AD source connection failure

SailPoint Human Fabric (SHF) SHF Discussion and Questions
1

We are getting “Timeout waiting response” for Active directory source connection failure or when we attempt for test connection. Can someone kindly suggest on this?
it is the only source that have problem in this VA and other sources working fine.

2

Hi Shaft,
Try increasing timeout time and check test connection.Check the AD configuration once even the it could be the reason for it.Check the DN in the configuration.
Thanks!!

3

Hi @shaffusailpoint ,

Have you validated that the connection has been established from VA server for this application?

Also please check below link and see if it helps you to resolve problem.

Thanks

4

Thanks Naveen,

De we have configuration to change timeout? I mean kindly any suggestion where to increase timeout?

5

You have to use the partial update api to increase the timeout error .Check this out update-source | SailPoint Developer Community
Thanks!!

6

If even test connection is having timeout - i would check if VA has network connectivity available to AD. Can you check this first?

7

No, need to ping AD in VA?

8

Hi Shaft,
Add this in your json payload and use partial source update api .This will increase the timeout error.Similarly you can increase other timeout errors check the below image for it.

[
  {
    "op": "replace",
    "path": "/connectorAttributes/healthCheckTimeout",
    "value": "45"
  }
]

image
image2726×934 253 KB

Thanks!!

9

Thanks Naveen, let me check on this

10

You can check connectivity with nc -zv domainControlerHost 389

For ldap - change port for other services

For full AD connection you need to ensure network connectivity from both VA and iqservice host - see the diagram

active_directory_architecture_
active_directory_architecture_4331×2782 424 KB

11

Thanks a lot Kamil. Will check on this as well.