• iManager is not getting up - unable to find valid certification path to requested target

    I am unable to access iManager. I tried stopping and starting then trying to access iManager but I am getting a blank white page on the browser. In the log, I am getting errors, attached logs for your reference. 23-Sep-2024 09:58:36.333 INFO [main…
  • OU object not getting deleted - getting (Error-610)Illegal NDS name

    Hi, There is an Organizational Unit object in eDirectory. It does not have any child objects. I want to delete the object but it is not getting deleted from iManager. The iManager gives below error: Error: The Delete Object request failed (Error-610…
  • Missing Attributes in Attribute Map in iManager & Identity Console

    Hi all, A question came up in our morning team meeting that nobody could answer, so I thought maybe somebody here knows. A client asked why some mappings are missing in the Attribute Map table in iManager & Identity console. For example the mapping…
  • Bulk deletion of users

    Hi, I'm taking over the main administration of the domain for the college I work in, I've come across over 14,500 inactive accounts from the last 6/7/8/? years and want to delete them. These accounts are under the main tree but under different OU…
  • User password keeps changing but not log of this change

    I have an account who's password keeps getting changed by something (maybe system) but by user. The password History in "password self service" on this user's account does not indicate that's it's being changed. Is there a way to troubleshoot what's…
  • users not assigned to the correct folder OU in File and Print Tree

    I have some users are not being assigned tot he correct folder OU in file and print tree in eDirectory. eg. User was in the Y11 OU but now should be in the Y12 OU. This should be automatic change. I'm not sure where to check what this automatic change…
  • Block unusual login attempts

    We have a requirement to detect unusual login attempts, as given below. 1. 5 Invalid login attempts in 5 mins. 2. 10 successful logins in 1 min by the same user. Please help me to achieve the above use cases. We are using eDirectory 9.2.6.
  • Identity Console vs iManager (comparison)

    Hi every one, iManager is a web application deployed on Apache Tomcat and uses JDK to function, in addition to the connection to eDirectory. Based on the above, how does the Identity console work? does anyone know that?
  • Modify length limitation in Middle initial box in iManager

    We would like to be able to use the Middle initial box, in iManager, to store the person's middle name(s). I've found instructions on how to add a middleName attribute and map it to the Initial eDirectory attribute; however, when adding a value to the…
  • eDirectory Notifications when sync issues arise

    Does anyone know of a method to scrape edirectory and send notifications when there are sync errors or when the imonitor max delta gets to a certain threshold?
  • Provisioning a Parent Role to all Group Members dinamically

    Hello, community! I`m setting up a new environment that will have lots of differentes Business Areas. Depending on user`s business area, I want to provision a Parent Role to Him, with the same name as its business area and all the children roles for…
  • Base DN for user search in iManager Plugin for Modify

    Hi all. I've developed a Custom Plugin to add and modify attributes to the users, this is meant to be used only by a specific group so the questions are the following: Is there any way to set up a Base DN for user search in the select object page? As…
  • SSL cerificate installation eDir1 to eDir2

    Hi I am using IDM 4.8 on SLES . I have created replica of eDir1 to eDir2 using option Existing server/tree. Therefore all user information and drivers . I am able to see from iManager. Now I have configured VIP and load balacing on port 636 for my eDirectory…
  • Force users to change password after modifing policy

    Hello, I builded a universal password policy forcing users to use >=12 characters in passwords. It works, if a user tries to change his password he wilf be asked for valid password as described in the rule. But the old, short passwords are further valid…
  • REST API for iManager

    Hello! Is there a REST API for the role based services iManager? We want to create User Objects by calling a REST API. best regards André
  • Code(-9195) Error in vnd.nds.stream://Couldn't send email:java.net.SocketException: connection reset

    Hi, I have a null driver which contains a policy to send email notification to managers for password expiration of a user . The policy executed in test environment with no error. But in prod, it is showing below error. Message: Code(-9195) Error in vnd…
  • Safely remove server from tree

    Hi I have stuck obits, And realized they are caused by decommisioned server. How to safely remove decommissioned server from a Tree? I'm unable to access the following TID. I get http error 500 https://support.microfocus.com/kb/doc.php?id=7009070
  • The best method for mass updating user's email field?

    Due to some organizational changes, we need to mass update the @domain.org portion of the email field in edirectory. What would be the best way to go about this? Currently, we are planning to do this using ICE utility, but I'd like to know if this is…
  • iManager 3.2 displaying at a slow pace after upgrade

    After having enjoyed sloppily out commented AJP connector definitions and LDAP connection problems that we managed to overcome, we are still facing troublesome iManager behaviour. We had upgraded our 4.7.2 Identity Manager system (eDir 9.1.4, iMan 3.1…
  • Re-create the ndsPredicateStats object

    Hi *, how can I re-create the ndsPredicateStats object (servername-PS) after accidentally deleting it?
  • Discrepancies between user and group membership

    Hello, Today I face a strange issue: "User A" is member of "group A", but when I look who is member of "group A" I do not find the "User A" on the membership list of the group. See an example on iManger, left the user group membership and right the group…
  • Can I assign a password to a device in eDirectory

    I would like to be able to assign password to devices in eDirectory, is it possible to do this?. Thanks
  • LDAP with Kerberos

    If Kerberos is configured in eDirectory as an authentication method, I am assuming that when a user puts in their password to imanager or userapp or any other LDAP based service that the LDAP server will see the login method, talk to the kerberos server…
  • iManager object history is empty

    Hi there, I'm using a new installation of iManager workstation 3.1 on Windows 2008R2 and the object history box never has previous objects in it. Could this be a rights issue on the local file system? Previous 2.7.7 workstation version is fine and is…
  • cant remove irf

    I did it. The thing I have warned people not to do since NDS first came out in the 90's. I bobbitted a part of the tree. I put an IRF on a container blocking all rights without first putting the admin as a trustee of the container with all rights. So…