9.0 Identity Manager 疑難排解

在安裝 Identity Manager 時,請注意以下資訊︰

安裝 Identity Manager 時發生 Lotus Notes 驅動程式問題

來源︰ 在 Solaris 10 上,以非身分安裝 Identity Manager 4.0.1 時,可能會遇到以下關於 Lotus Notes 驅動程式的錯誤訊息︰
ln: cannot create /usr/lib/locale/ja/wnn//ndsrep: File exists
ln: cannot create
cp: cannot create /usr/lib/locale/ja/wnn//libnotesdrvjni.so.1.0.0: Permission
denied
ln: cannot create /usr/lib/locale/ja/wnn//libnotesdrvjni.so.1: File exists
ln: cannot create /usr/lib/locale/ja/wnn//libnotesdrvjni.so: File exists
動作: 手動建立符號連結。如需檢查和重新建立符號連結的相關資訊,請參閱《Identity Manager 4.0.1 Driver for Lotus Notes Implementation Guide》(Identity Manager 4.0 Driver for Lotus Notes 實作指南) 中的「Troubleshooting Installation Problems」(安裝問題疑難排解)。

在 Windows 2008 SP2 32 位元平台上安裝 Identity Manager 偶爾會失敗

來源︰ 架構安裝程式顯示以下錯誤︰
Java Platform SE binary has stopped working.
動作: 若要解決此問題:
  1. 使用「-DCLUSTER_INSTALL="true"」選項執行 Identity Manager 安裝程式。如此將只安裝 Identity Manager 檔案,不會安裝 eDirectory 綱要及其他檔案。

    <install_drive>:\windows\setup\idm_install.exe -DCLUSTER_INSTALL="true"
    
  2. 在「eDirectory 維護」下使用「輸入轉換輸出精靈」,透過 iManager 延伸 Identity Manager 綱要。

  3. 使用 LDIF 檔案建立預設物件。

    • 預設密碼規則 LDIF 檔案

      dn: cn=Password Policies,cn=Security
      objectClass: nspmPasswordPolicyContainer
      objectClass: Top
      cn: Password Policies
      ACL: 1#subtree#[Public]#[Entry Rights]
      ACL: 3#subtree#[Public]#[All Attributes Rights]
      
      dn: cn=Sample Challenge Set,cn=Password Policies,cn=Security
      objectClass: nsimChallengeSet
      objectClass: Top
      cn: Sample Challenge Set
      
      dn: cn=Sample Password Policy,cn=Password Policies,cn=Security
      objectClass: nspmPasswordPolicy
      objectClass: Top
      cn: Sample Password Policy
      
    • 預設通知收集規則 LDIF 檔案

      dn: cn=Default Notification Collection,cn=Security
      objectClass: notfTemplateCollection
      objectClass: Top
      cn: Default Notification Collection
      ACL: 1#subtree#[Public]#[Entry Rights]
      ACL: 3#subtree#[Public]#[All Attributes Rights]
      
      dn: cn=Password Expiration Notification,cn=Default Notification Collection,cn=Security
      notfMergeTemplateSubject: Password Expiration Notification
      notfMergeTemplateData:: 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
      objectClass: notfMergeTemplate
      objectClass: Top
      cn: Password Expiration Notification
      
      dn: cn=Password Reset Fail,cn=Default Notification Collection,cn=Security
      notfMergeTemplateSubject: Notice of Password Reset Failure
      notfMergeTemplateData:: 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
      objectClass: notfMergeTemplate
      objectClass: Top
      cn: Password Reset Fail
      
      dn: cn=Password Set Fail,cn=Default Notification Collection,cn=Security
      notfMergeTemplateSubject: Notice of Password Set Failure
      notfMergeTemplateData:: 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
      objectClass: notfMergeTemplate
      objectClass: Top
      cn: Password Set Fail
      
      dn: cn=Password Sync Fail,cn=Default Notification Collection,cn=Security
      notfMergeTemplateSubject: Notice of Password Synchronization Failure
      notfMergeTemplateData:: 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
      objectClass: notfMergeTemplate
      objectClass: Top
      cn: Password Sync Fail
      
  4. 安裝 NMAS 方法。

  5. 在 iManager 上安裝 NMAS 外掛程式後,移至「NMAS」>「NMAS Login」>「Methods」>「New」。瀏覽並安裝所需 NMAS 方法中的組態檔案。

附註:請務必在套用該解決方式之前參考記錄檔案。例如,Roles Based Provisioning Module 綱要已延伸,安裝 Roles Based Provisioning Module 驅動程式時無需再將其延伸。

當有兩個關於語法資料流屬性的事件發生時,第一個屬性變更會遺失

來源︰ Identity Manager 4.0.1 引擎不會將 STREAM 與 OCTET_STRING 屬性儲存到快取中。當有事件同步到連接的系統時,引擎會從 Identity Vault 中讀取這些屬性,並會更新連接的系統。如果這些屬性在引擎從 Identity Vault 中讀取它們之前經過修改,則修改的值會在連接的系統中更新,而中間變更可能會遺失。
動作: 如果屬性頻繁變更,請使用適當的語法,不要使用 SYN_STREAM。

例如,如果某個 XML 物件儲存在 STREAM 屬性中,請使用 XMLData 語法,而不要使用 SYN_STREAM。

Identity Manager 升級期間發生 lcache 問題

來源︰ 升級 Identity Manager 之後,平台代理程式可能無法根據需要記錄事件。發生此問題的原因是,在 Linux 上升級 Identity Manager 時不會升級平台代理程式。在 Solaris 上,平台代理程式會升級至最新版本,但新的平台代理程式的預設連接埠不同,因此需要重新啟動 lcache。
動作: 您必須手動停止 lcache,然後才能開始升級。

升級 Identity Manager 時必須使用正確的管理員帳戶,以免遺失處理安全回應的答案

來源︰ 在 Windows 平台上從舊版 Identity Manager 升級時,應使用先前用於安裝 eDirectory 的相同管理員帳戶。
說明: 例如,如果之前是使用網域管理員帳戶安裝 eDirectory,則在安裝 Identity Manager 時仍要使用該網域管理員帳戶。請勿使用本地管理員帳戶。
動作: 若未使用相同的管理員帳戶,使用者將無法存取其對處理安全回應問題提供的答案。之所以會如此,是因為安裝期間重新建立了網路樹金鑰 (因為管理員帳戶不同),而新的網路樹金鑰未針對所儲存的答案提供正確的存取權限。當使用者登入時,系統會提示其提供新的處理安全回應答案。