User interface is not allowing login, but able to access Management Console

Products

• CA Identity Manager
• CA Identity Governance
• CA Identity Portal
• CA Identity Suite

Issue/Introduction

We are seeing a situation were the Identity Manager User interface is not allowing logins for general users, but the Management Console does allows login.

Environment

Release : 14.2, 14.3

Component : CA IDENTITY SUITE (VIRTUAL APPLIANCE)

Cause

Identity Manager was setup to use Active Directory Authentication and the credentials or permissions for the user assigned to connect to Active Directory had changed.

The server.log file was showing an LDAP error code 49 - Invalid Credentials

2020-09-10 07:18:01,501 ERROR [stderr] (default task-12) javax.naming.NamingException: JBAS011843: Failed instantiate InitialContextFactory com.sun.jndi.ldap.LdapCtxFactory from classloader ModuleClassLoader for Module "deployment.iam_im.ear.user_console.war:main" from Service Module Loader [Root exception is javax.naming.AuthenticationException: [LDAP: error code 49 - Invalid Credentials]]
 Line 400: 2020-09-10 07:18:01,505 ERROR [stderr] (default task-12) Caused by: javax.naming.AuthenticationException: [LDAP: error code 49 - Invalid Credentials]

 2020-09-10 07:18:01,553 ERROR [stderr] (default task-12) javax.naming.NamingException: JBAS011843: Failed instantiate InitialContextFactory com.sun.jndi.ldap.LdapCtxFactory from classloader ModuleClassLoader for Module "deployment.iam_im.ear.user_console.war:main" from Service Module Loader [Root exception is javax.naming.AuthenticationException: [LDAP: error code 49 - Invalid Credentials]]
 Line 570: 2020-09-10 07:18:01,558 ERROR [stderr] (default task-12) Caused by: javax.naming.AuthenticationException: [LDAP: error code 49 - Invalid Credentials]

 

Resolution

To resolve this, please check the user defined for Active Directory Authentication in the IDM Management Console:

Home › Environments › identityEnv › Advanced Settings › User Console › ActiveDirectory authentication > module properties


Verify the user details specified here with your Active Directory Admin and reenter the password to ensure it is correct. 

Restart the environment after updating the password.