<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<meta content="text/html; charset=utf-8">
</head>
<body>
<div dir="auto" style="direction:ltr; margin:0; padding:0; font-family:sans-serif; font-size:11pt; color:black">
I think he is having the issue because of the updated certificate for Microsoft's graph api.<br>
<br>
</div>
<div dir="auto" style="direction:ltr; margin:0; padding:0; font-family:sans-serif; font-size:11pt; color:black">
Check to see if you have the proper chain in your midpoint key store for graph api, Not in java cacerts
<br>
<br>
</div>
<div dir="auto" style="direction:ltr; margin:0; padding:0; font-family:sans-serif; font-size:11pt; color:black">
https://graph.windows.net <br>
<br>
</div>
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>From:</b> midPoint <midpoint-bounces@lists.evolveum.com> on behalf of Nicolas Rossi <nrossi@identicum.com><br>
<b>Sent:</b> Tuesday, November 27, 2018 8:09:03 AM<br>
<b>To:</b> midPoint General Discussion<br>
<b>Subject:</b> Re: [midPoint] Error Office 365/ Azure connector</font>
<div> </div>
</div>
<div>
<div dir="ltr">
<div class="gmail_default" style="font-family:arial,helvetica,sans-serif; font-size:small; color:#073763">
Check the subject alternative names on the certificate and add an entry to the /etc/hosts to access the server with the FQDN specified in the certificate. </div>
<div class="gmail_default" style="font-family:arial,helvetica,sans-serif; font-size:small; color:#073763">
<br>
</div>
<div class="gmail_default" style="font-family:arial,helvetica,sans-serif; font-size:small; color:#073763">
<br>
</div>
<div>
<div dir="ltr" class="gmail_signature">
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr"><font face="arial, helvetica, sans-serif"><br>
<br>
<font color="#444444">Ing Nicolás Rossi</font><br>
<font color="#999999">Identicum S.A.</font><br>
<font color="#999999">Jorge Newbery 3226</font><br>
<font color="#999999">Oficina: +54 (11) 4552-3050</font></font></div>
<div dir="ltr"><font face="arial, helvetica, sans-serif"><font color="#999999">Móvil: +54 (911) 6041-3920<br>
<a href="http://www.identicum.com" target="_blank">www.identicum.com</a></font></font><br>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<br>
</div>
<br>
<div class="gmail_quote">
<div dir="ltr">On Tue, Nov 27, 2018 at 9:54 AM Fabio Medeiro <<a href="mailto:fabio.medeiro@worldnettps.com">fabio.medeiro@worldnettps.com</a>> wrote:<br>
</div>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex; border-left:1px #ccc solid; padding-left:1ex">
<div dir="ltr">I don't use valid certificate, I access it by IP.</div>
<br>
<div class="gmail_quote">
<div dir="ltr">On Tue, 27 Nov 2018 at 12:10, Nicolas Rossi <<a href="mailto:nrossi@identicum.com" target="_blank">nrossi@identicum.com</a>> wrote:<br>
</div>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex; border-left:1px #ccc solid; padding-left:1ex">
<div dir="ltr">
<div class="gmail_default" style="font-family:arial,helvetica,sans-serif; font-size:small; color:#073763">
And how are you accessing the server ? Check the certificate subject and alternative names. You should use the same hostname.</div>
<div class="gmail_default" style="font-family:arial,helvetica,sans-serif; font-size:small; color:#073763">
<br>
</div>
<div class="gmail_default" style="font-family:arial,helvetica,sans-serif; font-size:small; color:#073763">
Regards,</div>
<div>
<div dir="ltr" class="m_7171952515821046730m_-5162657798453466869gmail_signature">
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr"><font face="arial, helvetica, sans-serif"><br>
<br>
<font color="#444444">Ing Nicolás Rossi</font><br>
<font color="#999999">Identicum S.A.</font><br>
<font color="#999999">Jorge Newbery 3226</font><br>
<font color="#999999">Oficina: +54 (11) 4552-3050</font></font></div>
<div dir="ltr"><font face="arial, helvetica, sans-serif"><font color="#999999">Móvil: +54 (911) 6041-3920<br>
<a href="http://www.identicum.com" target="_blank">www.identicum.com</a></font></font><br>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<br>
</div>
<br>
<div class="gmail_quote">
<div dir="ltr">On Tue, Nov 27, 2018 at 6:51 AM Fabio Medeiro <<a href="mailto:fabio.medeiro@worldnettps.com" target="_blank">fabio.medeiro@worldnettps.com</a>> wrote:<br>
</div>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex; border-left:1px #ccc solid; padding-left:1ex">
<div dir="ltr">Hi Nicolas,
<div><br>
</div>
<div>Thanks for your reply.</div>
<div><br>
</div>
<div>I have already add it on keystore.jceks of midpoint (/opt/midpoint-3.7.2/var) and cacerts of java(/usr/lib/jvm/java-8-openjdk-amd64/jre/lib/security), but it has not work</div>
</div>
<br>
<div class="gmail_quote">
<div dir="ltr">On Mon, 22 Oct 2018 at 15:52, Fabio Medeiro <<a href="mailto:fabio.medeiro@worldnettps.com" target="_blank">fabio.medeiro@worldnettps.com</a>> wrote:<br>
</div>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex; border-left:1px #ccc solid; padding-left:1ex">
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">Hi Nicolas,
<div><br>
</div>
<div>Thanks for your reply.</div>
<div><br>
</div>
<div>I have already add it on keystore.jceks of midpoint (/opt/midpoint-3.7.2/var) and cacerts of java(/usr/lib/jvm/java-8-openjdk-amd64/jre/lib/security), but it does work</div>
</div>
</div>
</div>
</div>
</div>
</div>
<br>
<div class="gmail_quote">
<div dir="ltr">On Mon, 22 Oct 2018 at 13:39, Nicolas Rossi <<a href="mailto:nrossi@identicum.com" target="_blank">nrossi@identicum.com</a>> wrote:<br>
</div>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex; border-left:1px #ccc solid; padding-left:1ex">
<div dir="ltr">
<div class="gmail_default" style="font-family:arial,helvetica,sans-serif; font-size:small; color:#073763">
It seems that you have to import the CA certificate to the midPoint keystore:</div>
<div class="gmail_default" style="font-family:arial,helvetica,sans-serif; font-size:small; color:#073763">
<br>
</div>
<div class="gmail_default" style="font-family:arial,helvetica,sans-serif; font-size:small; color:#073763">
<span style="color:rgb(34,34,34); font-family:Arial,Helvetica,sans-serif">javax.net.ssl.</span><span style="color:rgb(34,34,34); font-family:Arial,Helvetica,sans-serif">SSLHandshakeException: sun.security.validator.</span><span style="color:rgb(34,34,34); font-family:Arial,Helvetica,sans-serif">ValidatorException:
PKIX path building failed: sun.security.provider.</span><span style="color:rgb(34,34,34); font-family:Arial,Helvetica,sans-serif">certpath.</span><span style="color:rgb(34,34,34); font-family:Arial,Helvetica,sans-serif">SunCertPathBuilderException: unable
to find valid certification path to requested target</span><br>
</div>
<div>
<div dir="ltr" class="m_7171952515821046730m_-5162657798453466869m_-8828961661768491601m_-7101126011515656757m_3742381860402929062gmail_signature">
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr"><font face="arial, helvetica, sans-serif"><br>
</font></div>
<div dir="ltr"><font face="arial, helvetica, sans-serif">I<span class="gmail_default" style="font-family:arial,helvetica,sans-serif; font-size:small; color:rgb(7,55,99)">t's the same error you have reported<a href="http://lists.evolveum.com/pipermail/midpoint/2018-June/004738.html" target="_blank">
on June</a> with the Office365.</span></font></div>
<div dir="ltr"><font face="arial, helvetica, sans-serif"><span class="gmail_default" style="font-family:arial,helvetica,sans-serif; font-size:small; color:rgb(7,55,99)"><br>
</span></font></div>
<div dir="ltr"><font face="arial, helvetica, sans-serif"><span class="gmail_default" style="font-family:arial,helvetica,sans-serif; font-size:small; color:rgb(7,55,99)">Regards,</span></font></div>
<div dir="ltr"><font face="arial, helvetica, sans-serif"><span class="gmail_default" style="font-family:arial,helvetica,sans-serif; font-size:small; color:rgb(7,55,99)"></span><br>
<br>
<font color="#444444">Ing Nicolás Rossi</font><br>
<font color="#999999">Identicum S.A.</font><br>
<font color="#999999">Jorge Newbery 3226</font><br>
<font color="#999999">Oficina: +54 (11) 4552-3050</font></font></div>
<div dir="ltr"><font face="arial, helvetica, sans-serif"><font color="#999999">Móvil: +54 (911) 6041-3920<br>
<a href="http://www.identicum.com" target="_blank">www.identicum.com</a></font></font><br>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<br>
</div>
<br>
<div class="gmail_quote">
<div dir="ltr">On Mon, Oct 22, 2018 at 9:18 AM Fabio Medeiro <<a href="mailto:fabio.medeiro@worldnettps.com" target="_blank">fabio.medeiro@worldnettps.com</a>> wrote:<br>
</div>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex; border-left:1px #ccc solid; padding-left:1ex">
<div dir="ltr">
<div dir="ltr">Hi all,
<div><br>
</div>
<div>I have been trying use office connector on midpoint, but I always get the same error message bellow. I have already imported the certificate. </div>
<div><br>
</div>
<div>2018-10-22 13:06:55,316 [] [http-nio-8080-exec-9] INFO (com.evolveum.midpoint.provisioning.impl.ConnectorManager): Created new connector instance for ConnectorSpec(resource:fdb1aac3-b520-4773-948f-6835a9232478(Office 365 Connector), name=null, oid=8c78406d-f7fb-431e-8522-3909e0556c68):
org.identityconnectors.office365.Office365Connector v1.2.0.0-SNAPSHOT
<div>
<div>2018-10-22 13:06:56,139 [] [http-nio-8080-exec-9] ERROR (org.identityconnectors.office365.Office365Connection): method: null msg:Error creating token, error javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building
failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target</div>
<div>2018-10-22 13:06:56,459 [] [http-nio-8080-exec-9] ERROR (org.identityconnectors.office365.Office365Connection): method: null msg:Error creating token, error javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building
failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target</div>
<div>2018-10-22 13:06:56,776 [] [http-nio-8080-exec-9] ERROR (org.identityconnectors.office365.Office365Connection): method: null msg:Error creating token, error javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building
failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target</div>
<div>2018-10-22 13:06:57,081 [] [http-nio-8080-exec-9] ERROR (org.identityconnectors.office365.Office365Connection): method: null msg:Error creating token, error javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building
failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target</div>
<div>2018-10-22 13:06:57,564 [] [http-nio-8080-exec-9] ERROR (org.identityconnectors.office365.Office365Connection): method: [null, IOE Error doing getRequest to path /tenantDetails?api-version=2013-11-08] msg:{}</div>
<div>javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target</div>
</div>
<div><br>
</div>
<div>Has anyone got this error???</div>
<div>Thanks </div>
-- <br>
<div dir="ltr" class="m_7171952515821046730m_-5162657798453466869m_-8828961661768491601m_-7101126011515656757m_3742381860402929062m_3043144425436070103gmail_signature">
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr">
<div dir="ltr"><br>
<div style="font-size:12.8px">
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div>
<div>
<p><span lang="EN-GB" style="font-size:10pt">Kind Regards<u></u><u></u></span></p>
<p><span lang="EN-GB" style="font-size:10pt">Fabio Medeiro<u></u></span></p>
<p><span lang="EN-GB" style="font-size:10pt"> </span>IT Helpdesk</p>
<p><img width="200" height="34" alt="/Users/dmcsharry/Library/Containers/com.microsoft.Outlook/Data/Library/Caches/Signatures/signature_464034326" style="font-size:10pt; width:2.0833in; height:0.3541in"><br>
</p>
<p><span lang="EN-GB" style="font-size:10pt">Hibernia House,<u></u><u></u></span></p>
<p><span lang="EN-GB" style="font-size:10pt">Cherrywood Business Park,<u></u><u></u></span></p>
<p><span lang="EN-GB" style="font-size:10pt">Loughlinstown, Co. Dublin D18 E440<u></u><u></u></span></p>
<p><span lang="EN-GB" style="font-size:10pt">Office: <a href="tel:+353%201%20531%200901" value="+35315310901" target="_blank" style="color:rgb(17,85,204)">+353 (1) 531 0901</a><u></u><u></u></span></p>
<p><span lang="EN-GB" style="font-size:10pt">Website: <a href="http://www.worldnettps.com/" target="_blank" style="color:rgb(17,85,204)"><span style="color:rgb(5,99,193)">www.worldnettps.com</span></a> </span></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
_______________________________________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
</blockquote>
</div>
_______________________________________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
</blockquote>
</div>
<br clear="all">
<div><br>
</div>
-- <br>
<div dir="ltr" class="m_7171952515821046730m_-5162657798453466869m_-8828961661768491601m_-7101126011515656757gmail_signature">
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr">
<div dir="ltr"><br>
<div style="font-size:12.8px">
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div>
<div>
<p><span lang="EN-GB" style="font-size:10pt">Kind Regards<u></u><u></u></span></p>
<p><span lang="EN-GB" style="font-size:10pt">Fabio Medeiro<u></u></span></p>
<p><span lang="EN-GB" style="font-size:10pt"> </span>IT Helpdesk</p>
<p><img width="200" height="34" alt="/Users/dmcsharry/Library/Containers/com.microsoft.Outlook/Data/Library/Caches/Signatures/signature_464034326" style="font-size:10pt; width:2.0833in; height:0.3541in"><br>
</p>
<p><span lang="EN-GB" style="font-size:10pt">Hibernia House,<u></u><u></u></span></p>
<p><span lang="EN-GB" style="font-size:10pt">Cherrywood Business Park,<u></u><u></u></span></p>
<p><span lang="EN-GB" style="font-size:10pt">Loughlinstown, Co. Dublin D18 E440<u></u><u></u></span></p>
<p><span lang="EN-GB" style="font-size:10pt">Office: <a href="tel:+353%201%20531%200901" value="+35315310901" target="_blank" style="color:rgb(17,85,204)">+353 (1) 531 0901</a><u></u><u></u></span></p>
<p><span lang="EN-GB" style="font-size:10pt">Website: <a href="http://www.worldnettps.com/" target="_blank" style="color:rgb(17,85,204)"><span style="color:rgb(5,99,193)">www.worldnettps.com</span></a> </span></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</blockquote>
</div>
<br clear="all">
<div><br>
</div>
-- <br>
<div dir="ltr" class="m_7171952515821046730m_-5162657798453466869m_-8828961661768491601gmail_signature">
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr">
<div dir="ltr"><br>
<div style="font-size:12.8px">
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div>
<div>
<p><span lang="EN-GB" style="font-size:10pt">Kind Regards<u></u><u></u></span></p>
<p><span lang="EN-GB" style="font-size:10pt">Fabio Medeiro<u></u></span></p>
<p>IT Helpdesk</p>
<p><img src="https://drive.google.com/a/worldnettps.com/uc?id=0B_KMxuqo4y1CRVdsUG9HNjZRakRQWGtBdk5uNXBjMWM4NmF3&export=download"><br>
</p>
<p><span lang="EN-GB" style="font-size:10pt">Hibernia House,<u></u><u></u></span></p>
<p><span lang="EN-GB" style="font-size:10pt">Cherrywood Business Park,<u></u><u></u></span></p>
<p><span lang="EN-GB" style="font-size:10pt">Loughlinstown, Co. Dublin D18 E440<u></u><u></u></span></p>
<p><span lang="EN-GB" style="font-size:10pt">Office: <a href="tel:+353%201%20531%200901" value="+35315310901" target="_blank" style="color:rgb(17,85,204)">+353 (1) 531 0901</a><u></u><u></u></span></p>
<p><span lang="EN-GB" style="font-size:10pt">Website: <a href="http://www.worldnettps.com/" target="_blank" style="color:rgb(17,85,204)"><span style="color:rgb(5,99,193)">www.worldnettps.com</span></a> </span></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
_______________________________________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
</blockquote>
</div>
_______________________________________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
</blockquote>
</div>
<br clear="all">
<div><br>
</div>
-- <br>
<div dir="ltr" class="m_7171952515821046730gmail_signature">
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr">
<div dir="ltr"><br>
<div style="font-size:12.8px">
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div>
<div>
<p><span lang="EN-GB" style="font-size:10pt">Kind Regards<u></u><u></u></span></p>
<p><span lang="EN-GB" style="font-size:10pt">Fabio Medeiro<u></u></span></p>
<p>IT Helpdesk</p>
<p><img src="https://drive.google.com/a/worldnettps.com/uc?id=0B_KMxuqo4y1CRVdsUG9HNjZRakRQWGtBdk5uNXBjMWM4NmF3&export=download"><br>
</p>
<p><span lang="EN-GB" style="font-size:10pt">Hibernia House,<u></u><u></u></span></p>
<p><span lang="EN-GB" style="font-size:10pt">Cherrywood Business Park,<u></u><u></u></span></p>
<p><span lang="EN-GB" style="font-size:10pt">Loughlinstown, Co. Dublin D18 E440<u></u><u></u></span></p>
<p><span lang="EN-GB" style="font-size:10pt">Office: <a href="tel:+353%201%20531%200901" value="+35315310901" target="_blank" style="color:rgb(17,85,204)">+353 (1) 531 0901</a><u></u><u></u></span></p>
<p><span lang="EN-GB" style="font-size:10pt">Website: <a href="http://www.worldnettps.com/" target="_blank" style="color:rgb(17,85,204)"><span style="color:rgb(5,99,193)">www.worldnettps.com</span></a> </span></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
_______________________________________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
</blockquote>
</div>
</div>
</body>
</html>