UNIX v2 Endpoint Connection Failures Due to Expired Administrator Password

Products

• CA Identity Manager
• CA Identity Governance
• CA Identity Portal

Issue/Introduction

When the administrator password for a UNIX v2 endpoint expires, it causes failures in Identity Manager functions such as Explore and Correlation. This article outlines the procedures to update the password within the Identity Manager Provisioning Server to restore connectivity.

Environment

• Product: Identity Manager
• Endpoint Type: UNIX v2
• Versions: 14.5

Resolution

To restore connectivity, you must update the password on the Provisioning Server.

Option 1: Using the etautil Command

The preferred method is to use the etautil command on the Provisioning Server.

1. Open a command prompt on the Provisioning Server.
2. Run the following command:
   bash

    

   etautil -u USER -p PWD -DYN update 'eTNamespaceName=UNIX v2' eTDYNDirectory eTDYNDirectoryName='My_Endpoint_Name' to eTDYNPassword='New_Endpoint_Password'

Note: If the etautil command does not resolve the issue (e.g., for certain endpoint types like HPUX), proceed to Option 2.

Option 2: Using an LDAP Browser

If the command-line method fails, you can manually update the password using an LDAP browser (e.g., SOFTERRA or JXplorer).

1. Connect to the Provisioning Repository router on the Provisioning Server machine (Port: 20391).
2. Use the following Bind DN:
   text

    

   eTDSAContainerName=DSAs,eTNamespaceName=CommonObjects,dc=etadb

3. Authenticate using the installation password.
4. Navigate to the following object:
   text

    

   etadb > im > endpoint type (Unix v2) > endpoint nameeTDYNDirectoryName=My_Endpoint_Name,eTNamespaceName=UNIX v2,dc=im,dc=etadb

5. Update the eTDYNPassword attribute with the new, clear-text password.
6. After manually updating via the LDAP browser, re-run the etautil command (Option 1) to ensure the password value is correctly saved as an encrypted value in the repository.