Resolving LDAP Read Timeout Errors During Connector Migration - Identity Manager

Products

• CA Identity Suite
• CA Identity Manager

Issue/Introduction

This article addresses the "LDAP response read timed out, timeout used: -1ms" error encountered when executing the TSSv2Migrate.bat migration script.

This issue typically occurs due to insufficient timeout values in the Java Development Kit (JDK) configuration, causing the migration to fail during the V1 to V2 connector transition.

Environment

Identity Manager 14.5 & 15

Cause

Certain JDK versions default to a 15-second read timeout when the com.sun.jndi.ldap.read.timeout parameter is not explicitly defined. This default duration is often insufficient for migration tasks, leading to an LDAP read timeout error.

Resolution

1. Locate Migration Script: Navigate to the \Connector Server\jcs\resources\tss\ directory and open the TSSv2Migrate.bat file in a text editor.

2. Edit JAVA_OPTS: Locate the JAVA_OPTS definition line within the script. Add the following parameter to the existing JAVA_OPTS string: -Dcom.sun.jndi.ldap.read.timeout=3600000

3. Verify Configuration: Ensure the parameter is added to the same line as the other JAVA_OPTS arguments. Do not place it on a separate line or within a different command block.

4. Save and Execute: Save the TSSv2Migrate.bat file and re-run the migration script. The increased timeout value allows the connector migration process additional time to complete the LDAP read operations.

Additional Information

To speak with a customer representative or a Support Engineer see Contact Support. Scroll to the bottom of the page and click on your respective region.