Active Directory password is updated by the Provisioning Server to unknown value

Products

• CA Identity Manager

Issue/Introduction

When Global User password is updated from the Provisioning Manager and propagated to the Active Directory endpoint, then the old password is replaced with unknown password at the endpoint (the user cannot login neither with the old password nor with the new one).

Environment

IM 14.5

Cause

The Password Agent at the Active Directory endpoint is configured to report to a Provisioning Server which is outside the cluster (e.g. it is in another IM installation).

Resolution

Configure the Password Agent to report to the correct Provisioning Server (which is inside the current cluster).