ADS Endpoint error when acquiring endpoint

Products

• CA Identity Suite

Issue/Introduction

We are trying to acquire AD endpoint from a cloud JCS server, getting below error. The connection to ADS works fine via the JXplorer on ports 389 and 636.

 

:ETA_E_003<ADI>, Active Directory Endpoint '<EndpointName>' creation failed: Connector Server Add failed: Code 53 (UNWILLING_TO_PERFORM): failed to add entry eTNamespaceName=ActiveDirectrory,dc-im,dc=etasa: JCS@<JCSHostname>: Failed to activate connector type on proxy connector server: JCS@<JCSHostname>: Failed to start the CCS process (ldaps://<JCSHostname>:20411)

Environment

Release : 14.4

Resolution

The error indicates that the C++ Connector Server service on machine <JCSHostname> failed to start. 

-Check the task manager to see if im_ccs.exe is running and the Windows Services to see if the C++ Connector Server is running.

-Try to stop/kill the process/service if it is running and then try starting the WIndows Service for the C++ Connector Server. If it does start then try to acquire the ADS Endpoint again.

- Be sure that the following ports are not blocked to the AD domain controller too: 389, 636, 3268, 3269, 445

- Also, make sure .NET Framework 3.5 is installed on the C++ Connector Server. The .NET Framework is a prerequisite and should resolve the .dll error.

See Prereqs for acquiring AD:

https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/identity-management-and-governance-connectors/1-0/connectors/microsoft-connectors/microsoft-active-directory-exchange-and-skpye-for-business(lync)/acquire-an-active-directory-endpoint.html