Modifying Provisioning Server Configuration Parameters Using LDAP Browser

Products

• CA Identity Manager
• CA Identity Suite

Issue/Introduction

This article outlines the procedure for modifying Provisioning Server configuration parameters, such as logging levels, when direct access via the Identity Manager graphical user interface (GUI) is unavailable or when backend configuration changes are required. This process uses an LDAP browser (such as jXplorer) to interface directly with the Provisioning Server’s configuration store.

Environment

Identity Manager 14.x & 15

Resolution

To modify provisioning configuration parameters, follow these steps:

1. Connect to the Provisioning Server: Open your LDAP browser and connect to the Provisioning Server using the following connection details:

   • Host: [Provisioning Server Hostname]
   • Port: 20389
   • Base DN: dc=im,dc=eta
   • User DN: eTGlobalUserName=etaadmin,eTGlobalUserContainerName=Global Users,eTNamespaceName=CommonObjects,dc=im,dc=eta
   • Authentication: Provide the password for the configured Provisioning Global User (default: etaadmin).
     

2. Navigate to the Configuration Path: Once connected, browse to the following directory structure: dc=im,dc=eta > eTNamespaceName=CommonObjects > eTConfigContainerName=Configuration > eTConfigParamContainerName=Parameters > eTConfigParamFolderName=Transaction Log > eTConfigParamName=Level

3. Update the Parameter:

   • Select the object eTConfigParamName=Level.
   • Locate the attribute eTConfigParamValue.
   • Modify the value to the desired logging level (e.g., Debug).
   • Submit the changes to update the configuration.