Symantec IGA

  • 1.  error running RoleDefGenerator

    Posted Jun 29, 2016 09:05 AM


    Hi,

    I am trying to run the RoleDefinations command on IDM R12.6 SP8 for a dynamic connector, created using Connector Xpress. Below is the error which message.

     

    PS: mssql2012 is the hostname .

     

    C:\Program Files (x86)\CA\Identity Manager\IAM Suite\Identity Manager\tools\Role

    DefinitionGenerator\bin>RoleDefGenerator.bat -d im -h mssql2012 -u super -l

    Password:

    com.ca.iam.model.IAMCommunicationException: javax.naming.CommunicationException:

    mssql2012:20390 [Root exception is java.lang.NoClassDefFoundError: com/rsa/jsaf

    e/crypto/JSAFE_InvalidUseException]

            at com.ca.iam.model.impl.IAMServerImpl.namingExceptionToIAMException(IAM

    ServerImpl.java:339)

            at com.ca.iam.model.impl.IAMServerImpl.translateNamingException(IAMServe

    rImpl.java:374)

            at com.ca.iam.model.impl.ETAServer.init(ETAServer.java:92)

            at com.ca.iam.model.IAMServer.newInstance(IAMServer.java:545)

            at com.ca.iam.roledefgen.RoleDefGenerator.main(RoleDefGenerator.java:368

    )

    Caused by: javax.naming.CommunicationException: mssql2012:20390 [Root exception

    is java.lang.NoClassDefFoundError: com/rsa/jsafe/crypto/JSAFE_InvalidUseExceptio

    n]

            at com.sun.jndi.ldap.Connection.<init>(Unknown Source)

            at com.sun.jndi.ldap.LdapClient.<init>(Unknown Source)

            at com.sun.jndi.ldap.LdapClient.getInstance(Unknown Source)

            at com.sun.jndi.ldap.LdapCtx.connect(Unknown Source)

            at com.sun.jndi.ldap.LdapCtx.<init>(Unknown Source)

            at com.sun.jndi.ldap.LdapCtxFactory.getUsingURL(Unknown Source)

            at com.sun.jndi.ldap.LdapCtxFactory.getUsingURLs(Unknown Source)

            at com.sun.jndi.ldap.LdapCtxFactory.getLdapCtxInstance(Unknown Source)

            at com.sun.jndi.ldap.LdapCtxFactory.getInitialContext(Unknown Source)

            at javax.naming.spi.NamingManager.getInitialContext(Unknown Source)

            at javax.naming.InitialContext.getDefaultInitCtx(Unknown Source)

            at javax.naming.InitialContext.init(Unknown Source)

            at javax.naming.InitialContext.<init>(Unknown Source)

            at javax.naming.directory.InitialDirContext.<init>(Unknown Source)

            at com.ca.commons.jndi.beans.ResilientDirContextFactory.testContexts(Res

    ilientDirContextFactory.java:388)

            at com.ca.commons.jndi.beans.ResilientDirContextFactory.invoke(Resilient

    DirContextFactory.java:440)

            at com.sun.proxy.$Proxy25.search(Unknown Source)

            at com.ca.commons.jndi.beans.JNDIBeanStore$JNDIObjectProcessor.doSearch(

    JNDIBeanStore.java:1797)

            at com.ca.commons.jndi.beans.JNDIBeanStore.action(JNDIBeanStore.java:617

    )

            at com.ca.iam.model.impl.ETAServer.init(ETAServer.java:78)

            ... 2 more

    Caused by: java.lang.NoClassDefFoundError: com/rsa/jsafe/crypto/JSAFE_InvalidUse

    Exception

            at com.ca.commons.security.ssl.CustomSSLSocketFactory.getSupportedCipher

    Suites(CustomSSLSocketFactory.java:324)

            at com.ca.commons.security.ssl.CustomSSLSocketFactory.getDefaultCipherSu

    ites(CustomSSLSocketFactory.java:318)

            at com.ca.commons.security.ssl.CustomSSLSocketFactory.enableSocketCipher

    Suites(CustomSSLSocketFactory.java:309)

            at com.ca.commons.security.ssl.CustomSSLSocketFactory.createSocket(Custo

    mSSLSocketFactory.java:269)

            at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)

            at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)

            at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)

            at java.lang.reflect.Method.invoke(Unknown Source)

            at com.sun.jndi.ldap.Connection.createSocket(Unknown Source)

            ... 22 more

    Caused by: java.lang.ClassNotFoundException: com.rsa.jsafe.crypto.JSAFE_InvalidU

    seException

            at java.net.URLClassLoader.findClass(Unknown Source)

            at java.lang.ClassLoader.loadClass(Unknown Source)

            at sun.misc.Launcher$AppClassLoader.loadClass(Unknown Source)

            at java.lang.ClassLoader.loadClass(Unknown Source)

            ... 31 more

    Jun 29, 2016 6:11:14 PM com.ca.iam.roledefgen.RoleDefGenerator main

    WARNING: com.ca.iam.model.IAMCommunicationException: javax.naming.CommunicationE

    xception: mssql2012:20390 [Root exception is java.lang.NoClassDefFoundError: com

    /rsa/jsafe/crypto/JSAFE_InvalidUseException]



  • 2.  Re: error running RoleDefGenerator
    Best Answer

    Posted Jun 29, 2016 09:20 AM

    Hi,

     

    Looking at the error, you have ClassNotFoundException, so check class path used by RoleDefGenerator.bat.

     

    This works for me.

     

    REM Setup classpath and program args

    REM SET RUN_CLASSPATH=..\..\lib\jsafeJCEFIPS.jar;..\lib\roledefgen.jar;..\..\lib\jiam.jar

    REM 29.06.206 - fixed - pointing to the correct classpath

    SET RUN_CLASSPATH=..\..\lib\cryptojFIPS.jar;..\lib\roledefgen.jar;..\..\lib\jiam.jar

     

    Regards, Roberto



  • 3.  Re: error running RoleDefGenerator

    Posted Jun 29, 2016 09:30 AM

    Thanks, It worked. The incorrect jar name mentioned in the classpath was causing the issue. Works fine after renaming it.



  • 4.  Re: error running RoleDefGenerator

    Posted Apr 06, 2017 01:24 AM

    Hi ,

    I am trying to run the RoleDefinations command on IDM R12.6 SP8 for a dynamic connector, created using Connector Xpress. Below is the error which message.Can you please help me out

     

    and RoleDefGenerator.bat file content