# Timeout for the Active Directory Source Test Connection

**URL:** <https://developer.sailpoint.com/discuss/t/timeout-for-the-active-directory-source-test-connection/78849>\
**Category:** SHF Discussion and Questions\
**Tags:** identity-security-cloud, provisioning, connectors\
**Created:** [August 30, 2024, 11:00am UTC](https://developer.sailpoint.com/discuss/t/timeout-for-the-active-directory-source-test-connection/78849 "2024-08-30T11:00:46Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![MeKhalbi](https://avatars.discourse-cdn.com/v4/letter/m/2acd7d/32.png) [@MeKhalbi](https://developer.sailpoint.com/discuss/u/MeKhalbi)\
**Post date:** [August 30, 2024, 11:00am UTC](https://developer.sailpoint.com/discuss/t/timeout-for-the-active-directory-source-test-connection/78849/1 "2024-08-30T11:00:46Z")

</div>

Hi team,

I am facing an issue with my Active Directory source. I have configured the source with IQService enabled and **it’s been working properly** since then. But lately, the test connection is timing out and hence failing.  
Here are all the necessary details I can think of :

- We have a loadbalancer architecture for the IQService, I made sure the cert was created with all the required details.
- Even though the test connection is failing but the aggregation is successful.
- The test connection works fine when I remove the IQService configuration.
- I tried increasing the timeout but it didn’t work.
- By checking the netstat command output, I could see a lot of “Close\_Wait” connections
- I have a SailPoint Support ticket open and they provided a special IQService version to install that should resolve the “Close\_wait” connections but that didn’t resolve the issue either.
- By enabling debug logs on the IQService and running multiple test connection, I was able to see that the IQService is successfully connecting to the AD DC servers.

Below screenshots for the errors:

- Test Connection error :

![image](https://global.discourse-cdn.com/sailpoint/original/2X/e/eade0847eca132ad1dfcc975af5f07df9f747068.png)

- IQService logs error

 ![image](https://global.discourse-cdn.com/sailpoint/original/2X/5/5ba3a6fbf67399e1d69f9fe5a7d1388922020778.jpeg)

---

<div class="post-metadata">

**Author:** ![IAMpdu](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/iampdu/32/2671_2.png) [@IAMpdu](https://developer.sailpoint.com/discuss/u/IAMpdu)\
**Post date:** [August 30, 2024, 5:40pm UTC](https://developer.sailpoint.com/discuss/t/timeout-for-the-active-directory-source-test-connection/78849/2 "2024-08-30T17:40:20Z")

</div>

Hello @MeKhalbi ,

Are you using IP address as IQService server configuration?

Thanks !!

---

<div class="post-metadata">

**Author:** ![MeKhalbi](https://avatars.discourse-cdn.com/v4/letter/m/2acd7d/32.png) [@MeKhalbi](https://developer.sailpoint.com/discuss/u/MeKhalbi)\
**Post date:** [September 2, 2024, 7:57am UTC](https://developer.sailpoint.com/discuss/t/timeout-for-the-active-directory-source-test-connection/78849/3 "2024-09-02T07:57:01Z")

</div>

Hi @IAMpdu I am using the loadbalancer domain name on the IQService config

---

<div class="post-metadata">

**Author:** ![shaileeM](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/shaileem/32/15314_2.png) [@shaileeM](https://developer.sailpoint.com/discuss/u/shaileeM)\
**Post date:** [September 2, 2024, 12:42pm UTC](https://developer.sailpoint.com/discuss/t/timeout-for-the-active-directory-source-test-connection/78849/4 "2024-09-02T12:42:27Z")

</div>

Hi @MeKhalbi ,

Were there any recent changes to TLS settings on AD DC? You can verify that both IQ service AD DC are using the same TLS version.

---

<div class="post-metadata">

**Author:** ![IAMpdu](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/iampdu/32/2671_2.png) [@IAMpdu](https://developer.sailpoint.com/discuss/u/IAMpdu)\
**Post date:** [September 2, 2024, 1:25pm UTC](https://developer.sailpoint.com/discuss/t/timeout-for-the-active-directory-source-test-connection/78849/5 "2024-09-02T13:25:43Z")

</div>

Is it possible for you remove one IQService form LB and test it? so that you will get confirmation that from which IQService instance it is failing.

---

<div class="post-metadata">

**Author:** ![MeKhalbi](https://avatars.discourse-cdn.com/v4/letter/m/2acd7d/32.png) [@MeKhalbi](https://developer.sailpoint.com/discuss/u/MeKhalbi)\
**Post date:** [September 8, 2024, 6:34pm UTC](https://developer.sailpoint.com/discuss/t/timeout-for-the-active-directory-source-test-connection/78849/6 "2024-09-08T18:34:01Z")

</div>

Thanks @shaileeM and @IAMpdu for your inputs. This issue was a known for SailPoint support and it’s common with customers using a Loadbalancer for the IQService. This was fixed by configuring a new IQService version provided by the support team that resolve the timeout and close\_wait issue. SailPoint support mentioned they will include this fix in the upcoming IQService version.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\
**Post date:** [November 7, 2024, 6:34pm UTC](https://developer.sailpoint.com/discuss/t/timeout-for-the-active-directory-source-test-connection/78849/7 "2024-11-07T18:34:32Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.
