Unable to logon into IM provisioning server. ETA_E_0418<BGU>, Bind to provisioning server as 'dmin' faied: Password expiration date has passed.

Products

• CA Identity Manager

Issue/Introduction

Customer is not able to login into a provisioning server from provisioning manager UI.

The following error is returned: "ETA_E_0418<BGU>, Bind to provisioning server as 'dmin' faied: Password expiration date has passed."

Environment

Release : 1.0

Component : IdentityMinder(Identity Manager)

Cause

This is a normal provisioning server behavior.

Password of "admin" global user has expired, and expiry date need to be changed using some other admin account. 

Resolution

If there is no other administrator account, it is possible to change the expiry date of a global user directly in the provisioning directory.

Follow these steps:

1) Connect to the provisioning directory router using Jxplorer and the following connection parameters:
    Port: 20391
    User: eTDSAContainerName=DSAs,eTNamespaceName=CommonObjects,dc=im,dc=etadb
Password: prov directory shared secret
    Base DN: eTGlobalUserContainerName=Global Users,eTNamespaceName=CommonObjects,dc=im,dc=etadb
2) Find the global user under question and modify its eTPasswordExpirationDate attribute.
3) Restart the Provisioning Server
 
Date format is following (normally prefixed with zeroes 0000):
CYYDDD
where:
C is century. 0 means 20th century, 1 means 21st century
YY is year (0..99)
DDD is a day in a year (1..366)

For instance:
December 31, 2021 is 121365
January 1, 2022 is 122001
Today, November 30, 2021 is 121334
December 31, 2024 is 124366 as 2024 will be a leap year.

Also it's possible to just disable expiration by putting 0 in eTPasswordExpirationDate attribute.
After that user can login using that account and enable expiration date.