Following an upgrade from v12 to v24, LDAP users are unable to login.

Products

• CA Automic Workload Automation - Automation Engine

Issue/Introduction

After upgrading, LDAP users are getting the error message "Access Denied".

UC/UC is able to login but LDAP users are getting the following error

U00045014 Exception 'javax.naming.AuthenticationException: "[LDAP: error code 49 - 80090308: LdapErr: DSID-0C09052B, comment: AcceptSecurityContext error, data 52e, v4f7c ]"' at 'com.sun.jndi.ldap.LdapCtx.mapErrorCode():3260'

- This LDAP, not LDAP Sync.
- Pressing the sync button on the user works.

20250731/145732.104 - 56     U00045035 Detected Microsoft LDAP Server.
20250731/145732.127 - 56     U00045038 LDAP log on was successful, DN='CN=automic,DC=com'.
20250731/145732.128 - 56     U00045039 LDAP check with user 'automic\automic' was successful.

The following has already been tried.

- Importing the root certificate of the LDAP server into the caecerts of Automation Engine's Java.
- The LDAP login object credentials have been checked. -> Check the UC_LDAP_* object 
- In v24, TLS is set to Yes by default. Verify with your LDAP admin whether it needs to be set to Y or N.

When the TLS parameter is set to Y in the UC_LDAP_*, we get the following error.

20250731/143012.427 - 56     U00045014 Exception 'javax.naming.CommunicationException: "<ldap-server>:389"' at 'com.sun.jndi.ldap.Connection.<init>():251'.
20250731/143012.428 - 56     U00045015 The previous error was caused by 'java.net.SocketException: "Connection reset"' at 'sun.nio.ch.NioSocketImpl.implRead():328'.
20250731/143012.428 - 56     U00045040 LDAP check with logon user 'automic\automic' failed.
20250731/143138.991 - 56     U00045033 Log on to LDAP server 'ldap-ofl.centene.com:389' with user 'automic\automic'.
20250731/143139.037 - 56     U00045014 Exception 'javax.naming.CommunicationException: "<ldap-server>"' at 'com.sun.jndi.ldap.Connection.<init>():251'.
20250731/143139.038 - 56     U00045015 The previous error was caused by 'java.net.SocketException: "Connection reset"' at 'sun.nio.ch.NioSocketImpl.implRead():328'.

When it is set to N.

20250731/145820.050 - 56     U00045033 Log on to LDAP server <ldap-server>:389' with user 'automic\automic'.
20250731/145820.096 - 56     U00045014 Exception 'javax.naming.AuthenticationException: "[LDAP: error code 49 - 80090308: LdapErr: DSID-0C09052B, comment: AcceptSecurityContext error, data 52e, v4f7c ]"' at 'com.sun.jndi.ldap.LdapCtx.mapErrorCode():3260'.
20250731/145820.097 - 56     U00045040 LDAP check with logon user 'automic\automic' failed.

Environment

v24

Cause

Misconfiguration of the  UC_LDAP_ 

Resolution

The LDAP Admin should verify that the values in UC_LDAP_ match other environments with working LDAP environments.

This could be a misconfiguration of DOMAIN_ALIAS or USE_DISTINGUISHED_NAME.