Reset directory.xml Authentication User Password in Identity Manager

Products

• CA Identity Manager

Issue/Introduction

Reset the directory.xml authentication user password when the standard export/import functionality does not perform as intended. This procedure involves manually updating the credential in the database.

Environment

• Product: Symantec Identity Manager
• Version: 15

Resolution

To reset the password manually, follow these steps:

1. Stop the Identity Manager Application Server.
2. Navigate to your directory source where the Administrator user is stored and update their password to the new value.
3. Configure the pwdtools.bat file to support your environment:
   • Navigate to: CA\Identity Manager\IAM Suite\Identity Manager\tools\PasswordTool
   • Right-click pwdtools.bat and select Edit.
   • Configure the %JAVA_EXE% attribute to point to your valid Java executable (e.g., SET JAVA_EXE=C:\Java\jdk1.8.0\jre\bin\java.exe).
4. Generate the encrypted password value:
   • Open a Command Prompt (CMD) and navigate to the location of pwdtools.bat.
   • Run the following command to generate the encrypted value: pwdTools -RC2 -p
   • Locate the "Encrypted value" in the output (e.g., {RC2}:vDZXXXXXXXXAXYzSw==).
5. Update the object store in your database:
   • Execute the following query against your IM database: SELECT * FROM [imdb].[dbo].[IM_DIR_CONNECTION]
   • Identify the row where the Connection_Name matches your provisioning repository.
   • Update the Password column for that row by replacing the existing {RC2} value with the new encrypted value you generated in Step 4.
6. Start the Identity Manager Application Server.