PAM SC 14.1 - Error For Movement Of OU In Active Directory For The Admin User

[Julian Riano]

Hi expert's

The client made organizational unit movement for the admin user of PAM server Control 14.1

This movement generates an error when logging on to the console.

Is this user's configuration registered in any configuration file or in a database table?

Initially the user was in the following OU

CN=pam_user,ou=usuarios,dc=cliente,dc=co

And was moved to the next OU

CN=pam_user,OU=CUENTAS,ou=usuarios,dc=cliente,dc=co

Any idea or solution for this error?

------------------------------
Julian Riaño
------------------------------

[Miquel Gilibert i Sunye]

Hi Julian
If you get a null there it means it cannot retrieve the AD information from the IAM Framwork. Since it cannot load it, it will not be able to display the domain, etc. You can check that in the jboss's server.log. What does it say about loading the environment ?

You can actually check what configuration you have by accessing the identity management console at https://<your_pam_sc_server>:8443/idmmanage (you will have to have idm management enabled for that). You can check how to enable it at

https://techdocs.broadcom.com/content/broadcom/techdocs/us/en/ca-enterprise-software/layer7-privileged-access-management/privileged-identity-manager/14-0/implementing/using-the-ca-identity-manager-management-console.html

and checking the ac-dir and ac_env entries, making sure they are consistent

I see it is a long time you have posted the communities post so maybe you have already done it, but if not, please​ open a case with support adding the server.log to the case and we will take a look

[Julian Riano]

Hi Miquel

I have performed the indicated procedures but they did not work. The error disappeared when I modified the records in the database in the im_dir_connection table, after these changes I restarted the server and it worked correctly.