Hi All,

We are trying to set up a Google driver on an IDM 4.5 environment. We
have configured the User Account and Group Membership entitlements which
was done with the Values from Application setting.
When trying to create a resource to look up for a group from Google we
get an empty list. Then when we run the refresh status of the
Entitlement Query setting, we get the following error from the log and
then the driver is terminated.

> :[08/05/16 16:27:18.660]:Google ST:connect
> [08/05/16 16:27:18.660]:Google ST:dispatch
> [08/05/16 16:27:18.660]:Google ST:queryHandler
> [08/05/16 16:27:18.660]:Google ST:queryHandler: association ==
> null
> [08/05/16 16:27:18.661]:Google ST:queryHandler: class-name ==
> 'Group'
> [08/05/16 16:27:18.661]:Google ST:queryHandler: dest-dn ==
> null
> [08/05/16 16:27:18.661]:Google ST:queryHandler: event-id == '0'
> [08/05/16 16:27:18.661]:Google ST:queryHandler: max-result-count ==
> 2147483647
> [08/05/16 16:27:18.661]:Google ST:queryHandler: qualified-src-dn ==
> null
> [08/05/16 16:27:18.662]:Google ST:queryHandler: scope ==
> 'subtree'
> [08/05/16 16:27:18.662]:Google ST:queryHandler: src-dn ==
> null
> [08/05/16 16:27:18.662]:Google ST:queryHandler: src-entry-id ==
> null
> [08/05/16 16:27:18.662]:Google ST:queryHandler: Adding Description to
> read attrs
> [08/05/16 16:27:18.663]:Google ST:queryHandler: read-attr ==
> 'Description'
> [08/05/16 16:27:18.663]:Google ST:queryHandler: Adding CN to read
> attrs
> [08/05/16 16:27:18.663]:Google ST:queryHandler: read-attr ==
> 'CN'
> [08/05/16 16:27:18.663]:Google ST:Processing search criteria
> [08/05/16 16:27:18.663]:Google ST:GMailShim queryHandler(): Query for
> Group object
> [08/05/16 16:27:18.664]:Google ST:GMailShim queryHandler(): Search
> Attribute: null
> [08/05/16 16:27:18.664]:Google ST:GMailShim queryHandler(): Association:
> null
> [08/05/16 16:27:18.664]:Google
> STirectoryAppClient.retrieveAllGroups(): Domain = null; Filter User =
> null
> [08/05/16 16:27:18.664]:Google
> STirectoryAppClient.retrieveAllGroups(): No domain specified. Using
> default = sol-online.com.ar
> [08/05/16 16:27:19.134]:Google
> STirectoryAppClient.getGroupsSettingsByEmailAddress( ): Email Address =
> abastecimiento@sol-online.com.ar
> [08/05/16 16:27:23.704]:Google ST:handleGoogleJsonResponseException():
> Error code: 401
> [08/05/16 16:27:23.704]:Google ST:handleGoogleJsonResponseException():
> Error message: Domain cannot use Api, Groups service is not installed.
> [08/05/16 16:27:23.705]:Google ST:handleGoogleJsonResponseException():
> Error Reason: authError
> [08/05/16 16:27:23.705]:Google ST:SubscriptionShim.execute() returned:
> [08/05/16 16:27:23.705]:Google ST:
> <nds dtdversion="3.0">
> <source>
> <product build="20150909_2033" instance="Google"
> version="4.1.1.0">GoogleApps Driver</product>
> <contact>NetIQ Corporation</contact>
> </source>
> <output>
> <status event-id="'0'" level="fatal" type="driver-status">
> <description>GoogleJsonResponseException: Domain cannot use Api,
> Groups service is not installed.</description>
> <exception
> class-name="com.google.api.client.googleapis.json.Google JsonResponseException">
> <message>401 Unauthorized
> {
> "code" : 401,
> "errors" : [ {
> "domain" : "global",
> "location" : "Authorization",
> "locationType" : "header",
> "message" : "Domain cannot use Api, Groups service is not
> installed.",
> "reason" : "authError"
> } ],
> "message" : "Domain cannot use Api, Groups service is not installed."
> }</message>
> </exception>
> </status>
> </output>
> </nds>
>


Any ideas on this?
The driver patch 4.1.1.0 was applied, and the post installations steps
where also applied.

Thanks


--
sbenavidez
------------------------------------------------------------------------
sbenavidez's Profile: https://forums.netiq.com/member.php?userid=560
View this thread: https://forums.netiq.com/showthread.php?t=56390