Not able to manage ADS accounts or open ADS Explore/Correlate page from Provisioning Manager

Document ID : KB000009261
Last Modified Date : 14/02/2018
Show Technical Document Details
Issue:

Identity Manager is not able to change AD account password, it is not syncing or any other attribute is not being syncing with AD account

Environment:
Identity Manager 12.x, 14.x
Cause:

From Provisioning Manager in ADS Properties page the password was set using the Update button, even do the problem still persist.

 

In the ADS log ../ProvisioningServe/logs/ADS folder we have the ADS log with the following error message:

ldap_simple_bind_s() .....ERROR: 49

    LdapGetLastError(): 49

    Error msg: Invalid Credentials

 

The account is located under correct OU/Container, and password was verified and it is correct.

Resolution:

For some reason the Update button didn't update correctly the password, in this case use the etautil command below to force the update.

 

etautil -u SuperUserToLogin -p PasswordOfSuperUser update 'eTNamespaceName=ActiveDirectory' eTADSDirectory eTADSDirectoryName='Your_ADS_EndpointName' eTADSAuthPwd='The_Password' 

 

After that, close Provisioning Manager, and restart Provisioning Server service.