Issue: If Identity Applications is configured to use Kerberos authentication and the Domain Controller is unavailable for some reason, login to the Identity Applications will fail. This issue happens only when a client attempting to access Identity Applications requests a ticket from the Kerberos Key Distribution Center (KDC) while the Domain Controller is still unreachable. However, if the Domain Controller is restored to service before a client makes a request to the KDC, the issue is not seen. (Bug 492123)
Workaround: After the Domain Controller is restored, restart Tomcat on the Identity Applications server to allow clients to access Identity Applications. Execute the following command in the command prompt to restart Tomcat:
systemctl restart netiq-tomcat.service