Symantec IGA

 View Only
  • 1.  Issue with Lync Account creation-IDM

    Posted Jan 12, 2018 10:51 AM

    Hello All,

     

    We have implemented integration between IM 12.6 SP4 CP5 and Microsoft lync. The design is in such a manner :-

     

    1. New User is created on AD and Exchange

    2. Bulk task runs after 15 minutes and updated UPN of the AD account

    3. Bulk task runs after 15 minutes and assigns role for creation of lync account.

     

    We are observing that whenever the lync role is getting assigned, sometimes there are no failure whereas sometimes there are failures inside IAM. It is not consistent.

     

    Another thing to note here is , although in VST i shows that task has failed but when we check the AD account , lync user is created for same.

     

    Has anyone experienced same problem? We want to avoid any kind of failure inside IAM. Following is the error which we get :-

     

    1. Cause: Active Dir. Account 'xyz' on 'AD_EP' modification failed: Connector Server Modify failed: code 70 (RESULTS_TOO_LARGE): failed to modify entry: eTADSAccountName=XYZ,eTADSOrgUnitName=OU,eTADSOrgUnitName=OU,eTADSOrgUnitName=Customers,eTADSOrgUnitName=OU,eTADSDirectoryName=OU,eTNamespaceName=ActiveDirectory,dc=im,dc=etasa: JCS@server: JNDI: [LDAP: error code 70 - Error occurred while setting Lync User attributes: Management object not found for identity "CN=XYZ,OU=Users,OU=OU,OU=Customers,OU=SKALA,DC=AD_EP,DC=im,DC=com".]: failed to modify eTADSAccountName=XYZ,eTADSOrgUnitName=OU,eTADSOrgUnitName=OU,eTADSOrgUnitName=Customers,eTADSOrgUnitName=OU,eTADSDirectoryName=OU,eTNamespaceName=ActiveDirectory,dc=im,dc=etasa

     

    Another error which we have observed is this one :-

     

    2. Cause: Active Dir. Account 'XYZ' on 'AD_EP' modification failed: Connector Server Modify failed: code 80 (OTHER-LdapNamingException): failed to modify entry: eTADSAccountName=XYZ,eTADSOrgUnitName=Users,eTADSOrgUnitName=OU,eTADSOrgUnitName=Customers,eTADSOrgUnitName=OU,eTADSDirectoryName=AD_EP,eTNamespaceName=ActiveDirectory,dc=im,dc=etasa: server_name: JNDI: [LDAP: error code 70 - Unable to determine Lync User Enabled status: System.Management.Automation.RemoteException: The following error occurred while loading the extended type data file:
    , C:\Program Files\Common Files\Skype for Business Server 2015\Modules\SkypeForBusiness\OcsRgsTypes.ps1xml(22) : Error in type "Deserialized.Microsoft.Rtc.Rgs.Management.RgsIdentity": Cannot convert note "TargetTypeForDeserialization":"Cannot convert the "Microsoft.Rtc.Rgs.Management.RgsIdentity" value of type "System.String" to type "System.Type".".
    , C:\Program Files\Common Files\Skype for Business Server 2015\Modules\SkypeForBusiness\OcsRgsTypes.ps1xml(57) : Error in type "Deserialized.Microsoft.Rtc.Rgs.Management.WritableSettings.Agent": Cannot convert note "TargetTypeForDeserialization":"Cannot convert the "Microsoft.Rtc.Rgs.Management.WritableSettings.Agent" value of type "System.String" to type "System.Type".".

    at PowerShellPool.get(PowerShellPool* )
    at LyncServerConnectionImpl.run0(LyncServerConnectionImpl* , Char* cmd, vector<std::vector<std::pair<std::basic_string<wchar_t\,std::char_traits<wchar_t>\,std::allocator<wchar_t> >\,std::basic_string<wchar_t\,std::char_traits<wchar_t>\,std::allocator<wchar_t> > >\,std::allocator<std::pair<std::basic_string<wchar_t\,std::char_traits<wchar_t>\,std::allocator<wchar_t> >\,std::basic_string<wchar_t\,std::char_traits<wchar_t>\,std::allocator<wchar_t> > > > >\,std::allocator<std::vector<std::pair<std::basic_string<wchar_t\,std::char_traits<wchar_t>\,std::allocator<wchar_t> >\,std::basic_string<wchar_t\,std::char_traits<wchar_t>\,std::

     

    Would appreciate if anyone can assist us here.

     

    Thanks,

    Shashank



  • 2.  Re: Issue with Lync Account creation-IDM
    Best Answer

    Posted Jan 18, 2018 03:20 PM

    Hello Shashank,

     

    This may be best to be opened as a support ticket so it can be looked into further. There was some known issues with the Lync endpoint that looks similar to the behaviors you are seeing. However they were fixed in more recent updates.

     

    Thanks,

    Luke



  • 3.  Re: Issue with Lync Account creation-IDM

    Posted Jan 23, 2018 05:10 AM

    Sure thanks !



  • 4.  Re: Issue with Lync Account creation-IDM

    Posted Feb 26, 2018 09:39 AM

    Hi Shashank, 

     

    Were you able to find a resolution to this? 

     

    We are seeing similar issues with our setup.

     

    thanks

    Abinash