versions of Appian.

Last Reviewed: April 2019