IGA Xpress Installer fails with "[ERROR] igx group does not exist" when using Active Directory

Products

• CA Identity Manager

Issue/Introduction

When running the IGA Xpress installer (./install) in an environment using Active Directory (AD) for back-end authentication, the installation fails with the following error:

text

 

[ERROR] igx group does not exist, please create group "igx" for user "igx", exiting...

This occurs even if the igx user exists in Active Directory. Because AD uses the sAMAccountName attribute for both users and groups, many organizations cannot have both a user and a group named exactly "igx." The installer previously required a group name that matched the user name.

Environment

IGA Xpress 1.0.8 and earlier.

Cause

The IGA Xpress installer (version 1.0.8 and earlier) had a hard-coded constraint requiring the primary group of the installation user to be named "igx." If the user was pre-created in Active Directory with a different primary group name (e.g., igx:igx_group), the installer would fail to identify the group and attempt to create it, resulting in a conflict or a "not found" error.

Resolution

The installer logic has been updated to relax the igx group constraint. The installer will now only attempt to create an igx group if the igx user is not already present on the system. If the user is already present (e.g., via AD or LDAP), the deployment will use that user's existing primary group, regardless of its name.

This fix is scheduled for inclusion in the following releases:

• IGA Xpress 1.1
• Identity Suite v15 Fix Pack 6

These releases are currently targeted for the end of April 2026.

---

Workaround

For environments that require immediate deployment before the release of Xpress 1.1:

1. Local Account Setup: Use a local Linux user and group (both named igx) for initial installation in lower/test environments.
2. Migration Path: Once Xpress 1.1 or Fix Pack 6 is available, you can transition to an Active Directory account by performing an igactl backup, reinstalling with the new version using the AD account, and then performing an igactl restore. This ensures all file permissions and user-mode services are correctly mapped to the new AD identity.

Additional Information

• Identity Suite V15 IGA Xpress 1.0 deployment demonstration — Guide for IGA Xpress installation and deployment.
• Symantec IGA Xpress 1.0 Documentation — Official product documentation for IGA Xpress.