Symantec Identity Manager - Not able to login Provisioning manager

Products

• CA Identity Manager
• CA Identity Governance
• CA Identity Portal
• CA Identity Suite

Issue/Introduction

Unable to connect to the Provisioning Server through Provisioning Manager - Bind to provisioning server as 'etaadmin' failed: Invalid credentials or Global User is locked.


.
(02/07/2020 10:32:41 PM), Install, com.ca.etrust.install.admin.VerifyAdminServer, err, ProductException: (error code = 200; message="Java error"; exception = [ProductException: (error code = -1; message="Cannot bind to IM Provisioning Server with Global User Credentials. See previous log messages for the cause of the failure.")])
STACK_TRACE: 12
ProductException: (error code = 200; message="Java error"; exception = [ProductException: (error code = -1; message="Cannot bind to IM Provisioning Server with Global User Credentials. See previous log messages for the cause of the failure.")]

Environment

Release : 14.x

Component : IdentityMinder(Identity Manager)

Resolution

Attempt to log into the provisioning server via an LDAP browser such as Jxplorer and confirm that your credentials are in fact correct.

Bind: eTGlobalUserName=etaadmin,eTGlobalUserContainerName=Global Users,eTNamespaceName=CommonObjects,dc=im,dc=eta

PW: Shared Secret

Host: IMPS HostName

Port: 20389

If they are incorrect and this is a new install then you will need to uninstall and reinstall the IMPS. This will make sure that it lays down the proper registry keys, shared secrets and creates your administrator.

If this is an existing system, then you will need to connect to through your DSA's shared secret and modify the etaadmin user's password and or enabled state (eTSuspended=0
eTPasswordChangeMaximumDays=0, and eTLocked should not be set to any value).

Bind: eTDSAContainerName=DSAs,eTNamespaceName=CommonObjects,dc=etadb

PW: Shared Secret

Host: IMPS HostName

Port: 20391