Symantec VIP - Error logging into VIP Manager through the local Manager IdP service

Products

• VIP Service

Issue/Introduction

Administrators are unable to logon to VIP Manager through the Manager IdP connections. Getting error: "We are temporarily unable to process your request".

 

Debug level Manager IdP logs show the following error: "VIPMGRIDPFirstFactor:: Patern not Matches"

 

Full log entry:

"actor=VIPMGR,op=Authentication,text=Skipping host name check."
"actor=JohnDoe,op=Authentication,text=VIPMGRIDPFirstFactor:: Patern not Matches"
"actor=JohnDoe,op=Authentication,text=Timeout: 2"
"actor=JohnDoe,op=Authentication,text=mail attribute field : : mail"
"actor=JohnDoe,op=Authentication,text=ncp.getName()  = CN=John Doe\,OU=Users\,OU=Company"
"actor=JohnDoe,op=Authentication,text=Timeout: 2"
"actor=JohnDoe,op=Authentication,text=Binding to LDAP server with the user 'JohnDoe' ..."
"actor=JohnDoe,op=Authentication,text=Could not bind user 'JohnDoe' to the directory server."
"actor=JohnDoe,op=Authentication,text=User 'JohnDoe' could not be authenticated against given credentials"
"actor=JohnDoe,op=Authentication,text=User 'JohnDoe' could not be authenticated against given credentials"

Environment

Release : 1.0

Resolution

It was identified that there was an issue with login account after reset password. Clearing account and logging in to Active Directory with another logon method first allowed the Manager IdP LDAP call to then authenticate the first factor and verify the user password.