Symantec IGA

Hi,

Do you get the same error if you modify some fiels of this user?

Do you have exchange? is mailbox ctreated?

El 04/02/2014, a las 08:57, CA Security Global User CommunityMessage Boards <CommunityAdmin@communities-mail.ca.com> escribió:

Hi,

When I create an user in IDM server with provisioning role, user is getting created on IDM server and also on endpoint (AD). But it is showing failed status with below error message

2014-02-04 08:04:01,309 ERROR [im.provisioning] (WorkManager(2)-42) javax.naming.NamingException: [LDAP: error code 1 - :ETA_E_0071<SGU>, Global User '***' synchronization for additions with existing provisioning roles failed: (accounts created: 0, updated: 0, re-created: 0, failures: 1) ]; remaining name 'eTGlobalUserName=XXXX,eTGlobalUserContainerName=Global Users,eTNamespaceName=CommonObjects,dc=im,dc=eta'
2014-02-04 08:04:01,309 ERROR [com.netegrity.ims.exception.EventExecuteStateException] (WorkManager(2)-42) Execution of event: IMTaskEvent failed. Exception encountered: Synchronization of User with Provisioning Roles failed, see task events for details
2014-02-04 08:04:01,310 ERROR [ims.tmt.IMSMessageListener] (WorkManager(2)-42) Exception Occured during event processing.
EventExecuteStateException: Failed to execute IMTaskEvent.

Thanks,

Posted by:idmlearner
--
CA Communities Message Boards
108761064
mb_message.2252815.108758524@myca-email.ca.com
https://communities.ca.com

Hi Marin,

Thanks for your reply.

I have below issues here

1. I am getting the same error message even I try to synchronize the role using prv mgr

Global User 'superuser_01' synchronization for additions with existing provisioning roles failed: (accounts created: 0, updated: 0, re-created: 0, failures: 1) [Number of detail item(s): 1]

2. The user is getting created in provisioning directory( I have verified using provisioning manager)

3. The other user logged into the windows machine and using the same IDM server credentials , can able to create the user successfully . But it is failing with my windows user credentials.

Thanks,

El 04/02/2014, a las 22:36, CA Security Global User CommunityMessage Boards <CommunityAdmin@communities-mail.ca.com> escribió:

Hi Marin,

Thanks for your reply.

I have below issues here

1. I am getting the same error message even I try to synchronize the role using prv mgr

Global User 'superuser_01' synchronization for additions with existing provisioning roles failed: (accounts created: 0, updated: 0, re-created: 0, failures: 1) [Number of detail item(s): 1]

2. The user is getting created in provisioning directory( I have verified using provisioning manager)

3. The other user logged into the windows machine and using the same IDM server credentials , can able to create the user successfully . But it is failing with my windows user credentials.

Thanks,

Posted by:idmlearner
--
CA Communities Message Boards
108807122
mb_message.2252815.108804582@myca-email.ca.com
https://communities.ca.com

El 04/02/2014, a las 22:36, CA Security Global User CommunityMessage Boards <CommunityAdmin@communities-mail.ca.com> escribió:

Hi Marin,

Thanks for your reply.

I have below issues here

1. I am getting the same error message even I try to synchronize the role using prv mgr

Global User 'superuser_01' synchronization for additions with existing provisioning roles failed: (accounts created: 0, updated: 0, re-created: 0, failures: 1) [Number of detail item(s): 1]

2. The user is getting created in provisioning directory( I have verified using provisioning manager)

3. The other user logged into the windows machine and using the same IDM server credentials , can able to create the user successfully . But it is failing with my windows user credentials.

Thanks,

Posted by:idmlearner
--
CA Communities Message Boards
108807122
mb_message.2252815.108804582@myca-email.ca.com
https://communities.ca.com

Hi,

If I user explore and correlate and Reverse sync the i can achieve create/modified accounts sync .

How to handle deleted accounts on endpoint. It means if I delete an account on endpoint then how that account is deleted on IDM server ?

Thanks,

Maybe I can jump in, as I am experiencing the same issue in our training environment. The details of the error from the Provisioning Manager are: "Error:  Failure:  Create Account :ETA_E_0083<MAC>, Account for Global User 'testuser02' on Active Directory Endpoint 'Forward-ADS' update failed: Existing account 'Test User02' has not previously been correlated to this global user"

I also see that the user IS created on the Active Directory endpoint, but it looks like IdM doesn't think so. I also noticed when I tried Role Synchronization, IdM says the account is missing on AD. So it looks like, although IdM created the account on the AD endpoint and the ldap, that they are not correlated? Is that possible? And now that I look at this picture, I see the Expected Accounts Account Name = testuser02 (sAMAccountName) while the Missing Accounts Account Name = Test User02 (commonname) - is that why it cannot correlate? Thanks!

I am working with obrpa06, we are still looking for a solution to this issue.  A bit of history here.  Our environment is in Education where we use VMWare ESX where everything worked proporly.  We migrated the images to a new ESX environment and appyied new VMWare Tools.  We have this issue in the new environment.  Thinking there could be a problem caused by the updated VMWare tools, we re-installed both IDM and the Provisioning Server with no success.  We are open to suggestions on a remedy to this issue.