Join the Customer Advisory Board

WebSphere & Liberty CAB

Join this online group to communicate across IBM product users and experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  AD domain controller - adding new domain controller under failover - giving authentication error

    Posted 01/10/22 02:11 AM
    Hi All,

    we have an AD domain controller configured in Websphere standalone 8.5.5.11 under federated. now we got a new domain controller which I have  to add under failover. After adding when I am clicking ok I am getting the below error. this is throwing error for primary domain controller. I do not have bindDN password now.
    1) Now, how to add/change a new domain controller primary/failover?
    2) Any possibility to get the the password from any of the websphere files? 
    3) If AD configured user authentication is failing how app logins are authenticating now, should be an issue for all applications right? they are working.



    ------------------------------
    Ram
    ------------------------------

    ------------------------------
    Ramu T
    ------------------------------


  • 2.  RE: AD domain controller - adding new domain controller under failover - giving authentication error

    Posted 01/11/22 02:42 AM
    Hi Ramu,

    you might want to check for security.xml in the profiles and there are websites out there, which can decode some of the WAS encoded passwords like https://strelitzia.net/wasXORdecoder/wasXORdecoder.html or http://www.sysman.nl/wasdecoder/

    Cheers
    Roland

    ------------------------------
    Roland Schock
    Distinguished Engineer
    ARS Computer und Consulting GmbH
    Muenchen
    ------------------------------



  • 3.  RE: AD domain controller - adding new domain controller under failover - giving authentication error

    Posted 01/13/22 10:58 AM
    Hello Ramu,

    I think you could be experiencing the problem described at any of these two APARs:

    PI71926: BIND DN NOT SAVED CORRECTLY WHEN EDITING SECURITY CONFIGURATION
    https://www-01.ibm.com/support/docview.wss?uid=swg1PI71926

    PI72154: 'BIND PASSWORD' IS "PRE-POPULATED" INCORRECTLY IN VMM PANEL AND AUTHENTICATION ERROR COMES UP
    http://www-01.ibm.com/support/docview.wss?rs=180&uid=swg1PI72154

    Please, follow next workaround:

    When a user tries to apply changes on the VMM panel they get an authentication error because the "*******" is being passed in as the password, which is obviously incorrect. There is no clear indication which field in the ldap security section is causing the authentication fail.

    The workaround forces the user to clear the 'bind password' field, re-enter the correct password, and apply the changes. 

    ------------------------------
    MIGUEL ANGEL CAMACHO CABRERA
    ------------------------------



Related Content