This content has been marked as final.
Show 19 replies
-
1. Re: AD Connector Upgrade fail.
Al*800910*ie Mar 28, 2013 6:58 PM (in response to tmunro55)Can you please share what your...
Directory Adminstrator's Account
-and-
Container
...values are set to in your AD resource wizard?
Thank you. -
2. Re: AD Connector Upgrade fail.
tmunro55 Mar 28, 2013 7:40 PM (in response to Al*800910*ie)Exactly the same as they were in the 1.0.0.5143 instance of the Connector that was used with 8.1.0.9
Account: svciamops
Container: ou=people,dc=xxx,dc=xxx,dc=xxx
Nothing was changed except for the connector version in the little dropdown at the top of the Wizard dialogue.
--
Tim. -
3. Re: AD Connector Upgrade fail.
Al*800910*ie Mar 28, 2013 7:44 PM (in response to tmunro55)for grins can you attempt to add the actual domain before the actual account name along with a backslash such as:
DOMAINNAME\Administrator -
4. Re: AD Connector Upgrade fail.
tmunro55 Mar 29, 2013 3:37 PM (in response to Al*800910*ie)That was one of the first things I thought of. I tried it again just in case, but no go.
--
Tim -
5. Re: AD Connector Upgrade fail.
Al*800910*ie Mar 29, 2013 3:41 PM (in response to tmunro55)Just to confirm, you used both the connector server -AND- the connector jar files on the Windows server that came bundled with OW 8.1.1.8, right? -
6. Re: AD Connector Upgrade fail.
tmunro55 Mar 29, 2013 4:13 PM (in response to Al*800910*ie)There are no jar files to use on the windows side of things. It is a .NET application not java. I DID use the AD connector bundle (dll file) that came with the package yes. -
7. Re: AD Connector Upgrade fail.
Al*800910*ie Mar 29, 2013 4:51 PM (in response to tmunro55)Correct, my mistake. DLLs not jars.
Have you tried using the actual administrator user from AD?
Any time I've seen that error in Sun IDM/OW it's because of the items you've already ruled out. -
8. Re: AD Connector Upgrade fail.
Al*800910*ie Mar 29, 2013 5:15 PM (in response to Al*800910*ie)For more grins, I'm sure you've already tried authenticating as the username/passwd in question via some kind of 3rd party app like ldapsearch, etc.? -
9. Re: AD Connector Upgrade fail.
tmunro55 Mar 29, 2013 5:41 PM (in response to Al*800910*ie)runas /user:domain\svciamops cmd
works like a charm. :-)
As for using the Administrator, this is clearly a setup/upgrade issue not an account issue.
I created a brand new resource to test just that, and it worked perfectly. I just don't want to (and shouldn't have to) do that and then update all my user records to the new resource. The upgrade should work. -
10. Re: AD Connector Upgrade fail.
Al*800910*ie Mar 29, 2013 5:44 PM (in response to tmunro55)Yes, agreed. It seems something happened during the upgrade. -
11. Re: AD Connector Upgrade fail.
arjun.sengupta Apr 1, 2013 11:18 AM (in response to tmunro55)Hi Tim,
Compare the resource xml of the new resource(for which the authentication works) and the old resource. You may get something there.
Regards
Arjun -
12. Re: AD Connector Upgrade fail.
tmunro55 Apr 1, 2013 12:37 PM (in response to arjun.sengupta)Arjun,
Thank you for that. Yes, there are many differences, mostly in Attribute names. Spaces removed, words added etc. So question, is there an official supported upgrade path for the connectors, or should I open a support ticket with Oracle?
Has anyone else done the Active Directory connector upgrade without issue? If so how did they do it?
Thanks,
--
Tim. -
13. Re: AD Connector Upgrade fail.
Al*800910*ie Apr 1, 2013 2:36 PM (in response to tmunro55)Just for my own information, did you:
a) stop the existing connector server
b) uninstall it
c) install the new one
d) copy the necessary connector files to the new connector server directory
e) start the new connector server
f) confirm the new connector version in the resource wizard in OW -
14. Re: AD Connector Upgrade fail.
tmunro55 Apr 1, 2013 7:15 PM (in response to Al*800910*ie)Probably should have but it went like this:
a) stopped the connector server service
b) rename the folder to "Connector Server 8109"
c) deleted the service using SC.exe
d) installed the new connector server
e) copied the AD connector files to the connector server folder
f) fixed the config file to repoint the logs.
g) restarted the service.
In OW, I then had to explicitly select the new version of the connector.
Clicked Test Configuration, and failed with Bad username or password.