Cannot change password to user when there is a password policy
search cancel

Cannot change password to user when there is a password policy

book

Article ID: 250848

calendar_today

Updated On:

Products

CA Identity Suite

Issue/Introduction

When the customer tries to change/reset password to a user is seeing an error "corrupted buffer returned from server"

This issue is observed both when changing directly from identity, and changing from AD.

This problem only happens when the user matches a password policy.

Environment

Release : 14.3

Component :

Cause

This problem occurs when there is a new Policy Server instance added to the pool and does not contain the required registry entry ImsInstalled.

Resolution

Install CA Single Sign-On Extension

Install CA Single Sign-On (CA SSO) extension to configure Identity Manager registry values in the Policy Server.

Follow these steps:
1. On the CA SSO Policy Server, shut down the Policy Server service.
2. Run the Identity Manager installer for the version that you are using.
3. When asked which components to install, select the Extensions for CA SSO (if CA SSO is installed locally).
4. Verify that the Policy Server service is restarted before continuing.
5. Verify that the following registry setting exists in the CA SSO Policy Server system:
     Linux:
          Verify that the following entry exists in sm.registry:
          ImsInstalled=8.0; REG_SZ
     Windows:
          Verify that setting "ImsInstalled=8.0; REG_SZ" exists in the following location: 
          HKLM\SOFTWARE\Netegrity\SiteMinder\CurrentVersion

Notes: 
a. If the registry path \Netegrity\SiteMinder\CurrentVersion does not exist, create it manually.
b. If you change the registry, be sure to restart the Policy Server for the changes to take effect.
c. Before you modify the registry, perform a full system backup.

Additional Information

https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/identity-manager/14-3/configuring/ca-single-sign-on-integration/integrate-ca-single-sign-on-with-ca-identity-manager/install-ca-single-sign-on-extension.html