No subject alternative names – Cannot authenticate on OpenDJ 2.6.4 Control Panel

This topic has 4 replies, 2 voices, and was last updated 3 years, 5 months ago by shawnmandel.

  • Author
  • #25400

    Just performed a fresh install of OpenDJ 2.6.4 on Windows 2016. I’m unable to login/authenticate to the Control Panel due to the following error:

    An error occurred connecting to the server. Details:
    javax.naming.CommunicationException: simple bind failed:
    [Root exception is No subject alternative names present]

    I’m running a non-production server, so I would like to know how to send the following command lines in Windows command line interface in order to invoke the following properties:

    org.forgerock.opendj.hostNameVerificationDisabled = true
    com.sun.jndi.ldap.object.disableEndpointIdentification = true

    Any help would be much appreciated!

    • This topic was modified 3 years, 5 months ago by shawnmandel.
     Rob Matthews


    Depending on Java version you may be hitting a known issue, see – or



    Hey Rob,

    Thanks very much for your response. Yes, this confirms that the extra security features in OpenDJ are causing the issue. My java version is: 1.8.0_201.

    Now, my main issue is my lack of knowledge of how exactly to set the following properties in Windows Command Line Interface in order to work around my issue?

    org.forgerock.opendj.hostNameVerificationDisabled = true
    com.sun.jndi.ldap.object.disableEndpointIdentification = true

    It says…

    Setting the new system property

    You can set this system property in OpenDJ as follows:

    Add the new system property to in the file, for example:… -Dcom.sun.jndi.ldap.object.disableEndpointIdentification=true
    Apply this change by running the bin/dsjavaproperties command:
    $ ./dsjavaproperties



    Set the above system property in the JVM args, e.g.

    (in config/… -Dcom.sun.jndi.ldap.object.disableEndpointIdentification=true… -Dcom.sun.jndi.ldap.object.disableEndpointIdentification=true
    And run bin/dsjavaproperties.

    The above appear to be Unix/Linux type commands. How do I translate them in Windows Command Line Interface?


    • This reply was modified 3 years, 5 months ago by shawnmandel.
     Rob Matthews

    Hi Shawn,

    You should be able to add the options to the file on any OS, you then need to either run bin/dsjavaproperties or restart DJ.

    Hope this helps,


    Hi Rob,

    Yes, indeed you’ve helped me quite a bit.

    Thanks a lot!

Viewing 5 posts - 1 through 5 (of 5 total)

You must be logged in to reply to this topic.

©2022 ForgeRock - we provide an identity and access platform to secure every online relationship for the enterprise market, educational sector and even entire countries. Click to view our privacy policy and terms of use.

Log in with your credentials

Forgot your details?