LDAP refresh crash, Error: LDAP Error Code 49 Seen in PAM Logs

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

When trying to run a manual LDAP refresh the process crash and terminates the PAM session

Cause

In logs :

"connectionFailure":true,"errors":["PAM-LDAP-0037: Exception occurred while processing a search on entity DC=xxx,DC=zzz: [LDAP: error code 49 - 80090308: LdapErr: DSID-0C090451, comment: AcceptSecurityContext error, data 532, v3839 ]","PAM-LDAP-0035: Binding to domain DC=xxx,DC=zzz failed. Invalid LDAP admin password

Resolution

Check the ldap bind user in configuration - third party - ldap

Change this user password in Active Directory

Set the same password in Credentials Management - account for this ldap bind user in PAM

Test the refresh again