Why I get the message LDP2406E adding a PassPhrase?

Products

• Top Secret
• Top Secret - LDAP

Issue/Introduction

I'm trying to use the following LDAP command to add a PassPhrase to an acid :

dn: tssacid=testacid,tssadmingrp=acids,host=hostxx,o=ca,c=us
changetype: modify
replace: PassPhrase
PassPhrase: Y

 

And I get the following error:

ldap_modify: Other (e.g., implementation specific) error (80)
additional info: LDP2406E TSS error modifying tssacid(TSS0319E INVALID SPECIFICATION FOR KEYWORD PHRASE

 

Environment

CA Top Secret 15.0 Sp1CA LDAP Server 15.1

Cause

The 'PassPhrase: Y' has a lenght of 1 and the  PassPhrase attribute must have a lenght between 9 and 100 characters.

 

 

Resolution

Use a PassPhrase with more characters (Between 9 and 100) and the problem will be solved.

 

For example:

dn: tssacid=testacid,tssadmingrp=acids,host=hostxx,o=ca,c=us
changetype: modify
replace: PassPhrase
PassPhrase: xexxphrase

 

 

Additional Information

More information about the Phrase  Keyword in CA Top Secret guide:

https://docops.ca.com/ca-top-secret-for-z-os/16-0/en/using/issuing-commands-to-communicate-administrative-requirements/keywords/phrase-keywordassign-password-phrase

 

Relationship between CA Top Secret Field Names and z/OS UFN :

https://docops.ca.com/ca-system-z-security-communication-servers-dsi-ldap-pam/15-1/en/configuring/configuring-ca-ldap-server/configure-the-catss_utf-backend/user-friendly-name-override-file-ca-top-secret-to-ca-ldap-server/objectclass-tssacid-tssprofile-tssdept-tssdiv-tsszone-tssgroup