Updating Active Directory Endpoint with New Exchange Server Details - Identity Manager

Products

• CA Identity Manager
• CA Identity Suite

Issue/Introduction

When changing an Exchange Server environment, the Active Directory (ADS) endpoint must be updated to reflect these changes. This procedure allows you to refresh the endpoint configuration without requiring modifications to your existing Active Directory account templates.

Environment

Identity Manager 14.5

Cause

The ADS Endpoint requires a base-level explore operation to retrieve and update the endpoint configuration details from the network.

Resolution

Follow these steps to execute the base-level explore using the ldapsearch utility from the Provisioning Server bin folder:

1. Open a command prompt on the Provisioning Server.
2. Navigate to the installation bin directory.
3. Execute the following command, replacing the placeholders (e.g., PROV_SERVER_HOST, MY_GU, PASSWORD, AD_ENDPOINT_NAME) with your environment values:

ldapsearch.exe -h PROV_SERVER_HOST -p 20389 -D "eTGlobalUserName=MY_GU,eTGlobalUserContainerName=Global Users,eTNamespaceName=CommonObjects,dc=im,dc=eta" -w PASSWORD -b "eTADSDirectoryName=AD_ENDPOINT_NAME,eTNamespaceName=ActiveDirectory,dc=im,dc=eta" -s base "(objectClass=eTADSDirectory)" eTADSexchangeStores eTExploreUpdateEtrust

4. If the command fails due to special characters in your password, use the -W flag to be prompted for the password manually:

ldapsearch.exe -h PROV_SERVER_HOST -p 20389 -D "eTGlobalUserName=MY_GU,eTGlobalUserContainerName=Global Users,eTNamespaceName=CommonObjects,dc=im,dc=eta" -W -b "eTADSDirectoryName=AD_ENDPOINT_NAME,eTNamespaceName=ActiveDirectory,dc=im,dc=eta" -s base "(objectClass=eTADSDirectory)" eTADSexchangeStores eTExploreUpdateEtrust

 

Note: This sample assumes the Provisioning domain name is im.

Additional Information

To speak with a customer representative or a Support Engineer see Contact Support. Scroll to the bottom of the page and click on your respective region.