Bad Username/Password With RSA

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

RSA authentication stopped working after reconfiguring the RSA authentication parameters. The error in the session logs is a bad username/password error.

The following steps were used to configure PAM for RSA authentication

Configure PAM for RSA

 

Cause

The sdopts.rec file contained Windows style line endings rather than the Unix style line endings required by PAM.

Resolution

To confirm what type of line endings a file has, open it in Notepad++. The bottom of the screen will say what type of line endings the file has. The line endings can be shown by going to View > Show Symbol > Show End of Line.

For Windows style line endings:

For Unix style line endings:

To convert the line endings, right-click the box at the bottom of the windows and select Unix. Save the file and upload it to the PAM appliance, then delete the node secret.