5 Troubleshooting

This chapter contains the following sections:

• Troubleshooting

• Guidelines on Using the Connector

5.1 Troubleshooting

Table 5-1 lists solutions to some commonly encountered issues associated with the CA ACF2 Advanced connector.

Table 5-1 Troubleshooting

Problem Description	Solution
Oracle Identity Manager cannot establish a connection to the CA ACF2 server.	Ensure that the mainframe server is up and running. Check that the necessary ports are working. Start the LDAP Gateway first and then the mainframe JCL started task. This is a requirement based on how TCP/IP operates. Check that the server IP, which hosts the Gateway is configured in the Reconciliation Agent JCL. View the Gateway logs to determine if messages are being sent or received. Examine the Oracle Identity Manager configuration to verify that the IP address, admin ID, and admin password are correct. Check with the mainframe platform manager to verify that the mainframe user account and password have not been changed.
The mainframe does not appear to respond.	Ensure that the Oracle Identity Manager mappings are correct. Check the configuration mappings for the Advanced Adapter Gateway.
A particular use case does not appear to be functioning.	Check for the use case event in question on the Gateway Server Log. Then check for the event in the specific log assigned to that Advanced Connector. If the event does not register in either of these two logs, then investigate the connection between Oracle Identity Manager and the connector Gateway. If the event is in the log but the command failed to make the intended change on a mainframe user profile, then check for configuration and connections between the Gateway and the mainframe. Check that TCP/IP is turned on.
The LDAP Gateway fails and stops working	If this problem occurs, then the Reconciliation Agent stops sending messages to the LDAP Gateway. Instead, it stores them in the subpool cache. When this happens, restart the LDAP Gateway instance so that the Reconciliation Agent reads the subpool cache and resends the messages.
The LDAP Gateway is running. However, the Reconciliation Agent fails and stops working	If this problem occurs, then all events are sent to the subpool cache. If the mainframe fails, then all messages are written to the disk. When this happens, restart the Reconciliation Agent instance so that it reads messages from the disk or subpool cache and resends the messages.

5.2 Guidelines on Using the Connector

Apply the following guidelines while using the connector:

• The CA ACF2 Advanced connector can accept and transmit any non-ASCII data to the mainframe, but the mainframe does not accept non-ASCII characters. As a result, any task that requires non-ASCII data transfer fails. In addition, there is no provision in the connector to indicate that the task has failed or that an error has occurred on the mainframe. You must exercise caution when providing non-ASCII data to the connector.

• Passwords used on the mainframe must conform to stringent rules related to passwords on mainframes. These passwords are also subject to restrictions imposed by corporate policies and rules about mainframe passwords.