Updating LDAP User Directory Configuration in CA Identity Manager

Products

• CA Identity Manager
• CA Identity Suite

Issue/Introduction

This article describes the procedure for updating the LDAP server configuration for the corporate user directory in CA Identity Manager. This process involves exporting, modifying, and re-importing the UserStore.xml configuration file.

Environment

Identity Manager 14.x

Cause

This is a standard configuration change required when the LDAP server details (hostname, port, or credentials) for the corporate directory change.

Resolution

1. Backup: Before proceeding, create a backup of your existing UserStore.xml file.
2. Access Console: Log in to the CA Identity Manager Management Console with an administrative user.
3. Export: Navigate to Home > Directories > UserStore and export the UserStore.xml file.
4. Modify: Open the file in a text editor and update the directory URL (hostname/port), username, and root organization attributes as needed.
5. Format Check: Ensure the End-of-Line (EOL) format (Windows or Linux) is preserved. Using the incorrect format may cause a "blank page" error after login.
6. Import: Import the modified UserStore.xml file back into the Management Console.
7. Restart: Restart the Identity Manager services to apply the changes.

Additional Information

If you encounter login issues after the restart, verify the EOL format and ensure connectivity to the new LDAP host is active.