CA PIM: Password history is not correct.

Products

• CA Privileged Identity Management Endpoint (PIM)

Issue/Introduction

The password mismatch between password checkout and password history.
The password history is not match with current password.
It only happens on the password changed on checkout, not on checkin.

 

[REPRODUCTION STEPS]
1. create certain endpoint and its account with both "Change Password on Check out" and "Change Password on Check in" are ture.

 

2. checkout the account and remember the shown password.

 

3. check password history for the account.
the latest one is the password changed on checkout in step 2.

 

[expected result]
the latest password history shows same password shown on checkout in step 2.

 

[actual result]
the latest password history shows different password shown on checkout in step 2.

it seems this is previous password in history.

 

4. try to login to endpoint with both password.
the account can be logged in by the password shown in step2, and not by the one shown in step 3.
So the actual password is shown in checkout and the password history is not correct.

 

5. checkin the account

 

6. check password history for the account.
The latest one is the password changed on checkin in step 5.

 

7. try to login to endpoint with the password.
The account can be logged in by the password.
So the password history of checkin is correct.

Environment

Release : 14.0

Component : CA ControlMinder - Privileged Passwords

Cause

The product defect

Resolution

This is fixed by the testfix T51S097.

Please contact Broadcom support for the testfix.