Problems with creating global users

Products

• CA Identity Manager
• CA Identity Governance
• CA Identity Portal
• CA Identity Suite

Issue/Introduction

After migrated CA Identity Manager from 12.6.5 Standalone to new vApp version 14.3.0 CP02 trying to Create User Task but failing:  CreateUser task, the error "Failed to execute CreateUserEvent. ERROR MESSAGE: [LDAP: error code 17 - IDMDisabled]" is displayed.

Double checked already in UserStore DSA schema files where the attribute is extended  as well as the attribute in the User Store in the Management Console but sounds everything good, but error persists.

 

Environment

Release : 14.3

Component : IdentityMinder(Identity Manager)

Cause

schema updated in user store but not updated in router

Resolution

This happens because  was updated the Directory schema on the vapp node where the userstore Data DSA is but did not update the schema on the vapp node where the userstore Router DSA is. After updated in the another Vaap where CA Directory Router resides this issue is resolved.