# AD source connection failure

**URL:** <https://developer.sailpoint.com/discuss/t/ad-source-connection-failure/58074>\
**Category:** SHF Discussion and Questions\
**Tags:** identity-security-cloud\
**Created:** [May 27, 2024, 3:51pm UTC](https://developer.sailpoint.com/discuss/t/ad-source-connection-failure/58074 "2024-05-27T15:51:55Z")\
**Posts on this page:** 12\
**Page:** 1

<div class="post-metadata">

**Author:** ![shaffusailpoint](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/shaffusailpoint/32/28096_2.png) [@shaffusailpoint](https://developer.sailpoint.com/discuss/u/shaffusailpoint)\
**Post date:** [May 27, 2024, 3:51pm UTC](https://developer.sailpoint.com/discuss/t/ad-source-connection-failure/58074/1 "2024-05-27T15:51:55Z")

</div>

We are getting “Timeout waiting response” for Active directory source connection failure or when we attempt for test connection. Can someone kindly suggest on this?  
it is the only source that have problem in this VA and other sources working fine.

---

<div class="post-metadata">

**Author:** ![naveenkarthikkrk](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/naveenkarthikkrk/32/11531_2.png) [@naveenkarthikkrk](https://developer.sailpoint.com/discuss/u/naveenkarthikkrk)\
**Post date:** [May 27, 2024, 4:01pm UTC](https://developer.sailpoint.com/discuss/t/ad-source-connection-failure/58074/2 "2024-05-27T16:01:58Z")

</div>

Hi Shaft,  
Try increasing timeout time and check test connection.Check the AD configuration once even the it could be the reason for it.Check the DN in the configuration.  
Thanks!!

---

<div class="post-metadata">

**Author:** ![ashutosh08](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/ashutosh08/32/11459_2.png) [@ashutosh08](https://developer.sailpoint.com/discuss/u/ashutosh08)\
**Post date:** [May 27, 2024, 4:02pm UTC](https://developer.sailpoint.com/discuss/t/ad-source-connection-failure/58074/3 "2024-05-27T16:02:12Z")

</div>

Hi @shaffusailpoint ,

Have you validated that the connection has been established from VA server for this application?

Also please check below link and see if it helps you to resolve problem.

> **[Timeout Errors and Settings](https://documentation.sailpoint.com/connectors/active_directory/help/common/identitynow_topics/timeout_errors.html)**
>
> SailPoint Connectors Documentation

Thanks

---

<div class="post-metadata">

**Author:** ![shaffusailpoint](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/shaffusailpoint/32/28096_2.png) [@shaffusailpoint](https://developer.sailpoint.com/discuss/u/shaffusailpoint)\
**Post date:** [May 27, 2024, 4:11pm UTC](https://developer.sailpoint.com/discuss/t/ad-source-connection-failure/58074/4 "2024-05-27T16:11:55Z")

</div>

Thanks Naveen,

De we have configuration to change timeout? I mean kindly any suggestion where to increase timeout?

---

<div class="post-metadata">

**Author:** ![naveenkarthikkrk](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/naveenkarthikkrk/32/11531_2.png) [@naveenkarthikkrk](https://developer.sailpoint.com/discuss/u/naveenkarthikkrk)\
**Post date:** [May 27, 2024, 4:33pm UTC](https://developer.sailpoint.com/discuss/t/ad-source-connection-failure/58074/5 "2024-05-27T16:33:59Z")

</div>

You have to use the partial update api to increase the timeout error .Check this out [update-source | SailPoint Developer Community](https://developer.sailpoint.com/docs/api/v3/update-source/)  
Thanks!!

---

<div class="post-metadata">

**Author:** ![kjakubiak](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/kjakubiak/32/7052_2.png) [@kjakubiak](https://developer.sailpoint.com/discuss/u/kjakubiak)\
**Post date:** [May 27, 2024, 4:42pm UTC](https://developer.sailpoint.com/discuss/t/ad-source-connection-failure/58074/6 "2024-05-27T16:42:01Z")

</div>

If even test connection is having timeout - i would check if VA has network connectivity available to AD. Can you check this first?

---

<div class="post-metadata">

**Author:** ![shaffusailpoint](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/shaffusailpoint/32/28096_2.png) [@shaffusailpoint](https://developer.sailpoint.com/discuss/u/shaffusailpoint)\
**Post date:** [May 27, 2024, 4:44pm UTC](https://developer.sailpoint.com/discuss/t/ad-source-connection-failure/58074/7 "2024-05-27T16:44:02Z")

</div>

No, need to ping AD in VA?

---

<div class="post-metadata">

**Author:** ![naveenkarthikkrk](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/naveenkarthikkrk/32/11531_2.png) [@naveenkarthikkrk](https://developer.sailpoint.com/discuss/u/naveenkarthikkrk)\
**Post date:** [May 27, 2024, 4:44pm UTC](https://developer.sailpoint.com/discuss/t/ad-source-connection-failure/58074/8 "2024-05-27T16:44:21Z")

</div>

Hi Shaft,  
Add this in your json payload and use partial source update api .This will increase the timeout error.Similarly you can increase other timeout errors check the below image for it.

```auto
[
  {
    "op": "replace",
    "path": "/connectorAttributes/healthCheckTimeout",
    "value": "45"
  }
]

```

 ![image](https://global.discourse-cdn.com/sailpoint/original/2X/a/a44435e030a69f4132a0644137466e486abeb844.png)

Thanks!!

---

<div class="post-metadata">

**Author:** ![shaffusailpoint](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/shaffusailpoint/32/28096_2.png) [@shaffusailpoint](https://developer.sailpoint.com/discuss/u/shaffusailpoint)\
**Post date:** [May 27, 2024, 4:50pm UTC](https://developer.sailpoint.com/discuss/t/ad-source-connection-failure/58074/9 "2024-05-27T16:50:00Z")

</div>

Thanks Naveen, let me check on this

---

<div class="post-metadata">

**Author:** ![kjakubiak](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/kjakubiak/32/7052_2.png) [@kjakubiak](https://developer.sailpoint.com/discuss/u/kjakubiak)\
**Post date:** [May 27, 2024, 4:57pm UTC](https://developer.sailpoint.com/discuss/t/ad-source-connection-failure/58074/10 "2024-05-27T16:57:32Z")

</div>

You can check connectivity with `nc -zv domainControlerHost 389`

For ldap - change port for other services

For full AD connection you need to ensure network connectivity from both VA and iqservice host - see the diagram

 ![active_directory_architecture_](https://global.discourse-cdn.com/sailpoint/original/2X/e/e6be44fe23e93c70cee85a4e90a85a5b7e9b1d8b.png)

---

<div class="post-metadata">

**Author:** ![shaffusailpoint](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/shaffusailpoint/32/28096_2.png) [@shaffusailpoint](https://developer.sailpoint.com/discuss/u/shaffusailpoint)\
**Post date:** [May 27, 2024, 5:29pm UTC](https://developer.sailpoint.com/discuss/t/ad-source-connection-failure/58074/11 "2024-05-27T17:29:13Z")

</div>

Thanks a lot Kamil. Will check on this as well.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\
**Post date:** [July 26, 2024, 5:29pm UTC](https://developer.sailpoint.com/discuss/t/ad-source-connection-failure/58074/12 "2024-07-26T17:29:22Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.