NAM Admin Console shows "Error in obtaining the list of Virtual Attributes. Null"

  • 7020910
  • 12-Jun-2017
  • 12-Jun-2017

Environment

NetIQ Access Manager 4.x

Situation

While attempting to create virtual attributes in Admin Console ->  Devices -> Identity Server -> Shared Settings -> Virtual Attributes see the following error:


 "Error in obtaining the list of Virtual Attributes. Null"


Screenshot:



 

 

See following error:

Resolution

Can add this entry using following ldif file and ice  on the Admin Console terminal.


1) Create VirtualAttributesContainer.ldif and paste the following into it:


### BEGIN ###


dn: cn=virtualAttributeContainer,cn=nids,ou=accessManagerContainer,o=novell

changetype: add

nidsVirtualAttributesXML: <?xml version="1.0" encoding="UTF-8"?>

<virtualAttr

ibuteConfig/>

objectClass: nidsVirtualAttributeContainer

objectClass: Top

cn: virtualAttributeContainer

ACL: 1#subtree#ou=nidsUser,ou=UsersContainer,ou=Partition,ou=PartitionsContai

ner,ou=VCDN_Root,ou=accessManagerContainer,o=novell#[Entry Rights]

ACL: 3#subtree#ou=nidsUser,ou=UsersContainer,ou=Partition,ou=PartitionsContai

ner,ou=VCDN_Root,ou=accessManagerContainer,o=novell#[All Attributes Rights]


### END ###


2) Use the ice utility to reimport the proper object into config store.

Note: The ice utility should be included in path, but is present on Admin Console at: /opt/novell/eDirectory/bin/ice

Example ice syntax to add the necessary object: (Enter the proper password after the -w )


ice -SLDIF -f virtualattributecontainer.ldif -DLDAP -s 127.0.0.1 -d cn=admin,o=novell -w <password> -v -L /var/opt/novell/eDirectory/data/SSCert.der -B -l


Note: Should be able to use loopback address 127.0.0.1 or actualy ip address the Admin Console is listening on.


Cause

This means eDirectory (the config store) on the Admin Console e missing an object, specifically

:cn=virtualAttributeContainer,cn=nids,ou=accessManagerContainer,o=novell


Actively invistigating what might be causing this entry to be missing.