Description

While installing JIMS on a PDC (Primary Domain Controller) is neither recommended nor supported on production systems, you can install Juniper Identity Management Server on a PDC for testing purposes, if you execute the following additional steps documented in the solution section below.
 

Symptoms

After installation of JIMS on a PDC on Windows 2008, the administrator GUI is still unable to connect a local administrator user to JIMS, even after having applied all the required Service Packs and KB articles.

This may also happen if you upgrade the installation to a PDC or DC after installing JIMS.

Solution

PDCs in Windows 2008 lose their local users and groups lists, so the default security mechanism does not match.

Perform these additional steps.

Note:  Before executing these steps, validate that you have strictly followed the installation steps and confirm that you have all the required items, including the correct R rev (e.g. Windows Server 2008 R2), the listed Service Pack on top of that, and the KBs indicated and executed the steps that are required to permit JIMS Administrator GUI to connect using TLS 1.1 or later, as specified in the Release Notes and JIMS documentation appropriate for your version.

  1. Using notepad, edit the file <JIMS Installation Directory> \cwd\config\access_group_mgr.xml .
  2. Copy and paste the text below, and replace the items in []s (square brackets) with information appropriate to your installation.

    <access>
        <accessGroups>
              <accessGroup id="[short domain]\\Domain Admins" local="1" sequence="1" level="admin"/>
              <accessGroup id="administrators" local="1" sequence="2" level="admin"/>
              <accessGroup id="[short domain]\\Domain Admins" local="0" sequence="3" level="admin"/>
       
        <accessUsers>
            <accessUser id="_system.localhost" level="snmpd"/>
            <accessUser id="administrator" level="admin"/>
            <accessUser id="[short domain]\\administrator" level="admin"/>
       
     

  3. Run a command prompt as administrator (Start Menu->Command Prompt Right-Mouse RunAs Administrator) and enter:

    Note: Running resetConfig resets the configuration to the install-time defaults, losing any changes made after.

    cd "[JIMS Installation Directory]\bin"
    net stop jims
    resetConfig.cmd
    net start jims
    ​​
  4. Close and restart the JIMS Administrator GUI.

Related Information