Resolving LDAP Error 52 Connection Failure to User Store - Identity Manager

Products

• CA Identity Manager

Issue/Introduction

This article provides steps to resolve LDAP Error 52, which occurs when a Identity Manager environment fails to start because it cannot establish a connection to the user directory due to incorrect credentials or connectivity issues.

Environment

Identity Manager 14.5 & 15

Cause

• The user store password has changed on the directory side but has not been synchronized with the Identity Manager configuration.
• Network connectivity issues prevent the Identity Manager Connector Server from reaching the Active Directory/LDAP domain controller.
• DNS resolution issues prevent the environment from resolving the directory hostname.

Resolution

1. Verify Network Connectivity: Ensure the Connector Server can reach the domain controller on ports 389, 636, 3268, or 3269. Use telnet or nc to confirm communication.
2. Access Object Store: If the Management Console is inaccessible due to the startup failure, work with your Database Administrator (DBA) to access the [dbo].[IM_DIR_CONNECTION] table in the IDM Object Store database.
3. Encrypt the Password: Use the Password Tool located in \IAM Suite\Identity Manager\tools\PasswordTool\ to generate the encrypted value of your new user store password.
4. Update Database Credentials: Update the [dbo].[IM_DIR_CONNECTION] table row corresponding to your user store with the encrypted password value.
5. Restart: Restart the Identity Manager services.

Additional Information

To speak with a customer representative or a Support Engineer see Contact Support. Scroll to the bottom of the page and click on your respective region.