Initial Load - LDAP (ADS) fails

[Former Member]

Hi,

iam trying to make an initial load from our ms ad ldap.

At first i created a repository of type "ADS for SAP PF"

LDAP_UPN  philip @ mytest.com
LDAP_STARTING_POINT_GROUPS  dc=mytest,dc=com
LDAP_STARTING_POINT  dc=mytest,dc=com
LDAP_PORT  389
LDAP_PASSWORD  ***
LDAP_MAIL_DOMAIN  (*what to type in here? domain.tld again?*)
LDAP_LOGIN  mytest\philip
LDAP_HOST  192.168.1.1
LDAP_DOMAIN  mytest
HOSTNAME  (*what to type in here? ip of ad again?*)
EXCHANGE_HOST  mail.mytest.com
AD_HOST  dc=mytest,dc=com

Are these settings correct?

In next step i activated the "LDAP (ADS) - Initial Load" job and selected the created source repository.

Data from AD should be written into 1/Enterprise People.

When i start the job status shows that he collects records.

Systemlog shows me many errors for every user:

fromDSA.doSearch got exception, returning false - Exception.javax.naming.CommunicationException: 192.168.1.1:389 (Root exception is java.net.SocketTimeoutException: connect timed out)

FromDSA.init failed

Exception from Mod operation.ToIDStore.addEntry failed storing entry 'username'. IDStore retruned error messag: "Entry does not exist" when fetching entry

Failed storing user

Exception from Add operation: ToIDStore.addEntry failed storing entry 'user'. IDStore retruned error message: "No such attribute:Attribute: ACCOUNTrepositoryname when storing attribute 'ACCOUNTrepositoryname=user'

Any suggestions what iam doing wrong?

In another thread [|] i read that increasing the timeout could help. but how to increase it?

Bg,

Philip

[Former Member]

Do you get anything in the temporary tables on the SQL Server?

[Former Member]

Iam sorry, i dont really understand what you mean.

Could you specify your question a bit?

Bg,

Philip

[Former Member]

Before you write something in the IDS, it is stored in a table on the SQL Server.

You see the tablename in the from pass.

Is there anything in this table? Check with MS SQL Management studio

Just because the ToIDS pass also seems to run.

[Former Member]

So i think it should listed in the "ReadUsersFromLdap" (From LDAP directory) pass.

The only flag i can be found is probably "Destination"?

Here i find:

Database: %$ddm.identitycenter%

Table name: sap%$rep.$NAME%user

EDIT:

Found DN´s in table "LOGENTRIES"

[Former Member]

Hi again,

when i want to check my the connection to ldap server by inserting "Data source template" from "ReadUsersFromLdap" pass i get error message "GetDSATemplate - LDAP error: Fehler beim Vorgang"

The LDAP connection data seem to be right.

Any idea?

Bg,

Philip

[Former Member]

Solved.

I forgot to add the attributes as described in the configuration guide chapter 3.4.1. number 3.

I still get a timeout but the data are imported.