5 Known Issues, Workarounds, and Troubleshooting

This chapter discusses the following topics related to connector testing:

5.1 Known Issues and Workarounds

There are no known issues associated with this release of the connector.

5.2 Troubleshooting

Table 5-1 lists solutions to some commonly encountered issues associated with the Google Apps connector.

Table 5-1 Troubleshooting

Problem	Solution
The following javax.net.ssl.SSLKeyException occurs during reconciliation and provisioning: javax.net.ssl.SSLKeyException: [Security:090504]Certificate chain received from www-proxy.example.com - 148.87.19.20 --> apps-apis.google.com failed hostname verification check. Certificate contained .google.com but check expected apps-apis.google.com javax.net.ssl.SSLKeyException: [Security:090504]Certificate chain received from www-proxy.example.com - 148.87.19.20 --> apps-apis.google.com failed hostname verification check. Certificate contained .google.com but check expected apps-apis.google.com	If Oracle Identity Manager is deployed on WebLogic application server with Host Name Verification feature enabled, then you can disable it or use the Custom Host Name Verification feature. However, it is recommended to use Custom Host Name Verification for production environments. See the "Using Host Name Verification" section of BEA WebLogic Server 8.1 Documentation for more details.

Problem

Solution

The following javax.net.ssl.SSLKeyException occurs during reconciliation and provisioning:

javax.net.ssl.SSLKeyException: [Security:090504]Certificate chain
received
from www-proxy.example.com - 148.87.19.20 --> apps-apis.google.com
failed
hostname verification check. Certificate contained *.google.com but check
expected apps-apis.google.com javax.net.ssl.SSLKeyException:
[Security:090504]Certificate chain received from
www-proxy.example.com -
148.87.19.20 --> apps-apis.google.com failed hostname verification check.
Certificate contained *.google.com but check expected
apps-apis.google.com

If Oracle Identity Manager is deployed on WebLogic application server with Host Name Verification feature enabled, then you can disable it or use the Custom Host Name Verification feature. However, it is recommended to use Custom Host Name Verification for production environments. See the "Using Host Name Verification" section of BEA WebLogic Server 8.1 Documentation for more details.