ETA_E_0019 Endpoint read failed: Unable to authenticate to Connector Server (also ETA_E_0020)

Products

• CA Identity Suite

Issue/Introduction

Attempt to connect or acquire LDAP (DYN) endpoint via dedicated JCS connector server leads to the error:

Endpoint '<endpoint name>' read failed: Unable to authenticate to Connector Server: ldaps://<host name>:<port>

despite the fact that the Connector server is connected correctly and working well for other endpoint types.

Logs might contain:

20250923:161740:TID=003684:Search    :E356:----:I: DN: eTDYNAccountName=#########,eTDYNContainerName=people,eTDYNDirectoryName=###
20250923:161740:TID=003684:Search    :E356:----:I:+###,eTNamespaceName=LDAP Endpoint,dc=im.
20250923:161740:TID=003684:Search    :E356:----:I: Associated CS(s): ldaps://########:#####
20250923:161740:TID=003684:LDAP      :----:----:*: ldaps://########:#####. Connecting (busy=0, waiters=0, connecting=1)
20250923:161740:TID=003684:LDAP      :----:----:*: ldaps://########:#####. Failed to connect: RC=LDAP_INVALID_CREDENTIALS (0x
20250923:161740:TID=003684:LDAP      :----:----:*:+31) Retry=0
20250923:161740:TID=003684:Search    :E356:----:F: FAILURE: External Search (eTDYNAccountName=#########)
20250923:161740:TID=003684:Search    :E356:----:F:     rc:  0x0031 (Invalid credentials)
20250923:161740:TID=003684:Search    :E356:----:F:     msg: :ETA_E_0020<RAC>, User Account '#########' on '######' read faile
20250923:161740:TID=003684:Search    :E356:----:F:+d: Unable to authenticate to Connector Server: ldaps://########:#####

Environment

IM 14.5

Cause

Error message is misleading and points to the authentication error with the JCS.

Resolution

Remove the CS config, corresponding to the JCS handling the problematic endpoint, from the provisioning server (via Connector Xpress), and then recreate it back:

Additional Information

Resolution is similar to: Provisioning task failed with Unable to authenticate to Connector Server error