IDM Errors after LDAP Server moved from ODSEE to OUD
search cancel

IDM Errors after LDAP Server moved from ODSEE to OUD

book

Article ID: 240033

calendar_today

Updated On:

Products

CA Identity Manager

Issue/Introduction

After migrated the LDAP servers used for the IDM corporate user store and a couple of endpoints from ODSEE to OUD.  users are getting errors that say they're not authorized to execute tasks. Part of the error says "Did not find definition for type USER."

Example error:

12:42:48,354 DEBUG [ims.llsdk.dirandenvcache.moAttrCache] (ajp-/172.18.37.58:8009-2) findManagedObjectAttr: Found mo definition key for [6] in cache.
12:42:48,354 DEBUG [ims.llsdk.directory.jndi] (ajp-/###.###.##.##:8009-2) Acquiring new LDAP connection
12:42:48,354 DEBUG [ims.llsdk.directory.jndi] (ajp-/###.###.##.##:8009-2) Acquired LDAP connection (com.netegrity.llsdk6.imsimpl.directory.jndi.LdapOps@3a5624c0)
12:42:48,355 DEBUG [ims.llsdk.directory.jndi] (ajp-/###.###.##.##:8009-2) JNDIBase.getOrgMembershipUniqueName trying to get orgn DN for object with unique name "uid=svc-#########,ou=Internal,ou=Users,o=bcbsfl.com"
12:42:48,355 DEBUG [ims.llsdk.directory.jndi] (ajp-/###.###.##.##:8009-2) JNDIBase.getOrgMembershipUniqueName trying to get orgn DN for object with unique name "uid=svc-#########,ou=Internal,ou=Users,o=bcbsfl.com"
12:42:48,355 DEBUG [ims.llsdk.typeregistry] (ajp-/###.###.##.##:8009-2) Did not find definition for type USER
12:42:48,356 DEBUG [ims.plugins.pluginmgr.environment.extreme] (ajp-/###.###.##.##:8009-2) Getting plugins for environment "PMI_STAGE" and key "taskFilter".
12:42:48,356 DEBUG [ims.plugins.pluginmgr.environment.extreme] (ajp-/###.###.##.##:8009-2) Found 0 environment-specific plugins for this key.
12:42:48,356 DEBUG [ims.plugins.pluginmgr.environment.extreme] (ajp-/###.###.##.##:8009-2) Found 0 global plugins for this.
12:42:48,356 ERROR [ims.default] (ajp-/172.18.37.58:8009-2) Administrator svc-######### is not authorized to exercise task CA PAM Password Reset

Environment

Release : 14.3

Component : Identity Manager

Resolution

 Role allowed to execute the task had to be deleted and redefined with the same values