Using RACF CSDATA attribute gives: attribute type undefined error

Products

• CA Identity Suite

Issue/Introduction

When using CSDATA attribute as explained in article 275795 I am getting error:

modification failed: RAC Dispatcher Modify failed: <attribute name>: attribute type undefined

Cause

Missing entries in slapd.conf.

All custom fields have to be properly defined in slapd.conf

Resolution

Custom attributes need to be defined in slapd.conf – it should look similar to

##############################################################

# racf_utf database specific definition

# This definition is not for Identity Manager or Web Admin

###############################################################

database             racf_utf

suffix               "host=<hostname>,o=<organization>,c=<country>" 

#keyword        RACF             LDAP            type    max_len     display

user-csdata     <att. name>   <att. name>    char    15 

 

* max_len should be according to the custom attribute definition in the schema – the example below uses 15 for no specific reason.

The following document should be used as reference -  LDAP Server Support for CSDATA and the configuration syntax expected in slapd.conf

https://techdocs.broadcom.com/us/en/ca-mainframe-software/security/ca-system-z-security-communication-servers-dsi-ldap-pam/15-1/configuring/configure-the-ca-ldap-server/configure-the-racf-utf-backend/racf-configuration-options/ca-ldap-server-support-for-csdata.html

Additional Information

For Troubleshooting purposes:

Work with Mainframe team to enable debug while reproducing this use case (attempting to modify attribute):

1. Turn on LDAP trace with /F LDAR151,SET,DEBUG,ANY
2. Reproduce the issue from IM
3. Turn off LDAP trace with /F LDAPR151,SET,DEBUG,0

* Replace LDAPR151 with your STC name in #1 and #3

Output can be shared with IM support for analysis if error is different.