Symantec IGA

  • 1.  CA- IDAM "Creating provisioning Directory"

    Posted Jan 10, 2016 02:19 AM

    Hi ,

    i am trying to create a provisioning directory through management console but i get this error >>

    The following error(s) occurred:

    Could not connect to LDAP server localhost:20389 with User DN eTGlobalUserName=superadmin,eTGlobalUserContainerName=Global Users,eTNamespaceName=CommonObjects,dc=WIN-CLLUTVSQ3G3.AD2.local,dc=eta and specified password

     

    Regards.



  • 2.  Re: CA- IDAM "Creating provisioning Directory"

    Posted Jan 10, 2016 07:20 AM

    Hi Mohammed

    you have to tell us what is you setting , have you install the CA Directory and the provisioning on the same server as the IM or different machine ?

     

    But in general , I have noticed something from your screen shot

    the Domain part (just before the username) is not referring to the Active Directory domain , but to the Provisioning domain , which is by default called "im" ,, also I prefer that you put the machine name instead of "localhost" ,, even it will work .

     

    best regards



  • 3.  Re: CA- IDAM "Creating provisioning Directory"

    Posted Jan 10, 2016 07:40 AM

    Hi Wael ,

    Thank you for your reply ,

     

    -for my setting , i am using 3 virtual machines ( IDM server " CA directory and provisioning server on the same server  " , DB server , AD server ).

    -after correcting the information i got this error .



  • 4.  Re: CA- IDAM "Creating provisioning Directory"

    Posted Jan 10, 2016 08:03 AM

    Hi Mohammed

    So you have installed all on one machine (CA Directory, Provisioning Directory, Provisioning Server, and IM)

    is the provisioning Directory installed successfully ? try user the Provisioning Manager setup , enter the hostname with the default port 20389 , then configure ,, it should show you the Domain name = im , Domain suffix = dc=im and the TLS port.

    if it fails , then you must review the installation logs to see what fails.

     

    if you need my advice , you have to separate the Provisioning server (CA Directory , Provisioning directory and Server ) away from the IM , you can install them on the DB server ,,, this will clarify lot of things during your testing , and it similar to production environment.

     

    best regards

    Wael



  • 5.  Re: CA- IDAM "Creating provisioning Directory"

    Posted Jan 10, 2016 08:05 AM

    another tip ,, it's easier to built your Provisioning connection using the < Import Directory> rather than Create From wizard , in this case , you should make the connection object name as the domain name (im)  and both in lower case ,,

    anyway both ways should work



  • 6.  Re: CA- IDAM "Creating provisioning Directory"

    Posted Jan 10, 2016 08:33 AM

    Hi Wael ,

    yes, i tried to configure it using Provisioning Manager Setup and it fails .

    i will try to review my log files to find the error if not working ,i will work on your advice and separate the provisioning server .

    Thanks a lot for your Co-operation.

     

    Best Regards,

    Mohammad.J



  • 7.  Re: CA- IDAM "Creating provisioning Directory"

    Posted Jan 10, 2016 08:18 AM

    Hi Wael ,

    yes, i tried to configure it using Provisioning Manager Setup and it fails .

    i will try to review my log files to find the error if not working ,i will work on your advice and separate the provisioning server .

    Thanks a lot for your Co-operation.

     

    Best Regards,

    Mohammad.J



  • 8.  Re: CA- IDAM "Creating provisioning Directory"

    Posted Mar 10, 2016 02:11 PM

    Still do you have this issue?



  • 9.  Re: CA- IDAM "Creating provisioning Directory"

    Posted Mar 13, 2016 03:21 AM

    Hi singh ,

     

    no this issue has been solved ,

     

    thanks for asking

     

    Best Regards ,

    MJ.



  • 10.  Re: CA- IDAM "Creating provisioning Directory"

    Broadcom Employee
    Posted Mar 10, 2016 11:05 PM

    Mohammad,

       Are you still having the issue? Have you tried to connect to the provisioning server with the same settings using something like jExplorer? You wont be able to do anything other than double check connection settings.

     

      I would try these things from the IM server:

    Ping the provisioning server, by IP then Name.

    Telnet to the provisioning server on port 20389

    Use a third party tool to make the connection like jexplorer to rule out IM.

     

    Thanks,

    Bill Patton



  • 11.  Re: CA- IDAM "Creating provisioning Directory"

    Posted Mar 13, 2016 03:24 AM

    Hi Bill Patton ,

     

    this issue has been solved ,

     

    thank you very much ,

     

    Best Regards ,

     

    MJ.