JR59074: LDAP: error code 53 - The provided new password was found in the password history for the user

APAR status

• Closed as program error.

Error description

• You might encounter this error after you add <SyncPassword
  syncPasswordInSyncBeanEnabled='true'/> to wc-server.xml, and you
   try to create a user through the Organization Administration
  Console. You might see exceptions similar to the following
  message:
  
  1/17/18 13:36:25:202 CST] 0000002f LdapConnectio E
  com.ibm.ws.wim.adapter.ldap.LdapConnection modifyAttributes(Name
   name, ModificationItem[] mods)
  javax.naming.OperationNotSupportedException: [LDAP: error code
  53 - The provided new password was found in the password history
   for the user]; Remaining name: 'UID=SALESMGR1,O=EXTENDED SITES
  SELLER ORGANIZATION MYCOMPANY PUNCHOUT USERS,O=EXTENDED SITES
  SELLER ORGANIZATION,O=ROOT ORGANIZATION,DC=CUSTOMERS,DC=COM';
  Resolved object: 'com.sun.jndi.ldap.LdapCtx@3ec83ec8'
  [1/17/18 13:36:25:204 CST] 0000002f CommerceSrvr  E
  com.ibm.commerce.member.syncbeans.VMMProxy
  updateMember(TypedProperty atpProperties, String astrDN, short
  shMemberType) CMN0409E: The following error occurred during
  processing: "java.security.PrivilegedActionException:
  com.ibm.websphere.wim.exception.WIMSystemException: CWWIM4520E
  The 'javax.naming.OperationNotSupportedException: [LDAP: error
  code 53 - The provided new password was found in the password
  history for the user]; Remaining name: 'UID=SALESMGR1,O=EXTENDED
   SITES SELLER ORGANIZATION MYCOMPANY PUNCHOUT USERS,O=EXTENDED
  SITES SELLER ORGANIZATION,O=ROOT
  ORGANIZATION,DC=CUSTOMERS,DC=COM'; Resolved object:
  'com.sun.jndi.ldap.LdapCtx@3ec83ec8'' naming exception occurred
  during processing.
  

Local fix

Problem summary

• USERS AFFECTED:
  WebSphere Commerce Version 7 Fix Pack 9.
  
  PROBLEM ABSTRACT:
  LDAP: error code 53 - The provided new password was found in the
   password history for the user
  
  BUSINESS IMPACT:
  Cannot create new administrator user through the Organization
  Administration Console.
  
  RECOMMENDATION:
  

Problem conclusion

• Updated logic to skip calling updateCredential when syncPassword
   is turned on to avoid password modification twice during one
  registration process.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WC BUS EDITION

• Fixed component ID

  5724I3800

Applicable component levels

• R700 PSY

     UP