Implementation Guide › Changing CA Access Control Service Account Settings › Service Account Passwords › Change the ADS_LDAP_bind_user Password

Change the ADS_LDAP_bind_user Password

The ADS_LDAP_bind_user account lets CA Access Control Enterprise Management perform LDAP queries against Active Directory. This account is not named ADS_LDAP_bind_user. The name of this account is the User DN that you specify in the Active Directory Settings wizard page when you install CA Access Control Enterprise Management.

You may need to regularly change the ADS_LDAP_bind_user password to comply with your organization's security and password policies. You must change the password on both Active Directory and the RDBMS.

Before you change the ADS_LDAP_bind_user password, note the following:

• The default password is the password that you specify in the Active Directory Settings wizard page when you install CA Access Control Enterprise Management.
• The password has the following limitations:
  • Must be 7-120 characters long
  • Must not contain high ASCII characters
  • Must not contain a colon ( : )
  • Must adhere to Active Directory password rules
• The password is stored in Active Directory and the RDBMS

To change the ADS_LDAP_bind_user password

1. Change the password in Active Directory, using Active Directory tools.

   Note: For more information about how to change the password, see the Active Directory documentation.

2. Change the user directory password in the CA Identity Manager Management Console.

   The ADS_LDAP_bind_user password is changed in all locations.