ADS Endpoint error when acquiring endpoint

Products

• CA Identity Suite

Issue/Introduction

We are trying to acquire AD endpoint from a cloud JCS server, getting below error. The connection to ADS works fine via the JXplorer on ports 389 and 636.

 

:ETA_E_003<ADI>, Active Directory Endpoint 'AD-LAB'

creation failed: Connector Server Add failed: Code 53

(UNWILLING_TO_PERFORM): failed to add entry

eTNamespaceName=ActiveDirectrory,dc-im,dc=etasa:

[email protected]: Failed to activate connector type on 

proxy connector server: [email protected]: Failed to start

the CCS process

(ldaps://awsagi1.corp.gov:2-411)

Environment

Release : 14.4

Resolution

The error indicates that the C++ Connector Server service on machine awsiga1.corp.gov failed to start. 

-Check the task manager to see if im_ccs.exe is running and the Windows Services to see if the C++ Connector Server is running.

-Try to stop/kill the process/service if it is running and then try starting the WIndows Service for the C++ Connector Server. If it does start then try to acquire the ADS Endpoint again.

- Be sure that the following ports are not blocked to the AD domain controller too: 389, 636, 3268, 3269, 445

- Also, make sure .NET Framework 3.5 is installed on the C++ Connector Server. The .NET Framework is a prerequisite and should resolve the .dll error.

See Prereqs for acquiring AD:

https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/identity-management-and-governance-connectors/1-0/connectors/microsoft-connectors/microsoft-active-directory-exchange-and-skpye-for-business(lync)/acquire-an-active-directory-endpoint.html