tacmd createuser command failure
Recently have seen an error in the tacmd createuser when using LDAP.
KUICCU001I Validating user credentials...
KUICCU012E The createUser command failed because the value specified for -dn|--distname option is incorrect.
The value for distinguished name is incorrect. Please specify a proper
distinguished name or leave the field blank by ignoring the -dn option.
Verify that the correct distinguished name is specified and run the
createUser command again.
when running a tacmd createuser.
This can mean that the -dn was not created correctly at configuration time, if it has never worked check the configuration settings.
The information is in the manual:
However in the case I saw this had previously worked.
It was found that the wasadmin password had changed with the result that the TEPS could no longer access the LDAP.
(check the systemout.log and RAS1 CQ log for error messages)
To reset the wasadmin password for the TEPS the following needs to be done:
This was done by:
(1) Start eWAS using the command:
(2) Run the following command to update the eWAS password (and in turn
re-generate the encrypted form of the password in the cq.config file):
updateTEPSEPass.sh <username> <password>
(3) Reconfigure the TEPS to propagate the changes.
All three steps are needed to allow the password to be updated on the TEPS.
Once that was done then the tacmd createuser worked successfully.