PAM is unable to manage MSSQL Accounts

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

PAM Admin was trying onboard new MSSQL instances into PAM. But when we try to onboard account with initial password it is failing with an error.

Error: PAM-CM-0758 : Failed to synchronize password with target.

Environment

Release : 4.0.x, 4.1.x

 

Resolution

Inside the Tomcat logs, they were getting the error message:

"Connection refused (Connection refused). Verify the connection properties. Make sure that an instance of SQL Server is running on the host and accepting TCP/IP connections at the port. Make sure that TCP connections to the port are not blocked by a firewall.".

Ultimately SQL was using dynamic ports and unfortunately our PAM SQL Target Application needs a static one.