3.2 Unable to Create a Data Synchronization Policy on Microsoft Azure

Issue: In Microsoft Azure, when the reporting database is SSL enabled, you might see the following exception in catalina.out while creating data synchronization policy in Identity Manager Data Collection Services web user interface:

org.postgresql.util.PSQLException: FATAL: no pg_hba.conf entry for host "52.151.202.8", user "postgres", database "idmrptdb", SSL off at org.postgresql.core.v3.ConnectionFactoryImpl.doAuthentication(ConnectionFactoryImpl.java:443) at org.postgresql.core.v3.ConnectionFactoryImpl.openConnectionImpl(ConnectionFactoryImpl.java:217) at org.postgresql.core.ConnectionFactory.openConnection(ConnectionFactory.java:52) at org.postgresql.jdbc.PgConnection.<init>(PgConnection.java:216) at org.postgresql.Driver.makeConnection(Driver.java:404) at org.postgresql.Driver.connect(Driver.java:272)

(Defect 474021)

Workaround: Perform the following steps to resolve this issue:

To enable the SSL on the database in Sentinel:

  1. Launch command line interface of Sentinel VM.

  2. Navigate to the /var/opt/novell/sentinel/3rdparty/postgresql/data/postgresql.conf file and update the following values:

    • listen_addresses = '*'

    • ssl = on

  3. Navigate to the /var/opt/novell/sentinel/3rdparty/postgresql/data/pg_hba.conf file and update the following value in # IPv4 local connections: host all all 127.0.0.1/32 md5.

    IPv4 local connections: hostssl all all 0.0.0.0/0 md5

  4. To restart the Sentinel, run the following command:

    rcsentinel restart

To add a new data policy in the Identity Manager Data Collection Services user interface:

  1. Log in to your connected system.

  2. Click Settings > Data Sync Policies.

  3. Click .

  4. Go to Database Server Details, and add the following value:

    1. Specify the following value for Name:

      idmrptdb?compatible=true&ssl=true

    2. Specify the value for reporting database admin password obtained from key vault. Ensure you get the secret value from Azure portal.

      To obtain the password, perform the following steps:

      1. Log in to Azure portal.

      2. Click your Resource group.

      3. Go to Resources, click the Key vault associated with your account.

      4. Go to Settings > Secrets, click rptdbusersharepwd.

      5. Under Current Version, click printed value.

      6. Click Show Secret Value.

  5. Click Create.

After successfully updating all the required fields, a new data synchronization policy will be created in your database. For more information, refer to Data Sync Policies.