Netiq IDM Password Sych Is not working not able to sych AD password with remote loader

[chiraggajjar1]

Hi Team,

As i have installed Remote Loader in Domain Joined Machine , but not able to sych the AD passwords . I am facing below error while synchronize the password :-

Not Synchronized. Check password connection validation.Invalid Credentials8009030C: LdapErr: DSID-0C09050C, comment: AcceptSecurityContext error, data 52e, v2580

Please help me to resolve this issue 

[joakim_ganse]

This thread discuss exactly that error:

https://community.microfocus.com/t5/Identity-Manager-User/AD-Driver-Password-Not-Synchronized/td-p/2333971

In that case it was the password filters that was not properly installed.

[joakim_ganse]

Have a read of this thread as well, it also dicscuss how the connection is done and set up:

https://community.microfocus.com/t5/Identity-Manager-User/Could-not-set-password-via-platform-call-Err-5-access-deni/td-p/2333095

[chiraggajjar1]

Hi ,

We have

IDM version 4.7

Domain AD is on 2012 R2 Server

remote loader in 2016 R2 Server a and it is domain joined and Password Filter is installed on AD , kindly find screenshot below 

Thanks 

Dipesh Mishra

[dgersic]

"Installed" is a good start, but to work correctly it should say "Running" there.

Was the filter installed from the control panel? Has the DC been rebooted to get it running?

[chiraggajjar1]

Hi dgersic,

Thanks for update.

We restart again with services getting running status but still same problem. 

We are not able to synchronize the password & getting same error. 

Regards,

Chirag Gajjar

[joakim_ganse]

Are the firewall ports open? That was one issue in one thread.
How dows the connection parameters look? I think the domain name should be blanked out, that was an issue in tha past.
Does the service account have rights to set the password?

Best luck.

[chiraggajjar1]

Hi joekim.

Thanks for valuable time,

I  have installed the Remote loader on the other server in Same domain.

I have use administrator as user in remote loader for active directory.

We also try with new users and give full rights to that users but we are getting the same error.

Thanks for the support.

Regards,

Chirag Gajjar

[joakim_ganse]

Ok,
So is the remote loader installed on the DC?
If the RL is on a DC the Authenticaiton Context should be blank.

[chiraggajjar1]

Hi Joekim,

Remote loader is not install on the MAD(Microsoft Active Directory). 

Remote loader is installed on other server in the same domain.

Regards,

Chirag

[dgersic]

Maybe this will help.

https://www.netiq.com/documentation/identity-manager-47-drivers/ad/data/pass-sync-troubleshooting-tool.html

[chiraggajjar1]

Hi Guys,

We check this PassSync Troubleshooting tools. Kindly find attached logs for the same.

Kindly assists for the same. 

Thanks in advance