Configuring a Router DSA to Optimize Failover for Identity Manager User Stores - Directory

Products

• CA Identity Manager

Issue/Introduction

When Identity Manager is configured with multiple Directory user stores, a loss of connectivity to the primary host can result in extended failover delays. Implementing a Router DSA centralizes the connection logic, allowing Identity Manager to fail over seamlessly to secondary nodes without waiting for the primary host to recover.

Environment

Identity Manager 14.5

Cause

By default, if the primary host in the Identity Manager Directory XML becomes unavailable, the system does not automatically re-route requests efficiently. A Router DSA acts as a gateway that monitors the availability of data DSAs, ensuring continuous connectivity.

Resolution

Configure a Router DSA by following these steps in order:

1. Stop Services: Run dxserver stop all to ensure all DSA processes are halted before modification.
2. Create the Router DSA: Run the following command (adjust parameters for your environment): Dxnewdsa -trouter CorporateRouter 11389 "o=CA Technologies,c=US" Note: Ensure the prefix is configured for the group preceding your data DSA.
   
   
   
   
   
3. Configure the Router DSA: Open CorporateRouter.dxc (located in ...\dxserver\config\knowledge\) and add the following line: trust-flags = allow-check-password, trust-conveyed-originator
4. Update Data DSAs: Add the same trust-flags line to all existing Data DSA .dxc files. Important: Place this line after the auth-levels entry to prevent configuration errors.
   
   
   
5. Create the .dxg Source File: Create a new file named CorporateRouter.dxg in the knowledge directory containing the following: source "CorporateUserStore.dxc"; source "CorporateRouter.dxc"; source "CorpStore2.dxc";
   
   
   
6. Reference the .dxg File: Open the .dxi file for the data DSAs and the router DSA. Update the # Knowledge section to source the new .dxg file.
   
   
   
7. Verify and Restart: Run dxsyntax to validate configurations. If no errors are reported, run dxserver start all.
8. Update Identity Manager Console: Log in to the Identity Manager Management Console, export the Corporate User Store configuration, update the "Connection host" to point to the new Router DSA, and re-import the file.

Additional Information

To speak with a customer representative or a Support Engineer see Contact Support. Scroll to the bottom of the page and click on your respective region.