Identity Manager Application Server Fails to Start Due to ORA-28001 Oracle Password Expiration

Products

• CA Identity Manager
• CA Identity Suite

Issue/Introduction

When starting the Identity Manager application server, the system fails to complete the boot process and shuts down unexpectedly. This issue is typically characterized by an ORA-28001: the password has expired error in the server logs, indicating that the database user account used for the Task Persistence Database (TPDB) has exceeded its allowed password lifetime.

Environment

Identity Manager 14.x

Cause

The Oracle database service account associated with the Task Persistence Database (TPDB) has reached its expiration date. Because the Identity Manager application requires an active connection to this database to initialize, the expired password prevents the application server from completing its startup sequence.

Resolution

To resolve this issue and prevent recurrence, coordinate with your Oracle Database Administrator (DBA) to perform the following steps:

1. Reset the service account password to its original value to restore immediate connectivity.
2. Update the user profile configuration to prevent future expiration by running the following SQL command: ALTER PROFILE DEFAULT LIMIT PASSWORD_LIFE_TIME UNLIMITED; (Note: Ensure this aligns with your organization's security policies.)
3. Restart the Identity Manager application server services.

Additional Information

To speak with a customer representative or a Support Engineer see Contact Support. Scroll to the bottom of the page and click on your respective region.