How to link/connect JCS (CA IAM CS) on Linux to CCS on Windows

Products

• CA Identity Manager
• CA Identity Governance
• CA Identity Portal
• CA Identity Suite

Issue/Introduction

When installing CA IAM CS (JCS) on Linux selecting "Remote Legacy Connector Server (C++) Management, the following error messages occurred and cannot connect to CCS on Windows.

The server credentials provided are invalid. A connection to the server could not be established

CCS is running on specified Server Host and the hostname is resolved correctly to the IP address. There is no firewall blocking between the Linux and Windows servers.
What could be the cause of this problem?

Environment

Release : 14.3

Component : IdentityMinder(Identity Manager)

Cause

By default CCS on Windows server listens to loop back IP addresses only. We need to go to Windows Registry and configure the Urls parameter so it listens to IP(s) that is/are accessible externally.

Resolution

Please go to Computer\HKLM\SOFTWARE\Wow6432Node\ComputerAssociates\slapd\im_ccs\CurrentVersion and modify Urls key's value

from

ldap://localhost:20402 ldaps://localhost:20403

to

ldap://localhost:20402 ldaps://localhost:20403 ldap://<hostname>:20402 ldaps://<hostname>:20403

Notes: Please replace <hostname> with the correct CCS Windows hostname.

Please restart CCS service after this Registry modification and try to connect from JCS machine again.

Additional Information

If editing the registry for the im_ccs URLs be sure that you keep ldap://localhost:20402 ldaps://localhost:20403 as part of the value otherwise the C++ Connector Server may not run properly and continuously enter a running/stopping state.

https://knowledge.broadcom.com/external/article?articleId=236156