Symantec IGA

  • 1.  Issue while updating the new username for userstore

    Posted Sep 20, 2018 04:55 AM

    Hi

     We need to update the new username and password for user store.

    *Exported the userstore xml and edited the username and password. while trying to update the xml back in management console facing the error.

    Error screenshots attached. please share your view on this which would be helpful.

     

    Best Regards

    Kirupakaran



  • 2.  Re: Issue while updating the new username for userstore

    Broadcom Employee
    Posted Sep 20, 2018 08:16 AM

    How were the credential entered?

                                    <!--Credentials are used to connect -->

                                    <!--1. user - Username to use when connecting -->

                                    <!--2. cleartext - (Optional) Indicates if the password is cleartext. By default, if not specified the password is encrypted -->

                                    <!--The data element is the password to use when connecting.  This is an encrypted value unless cleartext=true . -->

                                    <!--Use the password tool included in the Identity Manager admin toolkit to generate the encrypted value. -->

                                    <Credentials user="cn=dsaadmin,ou=im,ou=ca,o=com”>*********</Credentials>

    The password is expected be encrypted by default (using pwdtools), but it can also be entered as plaintext

                                    <Credentials user="cn=dsaadmin,ou=im,ou=ca,o=com” cleartext=”true”>*********</Credentials>

     



  • 3.  Re: Issue while updating the new username for userstore

    Posted Sep 20, 2018 08:26 AM

    Yes Gil. same way which you have mentioned. password is in encrypted state.

     

    <!--Credentials are used to connect -->
    <!--1. user - Username to use when connecting -->
    <!--2. cleartext - (Optional) Indicates if the password is cleartext. By default, if not specified the password is encrypted -->
    <!--The data element is the password to use when connecting. This is an encrypted value unless cleartext=true . -->
    <!--Use the password tool included in the Identity Manager admin toolkit to generate the encrypted value. -->
    <Credentials user="uid=*****,ou=DomainController,dc=****,dc=com">{PBES}:****</Credentials>

     

    For your note : I am trying to change the existing username.



  • 4.  Re: Issue while updating the new username for userstore
    Best Answer

    Broadcom Employee
    Posted Sep 20, 2018 08:42 AM

    If you can connect using an LDAP tools (such as LDAP Studio), make sure that the credentials are correct, use the cleartext option



  • 5.  Re: Issue while updating the new username for userstore

    Posted Sep 21, 2018 12:36 AM

    Hi Gil

        What your saying is exactly right. But the complexity here is,

    In my environment user store ans user console have the same username. so if i try resetting password using LDAP tools due to that conflict environment is going down.

     

           That's why by the  advice of CA support i am trying to export the user store .xml and changing the login credentials and while updating it back facing this error.

     

    The following error(s) occurred:
    • Could not connect to LDAP server IDMPRD1:*** with User DN uid=****,ou=DomainController,dc=*******,dc=com and specified password

    Warning: The connection object "***_userstore" exists. The configuration will be updated.

      

     

     

    BR

    Kirupakaran



  • 6.  Re: Issue while updating the new username for userstore

    Posted Sep 24, 2018 06:15 AM

    Hi Kirupakaran,

     

    As per the web-ex, we changed the password for the iamadmin, post we login into the UI, in the menu, we have an option to change the password, 

     

    Post changing the password, the password has been changed and we are able to login with the new password, 

     

    Regards,

    Ram,