Symantec Directory DSA Service Fails to Start Due to Initialization File Errors - Identity Manager

Products

• CA Identity Manager
• CA Identity Governance
• CA Identity Portal

Issue/Introduction

The ####-impd-main Directory System Agent (DSA) service fails to start, which results in a subsequent failure of the Provisioning Server service. This issue typically occurs in Identity Manager environments utilizing a Provisioning Directory in High Availability mode. Analyze the ####-impd-main_trace.log file (located in %DXHOME%\logs on Windows or $DXHOME/logs on Linux) to confirm the presence of the following errors:

• Assertion failed (r:/branchsp15.new/src/dsa/dxgrid/caDxgrid.c1944)
• DSA_E1280 Error in initialization files

Environment

Identity Manager 14.5 with Provisioning Directory in High Availability

Cause

This issue is often caused by an unexpected termination of Directory services, such as a forced shutdown or power outage, leading to corrupted initialization files.

Resolution

1. On the working node, navigate to the dxserver\config\knowledge directory.
2. Open the [HOSTNAME]-impd-main.dxc file and uncomment the following lines: # console-port = 20395 # console-password = "{encoding-method}password-hash"
3. Run dxpassword YourPassword from the command line to generate a hash.
4. Update the file with the generated port and hash: console-port = 20395 console-password = "[HASH_From_dxpassword]"
5. Reload the configuration: dxserver init [HOSTNAME]-impd-main.
6. Connect to the DSA: telnet localhost 20395.
7. Authenticate using the password created in Step 3.
8. Execute dump dxgrid-db;, then logout;.
9. Locate the generated database file at dxserver\data\[HOSTNAME]-impd-main.zdb.
10. Copy this .zdb file to the same directory on the problematic node.
11. On the problematic node, navigate to the dxserver\data directory.
12. Rename or move the existing [HOSTNAME]-impd-main.db file.
13. Delete the existing [HOSTNAME]-impd-main.tx file.
14. Rename the copied .zdb file to [HOSTNAME]-impd-main.db.
15. Start the DSA using dxserver start [HOSTNAME]-impd-main.
16. Disable the console access by commenting out the lines in the [HOSTNAME]-impd-main.dxc file used in Step 2.

Additional Information

To speak with a customer representative or a Support Engineer see Contact Support. Scroll to the bottom of the page and click on your respective region.