User Unable to Log On with AD Services

Products

• iDash Workload Automation for CA 7

Issue/Introduction

Not able to log into iDash using AD user account.

Error from the idash log file:

20-03-26 13.34.46 [ WARN] http-nio-8080-exec-3: User USER1 failed to authenticate against LDAP server, parameters: {java.naming.provider.url=ldap://ldap.state.in.us, java.naming.security.principal=CN=[e-mail],OU=******* ****,OU=EMPLOYEE,OU=USERS,DC=LDAP,DC=STATE,DC=xx,DC=yy, java.naming.security.credentials=******************}
javax.naming.AuthenticationException: [LDAP: error code 49 - 8009030C: LdapErr: DSID-0C090446, comment: AcceptSecurityContext error, data 52e, v2580 ]

Environment

Release : 11.3

Component : CA WORKLOAD AUTOMATION iDASH FOR CA 7

Resolution

LDAP Result Code 49 sub-codes for Authentication Failures:

525 user object not found
52e invalid password/credential
53f credential policy violation
530 time restriction in place
531 not permitted to logon at this workstation
532 password expired / DN username mismatch
533 account disabled
568 too many context identifiers
701 account expired
773 username/password valid, must reset password
775 account lockout


The above error is returned when the username is valid but the password/credential is invalid.