The Okta LDAP agent fails to connect to the directory after the LDAP agent service account password changes. Resolving this connection failure requires reinstalling the Windows agent or running the Linux agent update script.
- Okta Identity Engine (OIE)
- Okta Classic Engine
- LDAP Agent
A change to the LDAP agent service account password in the directory causes authentication to fail because the Okta LDAP agent configuration retains the old credentials.
How is the Okta LDAP agent service account password updated?
The LDAP Agent for Windows does not support updating the service account password. Apply the new credentials by completing the uninstall and reinstall the LDAP Agent process for Windows.
Update the LDAP Agent for Linux configuration by executing the /opt/Okta/OktaLDAPAgent/scripts/update.sh script and applying the appropriate command-line arguments from the provided table.
| Command | Definition | Example |
|---|---|---|
| [-b] | ldap.dn.base | NewBaseDN |
| [-a] | ldap.admin.dn | NewLDAPAdminDN |
| [-w] | ldap.admin.password | NewLDAPPassword |
| [-h] | ldap.host | NewLDAPHost |
| [-p] | ldap.port | NewLDAPPort |
