Hello community,
 
we have an installation of:   

• ISIM 7.0.2;
• DB2;
• Websphere;
• Security Directory Server;

and  the  components are interconnected.

The problem we have is that we can`t login with default credentials (ITIM Manager/secret) in Identity Administrator Console. We can see the user in SDS, but when we try to login it gives:
"CTGIMU534E Login authentication failure occurred. The specified user ID and password are not valid, have expired, or have been disabled."


------------------------------
Galin Gospodinov
------------------------------

There can be many reasons for this - the most obvious one is that the ldap connection from the VA is not working - so please check that in the VA console. The cause of this can be many - but if you are using SSL connection to the ldap certificate expiry may b a reason.
It may also be that the ITIM Manager account has been set inactive - you should be able to check that directly in the ldap - check the eruid=ITIM Manager and verify that eraccountstatus=0 - if not - set it.
If you have simply forgot the password (I doubt that as this sounds like a relatively new install) then you can follow these guidelines : https://www.ibm.com/support/pages/resetting-forgotten-itim-manager-password
If nothing of this helps you get a case out of the door to IBM Support and they will help you out :-)

HTH

------------------------------
Franz Wolfhagen
IAM Technical Architect for Europe - Certified Consulting IT Specialist
IBM Security Expert Labs
------------------------------

We try everything that you describe:

• Connection between LDAP and VA is working;
• The eraccountstatus is set to 0 by default;
• We try this with the forgotten password and login without the password;

What may be the problem could you share some troubleshooting tips ?


------------------------------
Galin Gospodinov
------------------------------

Original Message:
Sent: Tue May 31, 2022 02:47 AM
From: Franz Wolfhagen
Subject: ISIM - unable to login with default credentials in Identity Administration Console

There can be many reasons for this - the most obvious one is that the ldap connection from the VA is not working - so please check that in the VA console. The cause of this can be many - but if you are using SSL connection to the ldap certificate expiry may b a reason.
It may also be that the ITIM Manager account has been set inactive - you should be able to check that directly in the ldap - check the eruid=ITIM Manager and verify that eraccountstatus=0 - if not - set it.
If you have simply forgot the password (I doubt that as this sounds like a relatively new install) then you can follow these guidelines : https://www.ibm.com/support/pages/resetting-forgotten-itim-manager-password
If nothing of this helps you get a case out of the door to IBM Support and they will help you out :-)

HTH

------------------------------
Franz Wolfhagen
IAM Technical Architect for Europe - Certified Consulting IT Specialist
IBM Security Expert Labs
------------------------------