Product

Symantec CA Identity Portal, Symantec CA Siteminder

Issue details

Environment: Identity Portal is integrated with Siteminder for authentication. Siteminder uses Active Directory as the User Directory for authentication. IdM connector has been configured in the Identity Portal.

Some users were unable to login into Identity Portal as they see an Unauthorized Access error

Possible Cause(s)

1. The sAMAccountName(CN value in distinguished name of the Active Directory user account) varies with User ID (uid value in distinguished name of the user in  IdM User Store)
2. Spaces or special characters in uid value in IdM User Store

Solution/Fix

Fix the IdM uid to match the sAMAccountName in Active Directory.

Steps to resolve the issue:

•  Create a new txt file containing the distinguished name with corrected uid value

Example File Content:

If uid value is testuser123 and sAMAccountName is TESTUSER123, create a file containing below entry

uid=TESTUSER123,ou=people,ou=users,ou=im,ou=ca,o=com

• Run the below commands on the server where IdM User Store is located (typically an Identity Manager Server)
  • Switch user to dsa
  • Run the command: dxrename -r -v -D cn=dsaadmin,ou=im,ou=ca,o=com -w <password> -h <IdM Server IP address> -f <text file where modified distinguished name of the user is added>

Workaround

NA

Reference 

NA

Author

Ketaki Mujumdar