GRC Integration - fromDSA.doSearch got exception, returning false

[normann]

Hi experts.

I got an initial load job for GRC integration, reading privileges into IdM. Unfortunately the job does not work anymore and I dont know whats wrong. I already checked the Java user (GRC), the VDS user - everything fine. VDS and GRC are running and nothing (I know) changed.

The log message is:

fromDSA.doSearch got exception, returning false

javax.naming.CommunicationException: [LDAP: error code 2 - (GRC Select Applications:2:(401)Unauthorized)]; remaining name ''

In DSE I found:

29.06.2010 07:43:28 :I:initPass FromDSA: Get Applications From VDS

29.06.2010 07:43:28 :I:LDAP URL: LDAP://localhost:489/ou=selectapplications,o=GRC??ONE?(objectclass=*)

29.06.2010 07:43:28 :X:Server supported controls:{supportedldapversion=supportedldapversion: 3}

29.06.2010 07:43:28 :E:fromDSA.doSearch got exception, returning false (LDAP error: Protocol error occured)

Explanation: [LDAP: error code 2 - (GRC Select Applications:2:(401)Unauthorized)]

Remaining name:

Resolved name:

javax.naming.CommunicationException: [LDAP: error code 2 - (GRC Select Applications:2:(401)Unauthorized)]; remaining name ''

at com.sun.jndi.ldap.LdapCtx.mapErrorCode(Unknown Source)

at com.sun.jndi.ldap.LdapCtx.processReturnCode(Unknown Source)

at com.sun.jndi.ldap.LdapCtx.processReturnCode(Unknown Source)

at com.sun.jndi.ldap.LdapCtx.searchAux(Unknown Source)

at com.sun.jndi.ldap.LdapCtx.c_search(Unknown Source)

at com.sun.jndi.toolkit.ctx.ComponentDirContext.p_search(Unknown Source)

at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(Unknown Source)

at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(Unknown Source)

at javax.naming.directory.InitialDirContext.search(Unknown Source)

at com.sap.idm.ic.FromDSA.doSearch(FromDSA.java:640)

at com.sap.idm.ic.FromDSA.init(FromDSA.java:1043)

at com.sap.idm.ic.DSERunTime.runFromPass(DSERunTime.java:2446)

at com.sap.idm.ic.DSERunTime.runPass(DSERunTime.java:3665)

at com.sap.idm.ic.DSERunTime.runJob(DSERunTime.java:1418)

at com.sap.idm.ic.DSERunTime.loopJob(DSERunTime.java:844)

at com.sap.idm.ic.DSERunTime.doCommand(DSERunTime.java:2241)

at com.sap.idm.ic.DSERunTime.doCommand(DSERunTime.java:350)

at com.sap.idm.ic.DSERunTime.run(DSERunTime.java:4144)

at com.sap.idm.ic.DSERunTime.main(DSERunTime.java:4039)

29.06.2010 07:43:28 :E:FromDSA.init failed

29.06.2010 07:43:28 :I:exit FromDSA

29.06.2010 07:43:28 :X:Fromsource DSA time spent in init 0.265 seconds.

29.06.2010 07:43:28 :X:Fromsource DSA time spent in getNextEntry 0.0 seconds.

29.06.2010 07:43:28 :X:Fromsource DSA time spent in addEntry 0.0 seconds.

29.06.2010 07:43:28 :X:Fromsource DSA total time spent in scripts 0.0 seconds.

29.06.2010 07:43:28 :I:Fromsource DSA pass completed in 0.579 seconds.

29.06.2010 07:43:28 :I:Handled: 0 Failed: 2

I dont know what the variable name should contain, but all repository attributes are filled and looking fine in comparison with a working environment.

Is there a way to trace the VDS? The operation, audit and statistics log are not really helpful since they only telling me when I started the server.

Using a LDAP browser I can browse the tree to the node ou=selectapplications. From that point I get the same error (GRC Select Applications:2:(401)Unauthorized).

Thanks for your help.

Norman

[normann]

Solved: The password for the communication user in the VDS settings was wrong.