Unable to log into WAM UI due to error "Username and password do not match".

Products

• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign On SOA Security Manager (SiteMinder)
• CA Single Sign-On

Issue/Introduction

Description

Customer has installed a new WAM UI. User name and password have been validated and they are good, however customer is not able to log in due to error "Username and password do not match".

Application server log shows the following error:

2009-05-22 09:44:11,631 WARN [ims.idmutils.crypto] The system has been asked to decrypt data that has no encryption type tag. Returning unencrypted string.

Environment:

• SiteMinder Policy Server and WAM UI R12 SP1 CR02 on windows 2003.
  
  
• Jboss 4.0.5 as application server.
  
  
• SQL Server 2005 as Object Store and Administrative User Directory.

Solution

The following message is irrelevant:

2009-05-22 09:44:11,631 WARN [ims.idmutils.crypto] The system has been asked to decrypt data that has no encryption type tag. Returning unencrypted string.

The issue is because the directory.xml file is making reference to a non-existing column for the well know attribute "ENABLED_STATE".

To fix this issue, please export the directory.xml file using the idmmanage tool and change the physicalname for the well know attribute ENABLED_STATE to a existing column in your admin table and reimport it.

For more information please check the KB article (TEC481032) "How do I modify the Administrative User Directory settings for the R12 WAMUI after the installation has been completed?" available at support.ca.com.

Note: Similar issues have been reported when the password contains special characters, this issue has been fixed in WAM UI R12 SP1 CR03:

  Tracking # Problem description   ---------- -------------------   05/01/2009 12.0 SP1 CR03 contains fixes for the following tracking numbers:   85380      THE WAM GUI installer will now handle passwords correctly when they contain the $ symbol. 

Environment

Release:
Component: SMPLC