Failed to execute SynchronizeUserProvisioningRolesAddAccountsEvent

Products

• CA Identity Suite

Issue/Introduction

After upgrading to 14.5 version, when we execute the CreateUserTask event, we are getting an error - Synchronize provisioning role and add accounts for user "test": Failed to execute SynchronizeUserProvisioningRolesAddAccountsEvent. ERROR MESSAGE: Global User 'test' provisioning role memberships added successfully. Associated accounts creation or update failed: (accounts created: 0, updated: 0, re-created: 0, failures: 1)

 

While reviewing the logs we found the following errors:

FAILURE: Connector Server Add (eTADSAccountName=Test)

    rc:  0x0034 (DSA is unavailable)

    msg: Connector Server Add failed: code 52 (UNAVAILABLE): failed to add entry eTADSAccountName=Test,eTADSContainerName=Users,eTADSDirectoryName=AD,eTNamespaceName=ActiveDirectory,dc=im,dc=etasa: JCS@TEST: doAddobjectClass='eTADSAccount', name='Test': class com.ca.jcs.csproxy.CSProxyMetaConnector: AD [eTADSDirectoryName=AD,eTNamespaceName=ActiveDirectory,dc=im,dc=etasa]: exhausted 6 retries without reconnecting: org.apache.directory.shared.ldap.exception.LdapServiceUnavailableException: JCS@TEST: JNDI: [LDAP: error code 52 - Server Down]: failed to add eTADSAccountName=Test,eTADSContainerName=Users,eTADSDirectoryName=AD,eTNamespaceName=ActiveDirectory,dc=im,dc=etasa (ldaps://xxx.xxx.xx.xxx:20411)

COMPLETED   JOB 0: SendAddJob [eTADSAccountName=Test, rc=52(Connector Server Add failed: code 52 (UNAVAILABLE): failed to add entry eTADSAccountName=Test,eTADSContainerName=Users,eTADSDirectoryName=AD,eTNamespaceName=ActiveDirectory,dc=im,dc=etasa: JCS@TEST: doAddobjectClass='eTADSAccount', name='Test': class com.ca.jcs.csproxy.CSProxyMetaConnector: AD [eTADSDirectoryName=AD,eTNamespaceName=ActiveDirectory,dc=im,dc=etasa]: exhausted 6 retries without reconnecting: org.apache.directory.shared.ldap.exception.LdapServiceUnavailableException: JCS@TEST: JNDI: [LDAP: error code 52 - Server Down]: failed to add eTADSAccountName=Test,eTADSContainerName=Users,eTADSDirectoryName=AD,eTNamespaceName=ActiveDirectory,dc=im,dc=etasa (ldaps://xxx.xxx.xx.xxx:20411))]

Environment

Release : 14.5
Component : CA Identity Suite Virtual Appliance

Cause

The Connector Server, Provisioning Manager, and Connector Xpress were not upgraded and remained on the previous version.

Resolution

After upgrading Connector Server on the windows machine, Provisioning Manager to 14.5 and Connector Xpress from 1 and 2.0 versions, the issue is resolved.