Troubleshooting Guide › Installing CA ControlMinder Endpoints and Server Components › No Tabs Visible in CA ControlMinder Enterprise Management

No Tabs Visible in CA ControlMinder Enterprise Management

Valid for Active Directory user stores

Symptom:

I successfully install CA ControlMinder Enterprise Management. When I log in as the system user that I specified during installation, no tabs appear in the interface.

Solution:

When you install CA ControlMinder Enterprise Management, you provide the following Active Directory parameters:

• Host
• Port
• Search root
• User DN (and the password for this user)
• System User

This problem occurs when the Active Directory search root is in the same node in the directory tree as the DNs (Distinguished Names) for User DN and System User. To fix this problem, specify a search root one or more nodes higher in the directory tree than the DNs for the specified User DN and System User.

Example: The Active Directory Search Root

This example uses the following DNs for User DN and System User:

• User DN: CN=MyQueryUser,OU=ENTERPRISE,OU=NFS,
  OU=ACCOUNTS,DC=EXAMPLE,DC=LAB
• System User: CN=MySystemManager,OU=ENTERPRISE,OU=NFS,
  OU=ACCOUNTS,DC=EXAMPLE,DC=LAB

The following search root is one node higher in the directory tree than the DNs for User DN and System User. If you specify the following search root, CA ControlMinder Enterprise Management successfully installs and tabs appear in the interface:

OU=NFS,OU=ACCOUNTS,DC=EXAMPLE,DC=LAB

The following search root is in the same node in the directory tree as the DNs for User DN and System User. If you specify the following search root, CA ControlMinder Enterprise Management successfully installs but no tabs appear in the interface:

OU=ENTERPRISE,OU=NFS,OU=ACCOUNTS,DC=EXAMPLE,DC=LAB

Example: Set the Active Directory Search Root One Node Higher In the Directory Tree

This example uses the same DNs for User DN and System User as the previous example.

In this example, you specified the following search root when you installed CA ControlMinder Enterprise Management:

OU=ENTERPRISE,OU=NFS,OU=ACCOUNTS,DC=EXAMPLE,DC=LAB

Because this search root is in the same node in the directory tree as the DNs for User DN and System User, you need to specify a search root one node higher in the directory tree.

To set the Active Directory search root one node higher in the directory tree

1. Enable the CA Identity Minder Management Console.
2. Open the CA Identity Minder Management Console.
3. Click Directories, and click the ac-dir directory.

   The Directory Properties dialog appears.

4. Click Export at the bottom of the Directory Properties dialog.
5. When prompted, save the XML file and open it for editing.

   Note: The file name is ac-dir.xml.

6. Locate the tag that contains the search root that you specified during installation. For example:

   <LDAP searchroot="OU=ENTERPRISE,OU=NFS,OU=ACCOUNTS,DC=EXAMPLE,DC=LAB" secure="false"/>
   

7. Replace the existing search root with the new search root. For example:

   <LDAP searchroot="OU=NFS,OU=ACCOUNTS,DC=EXAMPLE,DC=LAB" secure="false"/>
   

   Note: Because you removed the Enterprise OU (Organizational Unit), this search root is one node higher in the directory tree than the previous search root.

8. Save and close the file.
9. In the CA Identity Minder Management Console, click Update in the Directory Properties dialog.

   The Update Directory page appears.

10. Click Choose File, navigate to the XML file that you edited, click Open, and click Finish.

    The CA Identity Minder Management Console validates the XML file and displays status information in the Directory Configuration Output field.

    Note: If you receive a "Failed to Import" error, see the Cannot Import ac-dir.xml Directory Configuration File topic.

11. Click Continue.

    The Directories page appears.

12. Click ac-dir, and click ac-env in the Environment(s) section.

    The Environment Properties page appears.

13. Click Restart.

    The CA Identity Minder Management Console restarts the environment and applies your changes.

Note: For more information about how to enable and start the CA Identity Minder Management Console, see the Implementation Guide.

More information:

Enable the CA Identity Minder Management Console

Open the CA Identity Minder Management Console

Cannot Import ac-dir.xml Directory Configuration File