Identity Suite DYN Endpoint Account View Errors: Invalid Connector DN

Products

• CA Identity Manager
• CA Identity Suite

Issue/Introduction

When attempting to view DYN endpoint accounts within Identity Suite, users may encounter a NamingException: Conversion from connector DN failed error. This error indicates that the Distinguished Name (DN) passed to the DYN connector cannot be resolved against the LDAP schema. This issue commonly occurs when interacting with Oracle Internet Directory (OID) configurations where specific naming attributes are case-sensitive.

Environment

Identity Manager 14.x

Cause

The error is caused by a case-sensitivity mismatch within the DYN connector project. In ConnectorXpress, the naming attribute for the orclApplicationEntity object class may be incorrectly mapped (e.g., using orclapplicationcommonname instead of the case-sensitive orclApplicationCommonName). Consequently, when the system attempts to resolve an OID account that is a member of a group residing under an orclApplicationEntity object, the lookup fails.

Resolution

To resolve this issue, you must update the DYN connector project to use the correct case-sensitive attribute names:

1. Open the affected DYN Connector project in ConnectorXpress.
2. Navigate to the Attribute Mappings section for the project.
3. Locate the mapping for the orclApplicationEntity object class.
4. Update the naming attribute name to use the correct casing (e.g., change orclapplicationcommonname to orclApplicationCommonName).
5. Verify that all other related schema attributes in the project mappings use exact case matching for OID.
6. Save the changes to the project.
7. Redeploy the updated DYN connector to your Identity Suite environment.