UnboundID Hostname verification errors

[Silke Meyer]

Hello,

I've been seeing a weird behaviour on a IdP 4.0.1 for a few weeks: It 
has an LDAP Connector configured that used to work without errors and 
afaik nothing has been changed in the configuration. The upgrade to 
4.0.1 was performed months ago.

At some point the idp-process.log started to report UnboundID errors: 
"Hostname verification failed". When I check this with openssl s_client 
everything looks correct though and the people don't experience any 
login problems.

Do you have any idea where these errors come from? And if the hostname 
verification fails why does the software proceed in first place? At 
least I expected that would break the connection.

Greetings from a sunny, snowy Berlin,
Silke Meyer

-- 
Silke Meyer

DFN-Verein | Verein zur Förderung eines Deutschen Forschungsnetzes e.V.
Alexanderplatz 1 | 10178 Berlin | Germany

Phone: +49 30 884299-306 | Mail: smeyer at dfn.de

Vorstand:  Prof. Dr. O. Kao, Dr. R. Bockholt, C. Zens
Geschäftsführer: Dr. C. Grimm, J. Pattloch
AG Charlottenburg VR7729B | USt.-ID. DE 136623822

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5403 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://shibboleth.net/pipermail/users/attachments/20210201/8341ff48/attachment.p7s>