IY43204: URAFTOOL DOES NOT HANDLE HIDDEN OR DELETED ENTRIED THAT ARE OUT OF SYNC

APAR status

• Closed as program error.

Error description

• In a multi-domain environment Access Manager failes to install
  if you delete access mananger and then reinstall access manager
  within that environment.
  The issue seems to be related to the uraftool code of
  0x800072030 from AD. To do this the uraftool must either use
  the OpenDSObject method or AdsOpenObject function ( This
  information is in an article call " Accessing Hidden or Deleted
  Entries". On a machine that does not have access manager
  installed the uraftool binds to a visable container with this
  

Local fix

• Possible fix is to give the user permissions to access Hidden
  or deleted entried
  Iy you were to bind to a visable containers with this method ,
  and enumerate the objects in the container, you would see the
  deleted and hidden objects , you would see the deleted and
  hidden objects. You can also bind directly to a hidden or
  deleted object. Without "cn=admin" appended to the username,
  you would nornally receivedan error :0x80072030 ( This error
  appears in the uraftool trave.svc files) The error means that
  there is no such object on the server. Once you bind with this
  method you can access hidden and deleted objects.
  

Problem summary

• Fixed in patch 4.1-TAM-FP02.
  

Problem conclusion

• Fixed in patch 4.1-TAM-FP02.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

  IY36190

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  ACCESS MGR BASE

• Fixed component ID

  5724C0801

Applicable component levels

• R410 PSY

     UP