Resolving REGEX_MATCH Arguments Error During Password Reset in Identity Manager

Products

• CA Identity Manager
• CA Identity Suite

Issue/Introduction

This article addresses the intermittent REGEX_MATCH Arguments error encountered when performing a password reset task within Identity Manager 14.x. This issue typically occurs in environments utilizing a clustered user store configured across multiple Active Directory Domain Controllers.

 

Fatal: Failed to execute ResetPasswordEvent. ERROR MESSAGE: PasswordMessageType::REGEX_MATCH Arguments

Environment

Identity Manager 14.x

Cause

The error is caused by network latency. When the user store cluster is distributed across two or more Active Directory Domain Controllers (DCs) without proper latency management, the communication between the Identity Manager and the disparate DC nodes results in processing failures, manifesting as the REGEX_MATCH Arguments error.

Resolution

To resolve this issue, ensure the user store cluster configuration is optimized for your environment's latency. If the environment requires splitting user store traffic across multiple DCs, implement the following configuration:

• Configure one DC node to act as the primary, high-availability node.
• Set any additional DC nodes in the cluster to standby mode, keeping them offline for normal user store operations to avoid split-brain or latency-induced authentication errors.

Note: Before implementing these changes, ensure your environment's high-availability requirements are met, as keeping a node offline will reduce redundancy.