When you try to perform the Active Directory Index Update in User Group, you receives the error "Unexpected exception while creating exact data profile".

In Tomcat log, it shows following error:

21 Dec 2011 01:02:05,714- Thread: 17 SEVERE [com.vontu.profiles.manager.InfoSourceIndexCreator] Unexpected exception while creating exact data profile "NAME_of_INDEX" version 4
Cause:

java.security.AccessControlException: access denied (java.lang.RuntimePermission accessDeclaredMembers)
 at java.security.AccessControlContext.checkPermission(AccessControlContext.java:374)
 at java.security.AccessController.checkPermission(AccessController.java:546)
 at java.lang.SecurityManager.checkPermission(SecurityManager.java:532)
 at java.lang.SecurityManager.checkMemberAccess(SecurityManager.java:1662)
 at java.lang.Class.checkMemberAccess(Class.java:2157)
 at java.lang.Class.getDeclaredMethods(Class.java:1790)

The problem happens because the user being used to authenticate the AD connection does not have proper privileges to access directory data. The Index Update cannot access the data from Directory server.

Please note that even when you pass the connection test by clicking on "Test Connection" button on Configure Directory Connection page, if the user does not have proper privileges to access the specific OU information, the Index Update would still fail.

Check the user privileges used to access the directory server. You may use an LDAP browser to check if the user can access the specific data you want to index.

 

The problem can also be caused by latent connectivity issues between Enforce and the Oracle database.  Restart the Enforce services per the System Maintenance Guide and manually perform the index again.