EEM Internal LDAP Store Connection Using JXplorer

Products

• Autosys Workload Automation
• CA Directory
• CA Process Automation Base
• Process Automation Manager
• CA Service Catalog
• CA Service Desk Manager
• CA IT Asset Manager
• CA IT Asset Manager Asset Portfolio Management

Issue/Introduction

Embedded Entitlement Manager (EEM) utilizes an internal CA Directory (itechpoz) as its primary LDAP data store. Administrators may need to access this internal store to perform advanced configuration or troubleshooting, such as manual password resets when the EiamAdmin account is locked or the EEM UI is inaccessible. This guide provides the parameters required to connect to the internal store using the JXplorer LDAP browser.

Environment

• Products: Embedded Entitlement Manager (EEM)
• Releases: 11.3.6, 12.x.
• Components: CA Directory (itechpoz), iGateway.

Resolution

Follow these steps to establish a connection to the EEM internal LDAP store:

1. Download and Install JXplorer:
   • Obtain the LDAP browser from the JXplorer open source project.
2. Initialize Connection:
   • Open JXplorer.
   • Navigate to File > Connect or click the Connect icon in the top-left corner.
3. Enter Connection Parameters:
   • Host: [Hostname or IP Address of the EEM Server]
   • Port: 509
   • Protocol: LDAP v3
   • Base DN: cn=itechpoz
   • Security Level: User + Password
   • User DN: cn=EiamAdmin,cn=Admins,cn=Entities,cn=iTechPoz
   • Password: [Enter the current EiamAdmin password]
     
     
4. Troubleshooting the Connection:
   • If the EiamAdmin password is unknown or needs to be reset, refer to official documentation on Reset EiamAdmin Password. 
     An alternate approach to reset the EiamAdmin password, which does not utilize JXplorer is available.
   • Ensure that the CA Directory (itechpoz) service is running on the EEM server.