"LDAP error code 49" error message in Windchill PDMLink

• LDAP error code 49 can occur in different situations:
• LDAP error code 49 with Active Directory integration after path to authentication user has been changed below error message

LDAP error code 49 (wrong username/password)

• When adding a user to a role, the following exception is issued:

javax.naming.AuthenticationException: [LDAP: error code 49 - Invalid Credentials]

• After updating the password incorrectly, Windchill fails to start with

javax.naming.AuthenticationException: [LDAP: error code 49 - Invalid Credentials]

javax.naming.AuthenticationException: [LDAP: error code 49 - 80090308: LdapErr: DSID-0C0903C8, comment: AcceptSecurityContext error, data 52e, v2580 ]

• Unable to log in to the Windchill using AD users
• UpgradeManager fails at Update Container Templates. MethodServer fails to start with the error:

Unable to start all managers. (wt.services.servicesResource/21) wt.services.ManagerException: Unable to start manager: "wt.audit.AuditService" with implementation class: "wt.audit.StandardAuditService"
Nested exception is: wt.services.ManagerException: Could not initialize Auditing service.
Nested exception is: wt.org.OrganizationServicesIEException: javax.naming.AuthenticationException: [LDAP: error code 49 - Invalid Credentials]
        at wt.org.LdapServices.queryPrincipalsFromLdap(LdapServices.java:1129)
        at wt.org.LdapServices.queryPrincipals(LdapServices.java:2472)
        at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
        at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)        

• Windchill Method Server fails to start with the error:

javax.naming.AuthenticationException: [LDAP: error code 49 - Invalid Credentials]
at com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.java:3154)
at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:3100)
at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2886)
at com.sun.jndi.ldap.LdapCtx.connect(LdapCtx.java:2800)
at com.sun.jndi.ldap.LdapCtx.<init>(LdapCtx.java:319)
at com.sun.jndi.ldap.LdapCtxFactory.getUsingURL(LdapCtxFactory.java:192)
at com.sun.jndi.ldap.LdapCtxFactory.getUsingURLs(LdapCtxFactory.java:210)
at com.sun.jndi.ldap.LdapCtxFactory.getLdapCtxInstance(LdapCtxFactory.java:153)
at com.sun.jndi.ldap.LdapCtxFactory.getInitialContext(LdapCtxFactory.java:83)After configuring Windchill to access external Active Directory unable to open/create/update users inParticipant Administration

• After changing the bind of the user in the Active Directory Method Server not starting
• UpgradeManager failed at load BAC groups and BAC policy access control rules
• LDAP Error code 49 shows in Method server logs:    

   [LDAP: error code 49 - 80090308: LdapErr: DSID-0C090569, comment: AcceptSecurityContext error, data 52e, v4563

  Method Server failed to start with errorLDAP error code 49 Invalid Credentials after Rehost

Nested exception is: wt.util.WTException: com.infoengine.exception.adapter.IEAdapterException; nested exception is:
javax.naming.AuthenticationException: [LDAP: error code 49 - Invalid Credentials]
Nested exception is: com.infoengine.exception.adapter.IEAdapterException; nested exception is:
javax.naming.AuthenticationException: [LDAP: error code 49 - Invalid Credentials]
    at com.infoengine.jndi.JNDIAdapterImpl.processRequest(JNDIAdapterImpl.java:254)
    at com.infoengine.procunit.adapter.Adapter.send(Adapter.java:199)
    at com.infoengine.SAK.ObjectWebject.invoke(ObjectWebject.java:262)
    at com.infoengine.compiledTasks.file.opt.ptc.Windchill_10$2e2.Windchill.tasks.wt.federation.queryprincipals$2exml.invoke(queryprincipals$2exml.java:100)
 
                                  OR
 
ERROR [main] wt.method.server.startup.services  - Failure to start manager wt.workflow.engine.StandardWfEngineService
wt.services.ManagerException: Couldn't initialize workflow engine.
Nested exception is: wt.org.OrganizationServicesIEException: javax.naming.AuthenticationException: [LDAP: error code 49 - Invalid Credentials]
at wt.org.LdapServices.queryParentsFromLdap(LdapServices.java:519)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)