Password Synchronization Agent Not Responding or Receiving Requests — Identity Manager

Products

• CA Identity Manager
• CA Identity Governance
• CA Identity Portal

Issue/Introduction

This article addresses issues where the Password Synchronization Agent (PSync) fails to propagate password updates between Active Directory and Identity Manager, characterized by unresponsive agent logs and missing requests in the Provisioning etatrans logs.

Environment

Identity Manager 14.5

Cause

Password change requests are routed to the user's logon domain controller as defined by the %LOGONSERVER% environment variable. This issue occurs when the logon server is a domain controller that does not have the Password Synchronization Agent component installed.

Resolution

1. Verify Logon Server Configuration

1. Log in to the affected user's workstation.
2. Open the Command Prompt.
3. Run the following command to identify the logon server: echo %LOGONSERVER%.
4. Verify if the returned domain controller has the Password Synchronization Agent installed.
5. If the agent is missing, install the Password Synchronization Agent on that domain controller.

2. Confirm Agent Installation Requirements

• Ensure the Password Synchronization Agent is installed on all production domain controllers that may serve as logon servers.

 

Additional Information

See Also: Password Sync Agent does not propagate the password to accounts

To speak with a customer representative or a Support Engineer see Contact Support. Scroll to the bottom of the page and click on your respective region.