Identity Manager Startup Fails with LDAP Response Read Timeout - Identity Manager

Products

• CA Identity Suite
• CA Identity Manager

Issue/Introduction

This article outlines the resolution for an Identity Manager startup failure characterized by an LDAP response read timed out error. This issue occurs when the JNDI (Java Naming and Directory Interface) communication with the LDAP directory server exceeds the default timeout threshold during the environment startup sequence.

Environment

Virtual Appliance 14.5

Cause

The default JNDI LDAP read timeout (3000 ms) is insufficient for the network latency or directory processing time experienced during the Identity Manager environment startup. This causes the startup step to abort when the response is not received within the 3000 ms window.

Resolution

To resolve this issue, increase the LDAP connection and read timeout values in the Java virtual machine configuration:

1. Navigate to the following configuration file on your Identity Manager Virtual Appliance: /opt/CA/VirtualAppliance/custom/IdentityManager/jvm-args.conf
2. Open the file using a text editor.
3. Locate the existing -Dcom.sun.jndi.ldap.read.timeout parameter. If it does not exist, add it.
4. Append or modify the line to include both parameters with an increased timeout value (e.g., 600,000 ms): -Dcom.sun.jndi.ldap.connect.timeout=600000 -Dcom.sun.jndi.ldap.read.timeout=600000
5. Save and close the file.
6. Restart the Identity Manager service.

If the issue persists, ensure that there are no underlying network or LDAP directory server performance issues that are significantly delaying the directory response.

Additional Information

To speak with a customer representative or a Support Engineer see Contact Support. Scroll to the bottom of the page and click on your respective region.