When using AMIdentity.modifyService to set desktop service dynamic attribute on a realm, Access Manager returns a null pointer exception.
Workaround:Add the following property to AMConfig.properties and then restart the server.:
com.sun.am.ldap.connnection.idle.seconds=7200