Participant Synchronization encounters a common algorithm error

book

Article ID: 100045824

calendar_today

Updated On:

Description

Error Message

From Active Directory discovery status window:
Participant Synchronization Status: Idle - Discovery completed with errors.  Error encountered for server company.lab:  The client and server cannot communicate, because they do not possess a common algorithm.

From server log:
2018-05-25 16:05:55,075 WARN  [esa.jobmanager.JobManager] (exception-thpool.jobmanager.0.56289.1.5.6.204683297920385513:) job 1.5.6.204683297920385513 failed with exception
com.teneo.esa.icp.custodian.EsiCustodianManagerException: [#430256] Unexpected error: Error in doing Directory synchronization - Error in doing Directory synchronization - Please check the job log for errors.
    at com.teneo.esa.icp.EmployeeManager.startSynchronization(EmployeeManager.java:712)
    at com.teneo.esa.directory.ads.EmployeeSyncJob.run(EmployeeSyncJob.java:113)
    at com.teneo.esa.jobmanager.JobRunner.executeJob(JobRunner.java:168)
    at com.teneo.esa.jobmanager.JobRunner.executeJob(JobRunner.java:153)
    at com.teneo.esa.jobmanager.JobRunner.access$000(JobRunner.java:75)

Cause

Java and ADSCrawler communicate via TLS using an SCHANNEL.  Communication between these two are failing.

Resolution

Verify if TLS 1.0 is disabled.  If it is, enable it via these steps:
1.  Regedit
2.  Navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Server
3.  Verify if the following DWORD exists:
Enabled    REG_DWORD    0x00000000 (0)
4.  Set it's value to 1.  NOTE:  If the key or DWORD do not exist, create them.
5.  Reboot the server.

Issue/Introduction

Active Directory discovery Participant Synchronization completes with errors.