An error occured while configuring IdentityMinder. (Legacy_Onyx KB Id: 205734)

Products

• CA Identity Manager
• CA Identity Governance
• CA Identity Portal
• CA Risk Analytics
• CA Secure Cloud SaaS - Arcot A-OK (WebFort)
• CLOUDMINDER ADVANCED AUTHENTICATION
• CA Secure Cloud SaaS - Advanced Authentication
• CA Secure Cloud SaaS - Identity Management
• CA Secure Cloud SaaS - Single Sign On

Issue/Introduction

Trying to create a new directory within the IdentityMinder Management Console displays the following Directory configuration output:

Deploying directory configuration...

Parsing input stream...

Validating parsed objects...
Parsing the well-known template file "file:@IME/wellknown/LDAPImsWellKnown.xml"...
Validating the IdentityMinder directory "XXXX"...
Searching for the IdentityMinder directory
Searching for USER managed objects
Searching for GROUP managed objects
Searching for ORG managed objects
Searching for CUSTOM managed objects
Checking the provider library and user directory
Validating the "USER" managed object...
Searching for duplicate attributes
Ensuring that required well-knowns exist

Warning: IdentityMinder and SiteMinder may function differently since the disabled attribute is different in the user directory


Warning: IdentityMinder and SiteMinder may function differently since the password attribute is different in the user directory

Validating the "GROUP" managed object...
Searching for duplicate attributes
Ensuring that required well-knowns exist
Validating the "ORG" managed object...
Searching for duplicate attributes
Ensuring that required well-knowns exist
Checking the self-subscribing group settings

Configuring parsed objects...
Creating the IdentityMinder directory "XXXX"...
Setting the search options
Creating the "User" managed object
Setting the container information
Creating the attribute "Admin roles"
Creating the attribute "Administrative Scope"
Creating the attribute "Disabled State"
Creating the attribute "Password Hint"
Creating the attribute "User ID"
Creating the attribute "Full Name"
Creating the attribute "Last Name"
Creating the attribute "First Name"
Creating the attribute "User Organization"
Creating the attribute "Organization"
Creating the attribute "Password"
Creating the attribute "Email"
Creating the attribute "Title"

An error occured while configuring IdentityMinder. Reverting configured objects...

*****
FAILURE

Error: SmImsCommand (createImsManagedObjectAttrDefinition) Provider call failed
Error Code was: -2147418005
Error Message: Object Not Unique ID:103
[facility=4 severity=3 reason=0 status=2 message=SmImsCommand (createImsManagedObjectAttrDefinition) Provider call failed
Error Code was: -2147418005
Error Message: Object Not Unique ID:103]
at com.netegrity.sdk.imsimpl.TunnelObject.tunnel(TunnelObject.java:633)
at com.netegrity.sdk.imsimpl.ImsManagedObjectDefinitionImpl.addAttributeDefinition(ImsManagedObjectDefinitionImpl.java:263)
at com.netegrity.ims.config.ImsManagedObjectAttrObjectModel.persistObjectImpl(ImsManagedObjectAttrObjectModel.java:146)
at com.netegrity.ims.config.ObjectModel.persistObject(ObjectModel.java:268)
at com.netegrity.ims.config.ObjectModel.persistObject(ObjectModel.java:273)
at com.netegrity.ims.config.ObjectModel.persistObject(ObjectModel.java:273)
at com.netegrity.ims.config.ObjectModelManager.persistObjects(ObjectModelManager.java:180)
at com.netegrity.ims.config.ImsConfig.config(ImsConfig.java:326)
at com.netegrity.ims.manage.api.AbstractDeployer.runImsConfig(Unknown Source)
at com.netegrity.ims.manage.api.AbstractDeployer.runImsConfig(Unknown Source)
at com.netegrity.ims.manage.api.DirectoryDeployer.deploy(Unknown Source)
at com.netegrity.ims.manage.bean.ConfigToolJob.deployDirectory(Unknown Source)
at com.netegrity.ims.manage.bean.ConfigToolJob.run(Unknown Source)
at java.lang.Thread.run(Thread.java:536)

Environment

Release:
Component: IDMIND

Resolution

The reason you are getting the error is the field title is used more that once for the user object, It is used for the admin role and with the Title field. Suggestion is to use another attribute for the admin roles.