Identity Manager Group %GROUP_ADMIN% DN Attribute Case Sensitivity
search cancel

Identity Manager Group %GROUP_ADMIN% DN Attribute Case Sensitivity

book

Article ID: 186932

calendar_today

Updated On:

Products

CA Identity Manager CA Identity Suite

Issue/Introduction

Identity Manager (IM) groups may fail to display as manageable for a user if the Distinguished Name (DN) value stored in the %GROUP_ADMIN% attribute does not exactly match the user's DN. This occurs because the attribute value is case-sensitive during the verification process.

Environment

Identity Manager

Cause

The %GROUP_ADMIN% attribute on the group object requires an exact, case-sensitive match of the User DN. If there is any casing discrepancy, IM will not validate the user as a manager for that group.

Resolution

Follow these steps to modify the User Directory configuration to resolve case-sensitivity issues:

  1. Export UserDir XML: Export the current Identity Manager User Directory XML configuration.
  2. Modify UserDir XML: Replace <AdminGroupTypes type="NONE"/> with <AdminGroupTypes type="ALL"/> instead
  3. Import Updated XML: Import the modified XML back into the Identity Management console.
  4. Restart Services: Restart the Identity Manager application server to apply the changes.

 

Powered by Wolken Software