How to configure the CCS to be accessed directly by Provisioning Server by-passing JCS?

Products

• CA Identity Manager

Issue/Introduction

We have a remote Connector Server machine on Windows. How to configure the CCS to be accessed externally directly by Provisioning Server by-passing JCS?

Environment

Release : 14.4.x

Resolution

By default CCS listens to loop back IP addresses only. We need to go to Windows Registry and configure the Urls parameter so it listens to IP(s) that is/are accessible externally. This way Provisioning Server can connect to the external CCS directly by-passing JCS.

Go to Computer\HKLM\SOFTWARE\Wow6432Node\ComputerAssociates\slapd\im_ccs\CurrentVersion and modify Urls key's value from

      ldap://localhost:20402 ldaps://localhost:20403

To

     ldap://localhost:20402 ldaps://localhost:20403 ldap://<hostname>:20402 ldaps://<hostname>:20403

Notes:
   Replace <hostname> with the hostname of the CCS machine that is resolvable from the Provisioning Server machine

After this modification, restart CCS service.

And then you can use Connector Xpress to register CCS to the Provisioning Server accessing the exposed tcp/20402 or tcp/20403 directly.