Skip to Content
avatar image
Former Member

Getting error while re-setting password of user in IDM 7.1

Hi All,

We are getting below error in job log while resetting password of users through IDM UI in IDM 7.1.

Please note that user has been created in backend through IDM only and we are putting 7 character long password only.

Also, password reset task has been maintained in Password Policy Tab.

The attribute values maintained in Pass for password reset are:

logonuid %MSKEYVALUE%

password $FUNCTION.sap_getPassword(%MX_ENCRYPTED_PASSWORD%)$$

changetype modify

Also, scripts maintained are: sap_encryptPassword and sap_getPassword

Could you please help!!!

Job log:

putNextEntry failed storing90000004

Exception from Modify operation:com.sap.idm.ic.ToPassException: User 90000004 does not exist Password is not long enough (minimum length: 7 characters) Internal error: FM SUSR_USER_READ, exception: 1 Inconsistency with address

Thanks

Aditi

Add comment
10|10000 characters needed characters exceeded

  • Get RSS Feed

1 Answer

  • Best Answer
    Jul 18, 2014 at 11:27 AM

    Hello Aditi,

    can you share a screenshot of the "Password policy"-tab?

    Have you tried the reset with a password longer than 7 characters to see, if that error disappears?

    Have you checked in the backend to which you are provisioning the password, that the user 90000004 does indeed exist there?

    Regards,
    Steffi.

    Add comment
    10|10000 characters needed characters exceeded

    • Former Member Former Member

      Read the "8.2.4.3 The Identity Management User Interface" section of security guide provided with the produc [apoligies, this is for 7.2, I don't have the correct document or section reference for 7.1]. It should be part of the JMX property/parameters. The keys.ini file contains the encryption key of encrypted values. They need to be the same across your landscape. If the UI has one key and the runtimes another then decoding will fail and the string could become '' which is also why I asked you to log the length of the string in the script after decoding.

      Br,

      Chris

      Message was edited by: Per Krabsetsve