search cancel

How to update an Active Directory Endpoint with new exchange server details


Article ID: 42531


Updated On:


CA Identity Manager CA Identity Suite


Client has an Active Directory endpoint configured in the provisioning server having exchange integrated with this endpoint.
Customer has now changed the exchange server, so they need to update the same in their AD endpoint.
But when they tried to update the AD endpoint it did not show the new exchange server details

They need to know how they can update the existing AD endpoint with new exchange server details so that they do not have to update AD account templates as they have thousands of AD account templates.

In other words; How to update an Active Directory Endpoint with new exchange server details?


All Identity Manager


The ADS Endpoint needs to have a base level explore executed in order to retrieve the information to update the endpoint.


Run a ldap search command (from the Provisioning Server bin folder) such as the following to update the endpoint object.

ldapsearch.exe -h PROV_SERVER_HOST -p 20389 -D "eTGlobalUserName=MY_GU,eTGlobalUserContainerName=Global Users,eTNamespaceName=CommonObjects,dc=im,dc=eta" -w PASSWORD -b "eTADSDirectoryName=AD_ENDPOINT_NAME,eTNamespaceName=ActiveDirectory,dc=im,dc=eta" -s base "(objectClass=eTADSDirectory)" eTADSexchangeStores eTExploreUpdateEtrust

If the command would not work due to password special characters try to change -w PASSWORD to -W  system will ask for the password after the command is executed.

ldapsearch.exe -h PROV_SERVER_HOST -p 20389 -D "eTGlobalUserName=MY_GU,eTGlobalUserContainerName=Global Users,eTNamespaceName=CommonObjects,dc=im,dc=eta" -W -b "eTADSDirectoryName=AD_ENDPOINT_NAME,eTNamespaceName=ActiveDirectory,dc=im,dc=eta" -s base "(objectClass=eTADSDirectory)" eTADSexchangeStores eTExploreUpdateEtrust


You would need to replace PROV_SERVER_HOST, MY_GU, PASSWORD, and AD_ENDPOINT_NAME by your values.
Assuming in this sample the Provisioning domain name value is im.