Enterprise Identity Mapping troubleshooting tips

The following information provides troubleshooting information for Enterprise Identity Mapping (EIM) configuration or connection factory configuration.

AdminControl service is not available

Symptom	The following message is displayed: Message: WASX7017E: Exception received while running file "/QIBM/ProdData/OS400/Java400/cfgIdToken.jacl"; exception information: com.ibm.ws.scripting.ScriptingException: AdminControl service not available.
Explanation	The application server or deployment manager of the WebSphere Application Server profile is not started, or the wsadmin option -conntype NONE is specified.

Configuration-related messages returned by the sample application to your Web browser session

Symptom	The following message is displayed: Message: com.ibm.as400.access.AS400SecurityException: User ID is not known.
Explanation	The EIM does not contain a mapping for the user ID that is used to log in to the sample application.
Symptom	The following message is displayed: Message: com.ibm.as400.access.ServerStartupException: Password encryption indicator is not valid.
Explanation	The target iSeries server is not configured for Enterprise Identity Mapping (EIM).
Symptom	The following message is displayed: Message: java.net.ConnectException: A remote host refused an attempted connect operation.
Explanation	The target server is not an iSeries server.
Symptom	The following message is displayed: Message: The lookup for the connection factory failed. Either the connector is not configured, or the servlet resource reference (JNDI name) is not set correctly in the web.xml file. The servlet expects the resource reference in the web.xml file to be eis/IdentityToken_Shared_Reference.
Explanation	Either the connector is not configured, or the servlet resource reference (JNDI name) is not set correctly in the web.xml file. The servlet expects the resource reference in the web.xml file to be eis/IdentityToken_Shared_Reference.
Symptom	The following message is displayed: Message: The JAAS Subject object was not passed to the Java 2 Connector (J2C) connector because WebSphere Application Server security is not correctly configured for the servlet.
Explanation	WebSphere Application Server administrative security is not enabled.
Symptom	The following message is displayed: Message: javax.resource.ResourceException: com.ibm.eim.jndi.DomainJNDI:method_name: failed to connect to initial directory context.
Explanation	This message is caused by one of the following issues: The authentication data entry that is configured for the connection factory contains an incorrect Lightweight Directory Access Protocol (LDAP) distinguished name. The authentication data entry that is configured for the connection factory contains an incorrect LDAP password. The LDAP host name that is configured for the connection factory is incorrect. The LDAP port that is configured for the connection factory is incorrect. The LDAP server is not started. The Enterprise Identity Mapping (EIM) domain name that is configured for the connection factory is incorrect. The EIM parent name that is configured for the connection factory is incorrect.
Symptom	The following message is displayed: Message: javax.resource.ResourceException: Input URL is null or not valid.
Explanation	An LDAP host name is not configured for the connection factory.
Symptom	The following message is displayed: Message: com.ibm.as400.access.AS400SecurityException: An unknown problem occurred.
Explanation	The target iSeries server is not joined to the EIM domain that is configured for the connection factory, or the EIM source registry name is incorrect.

Perform the following steps to enable trace for EIM:

Note: This trace is only available for idTokenRA.JCA15.rar.

1. From the administrative console, select Servers > Application Servers > server_name > Change Log Details Levels.

2. Click the Runtime tab.

3. Select Save runtime changes to configuration as well.

4. Remove any previous entries in the text field, and type the following:

   com.ibm.jca.idtoken.*=all: com.ibm.eim.token.*=all
   

5. Click Apply and save the changes.

Related tasks

Reference topic