This section applies to all of the TSS connectors.
Symptom:
An error that resembles the following message occurs when you import endpoint role definitions files from r12.5 SP6 or earlier into r12.5 SP7 or later:
"Error in screen definition "Default Endpoint Type Primary Group Endpoint Capability Search" with tag "DefaultActiveDirectoryPrimaryGroupEndpointCapabilitySearch" Error: The type "UNKNOWN" is not a valid object type."
In CA Identity Manager r12.5 SP7, certain objects were renamed. These objects are referenced in endpoint capability search screens. After upgrading to r12.5 SP7 or later, an error can occur when you import role definitions files that include screens referring to the old object names.
This issue is identified in Active Directory and CA Access Control endpoints.
Solution:
Consider deleting screen definitions that reference the old object name before importing a role definitions file.
The following case is an example of an Active Directory endpoint:
In CA Identity Manager r12.5 SP6, the Active Directory endpoint capability search screen name referenced the object ACTIVEDIRECTORY_ADUNIXPRIMARYGROUP'.
The object name appears in the following screen definition:
<Screen name="Default Active Directory Primary Group Endpoint Capability Search" tag="DefaultActiveDirectoryPrimaryGroupEndpointCapabilitySearch"
screendefinition="EndpointCapabilitySearch"
Object="ACTIVEDIRECTORY_ADUNIXPRIMARYGROUP">
In CA Identity Manager r12.5 SP7, the object name was changed to 'ACTIVEDIRECTORY_ETADSGROUP'.
The new object name appears in the following screen definition:
<Screen name="Default Active Directory Group Endpoint Capability Search"
tag="DefaultActiveDirectoryGroupEndpointCapabilitySearch"
screendefinition="EndpointCapabilitySearch"
object="ACTIVEDIRECTORY_ETADSGROUP">
|
Copyright © 2013 CA.
All rights reserved.
|
|