Active Directory Connection Error

IdentityIQ (IIQ) IIQ Discussion and Questions
,
1

Which IIQ version are you inquiring about?

Version 8.4

Share all details related to your problem, including any error messages you may have received.

Hello,

I am trying to onboard a Active Directory application with 2 forest from 2 AD server, after providing all the configuration details I get an error:

" InvalidConfigurationException ] [ Possible suggestions ] Ensure that the Active Directory Service is up and running. [ Error details ] Failed to connect to - dc=ad1,dc=com : Failed to connect to server:ldap://ad1.com:389 - java.net.ConnectException: Connection timed out: no further information - dc=ad2,dc=com : Failed to connect to server:ldap://ad2.com:389 - java.net.ConnectException: Connection timed out: no further information"

I am able to ping from my IIQ Server to both the AD server(2 Forest). I am able to discover domain from Global Catalogue in app definition. Can anyone try to provide further information on what this error could be?

3 Likes
2

Hi @BalajiChandrasekaran ,

Based on the error, It looks like a connectivity issue.
Probably a firewall is blocking the requests on port 389
Please try telnet from the server where IIQ is installed.

telnet ad1.com 389

or

nc -zv ad1.com 389

2 Likes
3

Thank you @Shandeep for the info, I was having a similar issue as well.

4

Hi @Shandeep,

So the ports seem to be open, but the issue persists for us. Any other suggestions I could look into?

EDIT:

@BalajiChandrasekaran So I was able to resolve the issue. The issue was that the IIQ server was not able to resolve the domain name. I configured the network connections to have the alternate DNS server point to the DC of the AD I was trying to onboard. I can aggregate now. Try this and please let me know if this fixes your problem

4 Likes
5

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.