Environment
Novell iManager 2.7
Novell Identity Manager iManager Plug-ins
Novell Identity Manager 3.6.1
Redhat Enterprise Server 5.4 (RHES 5.4) 32bit
Novell Identity Manager iManager Plug-ins
Novell Identity Manager 3.6.1
Redhat Enterprise Server 5.4 (RHES 5.4) 32bit
Situation
- Novell iManager 2.7 with Maintenance Update 3 and IDM 3.6.1 plugins installed on Redhat Enterprise Server 5.4
- Role Based Services (RBS) installed and configured
- Attempts to access "Identity Manager Overview" in "Identity Manager Configuration" throw the following error:
ERROR: "You have not been given sufficient rights to run this task."
The RBS configuration shows 2 Identity Manager Plugins installed as follows:
RBS Configuration -> Role Based Services -> RBS Configuration -> Click on Modules installed (number)
- Role Based Services (RBS) installed and configured
- Attempts to access "Identity Manager Overview" in "Identity Manager Configuration" throw the following error:
ERROR: "You have not been given sufficient rights to run this task."
The RBS configuration shows 2 Identity Manager Plugins installed as follows:
RBS Configuration -> Role Based Services -> RBS Configuration -> Click on Modules installed (number)
Identity Manager Plugins |
10.7.20090527.1 | 10.7.20090520.1 | |
Identity Manager Plugins |
10.7.20090527.1 | 10.7.20090527.1 |
Resolution
This is not a bug, but is mainly caused by a faulty creation of the Role Based Services collection.
a) the documentation does not mention anything in regards to memory requirements, but 512MB, or more should be free for iManager to run. This means that 1GB ram should be a minimum for a server running iManager (thumb of rule). This memory requirement should be added to what eDirectory, Identity Manager and other services require.
b) make sure that eDirectory is in sync (health check), and all the server which holds a replica of the destination partition for the RBS Collection are in sync.
c) do not cancel the creation of the RBS Collection, this is likely to cause the issue.
The recommended way to solve the issue is to;
a) create a new RBS Collection, with a new name, and make sure that it was not cancelled, nor gave any errors.
b) remove the old faulty RBS Collection
c) logout and login to iManager, and all Tasks should be working.
As a workaround if the above does not work, one can do the following. It will not solve the problem, but will allow access to Identity Manager Overview:
a) Remove the duplicate Plugins from the installed modules in RBS configuration
b) In RBS Configuration they will now show up as "Out-Of-Date"
c) Select to install only one of them, this will allow access to "Identity Manager Overview", but the following tasks will still be inaccessible: "Object Inspector", "Driver Cache Inspector", "Driver Inspector", "Driver Health Inspector", "Driver Set Dashboard", etc.
a) the documentation does not mention anything in regards to memory requirements, but 512MB, or more should be free for iManager to run. This means that 1GB ram should be a minimum for a server running iManager (thumb of rule). This memory requirement should be added to what eDirectory, Identity Manager and other services require.
b) make sure that eDirectory is in sync (health check), and all the server which holds a replica of the destination partition for the RBS Collection are in sync.
c) do not cancel the creation of the RBS Collection, this is likely to cause the issue.
The recommended way to solve the issue is to;
a) create a new RBS Collection, with a new name, and make sure that it was not cancelled, nor gave any errors.
b) remove the old faulty RBS Collection
c) logout and login to iManager, and all Tasks should be working.
As a workaround if the above does not work, one can do the following. It will not solve the problem, but will allow access to Identity Manager Overview:
a) Remove the duplicate Plugins from the installed modules in RBS configuration
Identity Manager Plugins |
10.7.20090527.1 | 10.7.20090520.1 | |
Identity Manager Plug-ins |
10.7.20090527.1 | 10.7.20090527.1 |
b) In RBS Configuration they will now show up as "Out-Of-Date"
c) Select to install only one of them, this will allow access to "Identity Manager Overview", but the following tasks will still be inaccessible: "Object Inspector", "Driver Cache Inspector", "Driver Inspector", "Driver Health Inspector", "Driver Set Dashboard", etc.