Active Directory entitlement collection fails with the message "Extended rights could not be retrieved". Active Directory crawling may have succeeded with status complete. This error is in the log file:
2015-10-06 09:13:42,099,26,ERROR,WBX.Common.LDAP.ActiveDirectory.ConnectionPool,getObjectSidByDN,Error in 'dc=dom1,dc=loc'.
System.Runtime.InteropServices.COMException (0x8007203A): The server is not operational.
at System.DirectoryServices.DirectoryEntry.Bind(Boolean throwIfFail)
at System.DirectoryServices.DirectoryEntry.Bind()
at System.DirectoryServices.DirectoryEntry.get_AdsObject()
at System.DirectoryServices.DirectorySearcher.FindAll(Boolean findMoreThanOne)
at System.DirectoryServices.DirectorySearcher.FindOne()
at WBX.Common.LDAP.ActiveDirectory.ConnectionPool.getObjectSidByDN(String dn)
2015-10-06 09:14:02,031,28,ERROR,WBX.Common.LDAP.ActiveDirectory.ConnectionPool,getObjectSidByDN,Error in 'dc=dom1,dc=loc'.
System.Runtime.InteropServices.COMException (0x8007203A): The server is not operational.
at System.DirectoryServices.DirectoryEntry.Bind(Boolean throwIfFail)
at System.DirectoryServices.DirectoryEntry.Bind()
at System.DirectoryServices.DirectoryEntry.get_AdsObject()
at System.DirectoryServices.DirectorySearcher.FindAll(Boolean findMoreThanOne)
at System.DirectoryServices.DirectorySearcher.FindOne()
at WBX.Common.LDAP.ActiveDirectory.ConnectionPool.getObjectSidByDN(String dn)
2015-10-06 09:14:10,390,28,ERROR,WBX.whiteOPS.Server.RoleAnalytics.ActiveDirectoryRAEngine,getExtendedRights,Extended rights could not be retrieved
System.Runtime.InteropServices.COMException (0x8007203A): The server is not operational.
at System.DirectoryServices.DirectoryEntry.Bind(Boolean throwIfFail)
at System.DirectoryServices.DirectoryEntry.Bind()
at System.DirectoryServices.DirectoryEntry.get_AdsObject()
at System.DirectoryServices.DirectorySearcher.FindAll(Boolean findMoreThanOne)
at WBX.whiteOPS.Server.RoleAnalytics.ActiveDirectoryRAEngine.getExtendedRights(ConnectionPool adConnectionPool, String[] extendedRightsProperties, GUIDResolver allValidatedRights, String forestFQDN, GUIDResolver& availableValidatedRights)
2015-10-06 09:14:10,390,28,ERROR,WBX.whiteOPS.Server.RoleAnalytics.RAPermissionHandler,configureBam,BAM AD - DOM1 could not be configured
This error occurs when the Active Directory application is configured to connect on port 636 and the SSL check box is not selected. To correct the error reconfigure the SecurityIQ Active Directory application, checking the "use SSL" check box.
