Compromised ID used by the AdminUI to connect to Active Directory as an external Admin Store

Products

• SITEMINDER
• CA Single Sign-On

Issue/Introduction

An External Administrator Store is configured for AdminUI using the client's Active Directory.

A change is needed to the password for the service account that is used to bind to the Active Directory for authentication to take place.

When the password is changed in the Active Directory first, the administrator is not able to log in to the AdminUI to change the password for the service account there.

Resolution

Set the user and password to make the directory connection externally (1).

Update the directory manager credentials with the smjndisetup utility.

NOTE:

The smjndisetup utility can only update connection details that were configured using the AdminUI (Administrative UI).

Follow these steps: 

1. Log in to the AdminUI host system;
2. Navigate to <adminui_home>\bin:
   
   (NOTE: <adminiui_home> specifies the AdminUI installation path)
   
   
3. Run the following command:
   
   Windows
   
   c:\> smjndisetup.bat --reset-password
   
   Linux
   
   # smjndisetup.sh --reset-password
   
   
4. Do one of the following tasks:
   
   - Type the new directory user and press Enter.
   - Press Enter to accept the default username.
   
   
5. Type the new password and press Enter;
6. Type Y and press Enter;
   
   The utility restarts the Administrative UI service.
   The utility also updates the new directory connection details.

Additional Information

1. Update External Administrator Store Credentials