Explored CA Top secret V1 connector error

Products

• CA Identity Suite

Issue/Introduction

Getting the following error while exploring CA TSS v1 connector,

:ETA_E_0257<EAC>, Error listing CA Top Secret Acid objects: LDP2004E Error issuing command with R_Admin, function=1, SAF=8, RACF=16, reason=4(0001 TSS0226E REQUEST FAILED BY INSTALLATION EXIT )

Environment

Identity Manager 14.5.1 

Cause

The error LDP2004E Error issuing command with R_Admin, function=1, SAF=8, RACF=16, reason=4 (TSS0226E REQUEST FAILED BY INSTALLATION EXIT)  indicates that the command issued by the LDAP Server was rejected by a Top Secret installation exit (security exit) at the environment. This typically happens if the LDAP service user lacks sufficient administrative authority or if specific site rules prevent the command. 

Resolution

Grant proper privilege.  Ensure that the ACID used by the CA LDAP Server has sufficient ADMIN authority to list ACIDs. Specifically, check for DATA authorities like DATA(ALL).  Also, check Security Exits: Review your TSSINSTX installation exit logic with your security team to see if it is intentionally blocking requests from the LDAP service user or specific R_Admin functions.