Release Notes › Known Issues › Endpoint Types › General › Error in Endpoint Search Screens After Upgrading from 12.5 SP6 or Earlier

Error in Endpoint Search Screens After Upgrading from 12.5 SP6 or Earlier

Symptom:

An error that resembles the following message occurs when you import endpoint role definitions files from r12.5 SP6 or earlier into r12.5 SP7 or later:

"Error in screen definition "Default Endpoint Type Primary Group Endpoint Capability Search" with tag "DefaultActiveDirectoryPrimaryGroupEndpointCapabilitySearch" Error: The type "UNKNOWN" is not a valid object type."

In CA Identity Manager r12.5 SP7, certain objects were renamed. These objects are referenced in endpoint capability search screens. After you upgrade to r12.5 SP7 or later, an error can occur when you import role definitions files that include screens which reference the old object names.

This issue has been identified in Active Directory and CA Access Control endpoints.

Consider the following Active Directory endpoint example:

In CA Identity Manager r12.5 SP6, the Active Directory endpoint capability search screen name referenced the object ACTIVEDIRECTORY_ADUNIXPRIMARYGROUP'.

The object name appears in the following screen definition:

<Screen name="Default Active Directory Primary Group Endpoint Capability Search" tag="DefaultActiveDirectoryPrimaryGroupEndpointCapabilitySearch" 

screendefinition="EndpointCapabilitySearch" 

Object="ACTIVEDIRECTORY_ADUNIXPRIMARYGROUP">

In CA Identity Manager r12.5 SP7, the object name was changed to 'ACTIVEDIRECTORY_ETADSGROUP'.

The new object name appears in the following screen definition:

<Screen name="Default Active Directory Group Endpoint Capability Search"

tag="DefaultActiveDirectoryGroupEndpointCapabilitySearch"

screendefinition="EndpointCapabilitySearch"

object="ACTIVEDIRECTORY_ETADSGROUP">

Solution:

Consider deleting screen definitions that reference the old object name before importing a role definitions file.