IDM Groupwise Driver - Logon failure: unknown user name or bad password

  • 7007278
  • 18-May-2012
  • 18-May-2012

Environment


NetIQ Identity Manager 3.6.1

Situation

Remote System Configuration, Option 2 per Groupwise Driver Documentation.
IDM 3.6.1 running on Linux Server,
Groupwise 8 running on NetWare
Windows 2003 server running Novell Client 4.9.1, and Remote Loader.

When starting the driver, unknown user name or bad password error is received in the remote loader trace.

DirXML: [05/04/12 11:25:59.28]: TRACE:  GroupWise:      javax.naming.AuthenticationException: Authentication to \\192.1.1.1.\Volume\Path failed. Logon failure: unknown user name or bad password.
    at com.novell.gw.directory.GwInitialContextFactory.getInitialContext(Unknown Source)
    at javax.naming.spi.NamingManager.getInitialContext(NamingManager.java:667)
    at javax.naming.InitialContext.getDefaultInitCtx(InitialContext.java:288)
    at javax.naming.InitialContext.init(InitialContext.java:223)
    at javax.naming.InitialContext.<init>(InitialContext.java:197)
    at javax.naming.directory.InitialDirContext.<init>(InitialDirContext.java:82)
    at com.novell.gw.dirxml.driver.common.GWengine.initGroupWise(Unknown Source)
    at com.novell.gw.dirxml.driver.common.GWengine.init(Unknown Source)
    at com.novell.gw.dirxml.driver.common.GWengine.execute(Unknown Source)
    at com.novell.gw.dirxml.driver.gw.GWdriverShim.init(Unknown Source)
    at com.novell.nds.dirxml.remote.loader.Driver.startDriver(Driver.java:361)
    at com.novell.nds.dirxml.remote.loader.Driver.driverStart(Driver.java:90)
    at com.novell.nds.dirxml.remote.loader.RemoteLoader.run(RemoteLoader.java:950)
    at java.lang.Thread.run(Thread.java:619)

Resolution

Verify the following configuration is in place.
1.  You have a local user (on the local windows server (NOT a domain user) and eDirectory user with the same username and password.

2.  On the Windows server for the local user account on Windows.

    *      Add the user account to the Administrators group.
    *      Deselect any options that force the account password to be changed or that cause it to expire.
    *      In Administrative Tools, access Local Security Policy > Local Policies > User Rights Assignment and add the account to the Log On as a Service policy.

3.  In eDirectory, on the NetWare server where the GroupWise domain database resides:

    *      Use the same username and password you used for the account on the driver’s server.
    *      For a NetWare server, use iManager or ConsoleOne® to give the user account Read, Write, Create, Erase, Modify, and File Scan access to the GroupWise domain directory and subdirectories.

4.  After adding the user to the Log On as a Service policy, reboot the windows server running the remote loader.

Cause

In this case, the user was a AD domain user and not a local user on the window server.