Test external identity repository access
To verify that you have configured the repository and administrator privileges correctly, follow these steps:
-
Attempt to create an AM user by going to Realms > Realm Name > Identities in the AM admin UI. Run this test only if you have given the AM bind account write privileges to your identity repository.
For example, create a
demouser. When creating ademouser’s account, set the fields as follows:Demo user account settings Field Value ID
demoFirst Name
Leave this field blank.
Last Name
demoFull Name
demoPassword
Ch4ng31tUser Status
Active
-
Attempt to access an AM user from Realms > Realm Name > Identities in the AM admin UI.
If you receive an LDAP error code 65 while attempting to create a user, it indicates that you did not correctly prepare the identity repository. Error code 65 is an LDAP object class violation and often indicates a problem with the directory schema or permissions.
A common reason for this error while attempting to create a user is
that the bind account might not have adequate rights to add data to the directory.
Review the DS access log and locate the entries for the add operation
to determine if it is an access rights issue.
For information on setting up Directory Services as an identity store, see Install and configure Directory Services for identity data.