Error Decrypting Attribute eTORADirectoryPWD

Products

• CA Identity Manager
• CA Identity Suite

Issue/Introduction

This article describes the resolution for an "Error decrypting attribute eTORADirectoryPWD" error occurring on Oracle Endpoints within Identity Manager. This issue is typically caused by hidden or invalid characters in the JDBC DSN string.

When attempting to access an Oracle Endpoint, the system fails and returns the following error: Error decrypting attribute eTORADirectoryPWD: attribute eTORADirectoryDSN has been modified since this attribute was encrypted. Please reset the encrypted attribute.

Environment

• Product: CA Identity Manager, CA Identity Suite
• Release: 14.5, 15
• Oracle Endpoint

Cause

The eTORADirectoryDSN value may contain hidden carriage return or newline characters. These characters cause decryption failures because the stored DSN string does not match the encrypted state. This often occurs after the JDBC DSN has been manually modified.

Resolution

Clear the invalid characters from the DSN string:

1. Open the Provisioning Manager.
2. Navigate to the affected Oracle Endpoint.
3. Edit the eTORADirectoryDSN value.
   • Tip: Remove the last character (e.g., parenthesis) and re-enter it manually to ensure no hidden whitespace or control characters remain.
4. Re-enter the password for the connection ID in the eTORADirectoryPWD field.
5. Save the changes.
6. Verify the fix using an LDAP browser (such as Jxplorer) to ensure the eTORADirectoryDSN value is clean and the eTORADirectoryPWD attribute has been updated.

Additional Information

If the issue persists, ensure that no external configuration scripts are injecting special characters into the DSN string when it is updated.