IV44115: Active Directory user gets locked out prematurely when using incorrect passwords.

APAR status

• Closed as program error.

Error description

• Description:
  Active Directory policy is configured to allow users to submit 5
  invalid passwords before their account is temporarily locked
  out.
  When a user logs on to ESSO with an incorrect password, the
  number of logon attempts is reduced to half.
  
  Steps to Duplicate:
  With the AD lockout policy set to 5 unsuccessful attempts, if a
  ESSO user enters 3 bad passwords this will lock out their
  account.
  

Local fix

• 41691
  

Problem summary

• Active Directory user gets locked out prematurely when using
  incorrect passwords.
  

Problem conclusion

• The reported problem has been addressed in an iFix available for
  download from Fix Central.
  
  iFix name: 8.2.0-ISS-SAMESSO-IMS-IF0006
  Fix Central URL:
  http://www-933.ibm.com/support/fixcentral/swg/selectFixes?parent
  =ibm~Tivoli&product=ibm/Tivoli/Tivoli+Access+Manager+for+Enterpr
  ise+Single+Sign-On&release=8.2.0&platform=All&function=all
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  TAM ESSO IM SVR

• Fixed component ID

  5724V6700

Applicable component levels

• R820 PSY

     UP