Active Directory Failover and Retry Conditions: Identity Manager

Products

• CA Identity Manager
• CA Identity Suite

Issue/Introduction

This article identifies the specific LDAP error codes that initiate ADS_Failover and ADS_RETRY operations within the Identity Manager Provisioning Server. These mechanisms ensure high availability for connections to Active Directory (AD).

Environment

Identity Manager 14.5 & 15

Resolution

The Provisioning Server initiates an ADS_Failover or ADS_RETRY operation only when one of the following LDAP errors occurs. Any other LDAP error may indicate a configuration or permission issue and will not trigger a failover:

• LDAP_SERVER_DOWN
• LDAP_UNAVAILABLE
• LDAP_UNAVAILABLE_CRIT_EXTENSION
• LDAP_TIMEOUT
• LDAP_LOCAL_ERROR

Additional Information

For further information about ADS Failover, see documentation Active Directory Failover Setup - 14.5 or Active Directory Failover Setup - v15

To speak with a customer representative or a Support Engineer see Contact Support. Scroll to the bottom of the page and click on your respective region.