Oracle Internet Directory , OID Troubleshooting

OID in 10g Application Server (Standalone or with Apps) is quite important so today I am going to discuss how you should troubleshoot OID and related Issues .

How to Check if OID is UP ?
First check if OID/Oracle Internet Directory is Up or now. Following are few ways you can confirm if OID is up or not.

Method 1 :
opmnctl status (Execute it at Infra Oracle_HOME)
You should see output like

Processes in Instance: INFRA01.teachmeoracle.com
——————-+——————–+———+———
ias-component process-type pid status
——————-+——————–+———+———
OID OID 2355 Alive

Which means OID is up (Please note sometime if OID ports are not binded you will still see OID up but no OID ldap process. This is because opmn monitors/starts only oidmon – OID monitor process which in turn starts oid ldap process so opmn is not aware that oidmon was not able to start oid ldap server)

Method 2
Check if OID ports are listening or not
OID by default starts on both SSL (636) & Non SSL port (389) so check it with unix command netstat like
$ netstat -an grep 636 more
$ netstat -an grep 389 more

Troubleshoot OID
If you see OID process are not running then try to start OID , steps are
1. Make sure OID database & listener are up & running , If not start them . Sometime it happens that there might be more than 1 database in your system (one for E-Business, one for portal, one for disco and one for OID/Infra MR) and if you wish to find which database is used by OID–
open opmn.xml in ORACLE_HOME/opmn/conf

category id=”oidmon-parameters”
data id=”connect” value=”INFRA”/
data id=”host” value=”teachmeoracle.com”/
data id=”run-oidctl” value=”true”/
Which means OID database is on machine teachmeoracle.com & connect value is INFRA

2. After starting database you can try starting OID via opmn like
opmnctl startproc ias-component=OID or
opmnctl startall

Check for any error messages in $ORACLE_HOME/ldap/log
oidmon.log – OID monitor process log file
oidldapdXXXX.log – OID Ldapd server process log file
odisrvXXX.log – OID Integration & Provisioning Server log file

Check for error message in Metalink

If you see any error message in above log file & don’t understand feel free to leave comment on this blog.

Share This Post with Your Friends over Social Media!

About the Author Atul Kumar

Oracle ACE, Author, Speaker and Founder of K21 Technologies & K21 Academy : Oracle Gold Partner specialising in Design, Implement, and Trainings.

follow me on:

Leave a Comment:

33 comments
Anonymous says January 8, 2007

11.5.10.2

Reply
PraveeAndy says September 24, 2008

Unable to validate Identity management Realm for this Oracle Internet Directory. Please verify that Oracle Internet Directory, its database and listener are running, you have entered the host name and SSL port number correctly , and there is a valid Identity management Realm available.

Reply
Atul says September 24, 2008

What are you trying to achieve ?

check if OID is up by running

netstat -an | grep

netstat -an | grep

you should see LISTEN against oid port

Reply
rajesh.chaware says February 9, 2009

Can you please let me know the difference between OID-Status is Stopped and OID-Status is Down?

Reply
ragu says May 17, 2010

This is my status in xml file.No such entry like data id=”host” value=”teachmeoracle.com”/.

what does it mean?im newbie to this.

Reply
ragu says May 17, 2010

Hi,
//

//

This is my status in xml file.No such entry like data id=”host” value=”teachmeoracle.com”/.

what does it mean?im newbie to this.

Reply
sinivas says August 14, 2010

I am trying install OID in 2 servers with single metadata. 1st server is successful and allowing to do any operation from ldap client..
2nd OID instance installation success but configuration is failting at step “Infrastructure instance Configuration assistant” failed.. when i retry also have the same issue.. when check the server its installaed and running also.. but its running on readonly mode.. How can i change the status to write mode or how can i fix the issue while configuration..

Appreciated your help..

-Srinivas

Reply
sunil says September 17, 2010

Hi,

I am newbee here. I have recently installed Oracle Ineternet Directory without Weblogic Domain to replace the tnsnames.

Can somebody pls direct me how to configure OID to replace the tnsnames after the installation.

I am really not understanding where to start from.

Pls point me the the documentation links which i can make use of to replace tnsnames using OID without the weblogic domail (no GUI tool).

Thanks a lot in advance.

sunil.

Reply
Atul Kumar says September 17, 2010

@ Sunil,

Use Net Manager netmgr in your database to create entry for your database in OID

– Start up the Oracle Net Manager
– Expand the Directory node
– On the Directory Server Authentication dialog enter cn=orcladmin and password

For client PCS tns_admin directory

1. sqlnet.ora – NAMES.DIRECTORY_PATH= (LDAP, TNSNAMES) i.e. ldap as first entry
2. ldap.ora – location of your OID like

DEFAULT_ADMIN_CONTEXT = “”
DIRECTORY_SERVERS= (xxxxxxxxx:389:636)
DIRECTORY_SERVER_TYPE = OID

where 389 is non ssl and 636 is ssl port for OID. Change them as per your 11g OID port.

Use netca of your database : http://download.oracle.com/docs/cd/E11882_01/network.112/e10836/admintools.htm#BABHHFII

Reply
Tom says June 1, 2011

Weare installing IDM 11.1.1.2 on RHEL5 with DB 10.2.0.4. The install was going well and had no reported issues — to the screen or logfiles. We installed IDM and then started the configuration. The install appeared to go well, but when the config got to the part where is was starting oidmon, we got the “Waiting for OID Server to come up” message. This happened 10 times and then oidctl ran the delete command.

It lists error:
Error in postCreateConfig().oracle.as.config.ProvisionException: Error starting OID

Which in turn, of course, caused the error that oid1 could not start.

The database and listener are running. We have only the one instance of installed.

Any ideas?
Thank you for your assistance.

Reply
Tom says June 1, 2011

One thing I did notice is that the default schedulerDS was not created for wls_ods1. Could this be the issue? If so, what would cause that to not get created?

Reply
Atul Kumar says June 1, 2011

@ Tom,
No schedulerDS (DIP) and OID are two different issues where DIP issues is related to OID being not available (not other way).

For OID issue , check OIDMON log file at

%ORACLE_INTSANCE%\diagnostics\ logs\ OID\ oid1 \

and also ORACLE_INTSANCE%\diagnostics\ logs\ OPMN\ opmn

Check this link too

http://onlineappsdba.com/index.php/2011/05/17/error-starting-oid-11g-during-configuration-stage-of-oid-installation-on-windows-server-provisionexception-failed-to-start-the-component/

Reply
Tom says June 1, 2011

Thank you for your quick response.

I looked at the links you listed. The one discussed checking the sqlnet.log but since I am using linux that doesn’t exist, but it did mention checking the oidldap log — it had the following:

[2011-05-31T23:31:46-04:00] [OID] [NOTIFICATION:16] [] [OIDLDAPD] [host: irsam-id.dchc.smil.mil] [pid: 30453] [tid: 0] Main:: sgslun6NewSock: Unable to create communication endpoint, OS error=97

[2011-05-31T23:31:46-04:00] [OID] [NOTIFICATION:16] [] [OIDLDAPD] [host: irsam-id.dchc.smil.mil] [pid: 30453] [tid: 0] Main:: sgslun6lBind : Memory allocation failed

[2011-05-31T23:31:46-04:00] [OID] [NOTIFICATION:16] [] [OIDLDAPD] [host: irsam-id.dchc.smil.mil] [pid: 30453] [tid: 0] Main:: sgslunlListen: Bind failed (port=389), OS error=(13)

I also checked the OPMN log and since oid is not getting created it is not listed in the opmn log when we try to start it.

Reply
Atul Kumar says June 1, 2011

@ Tom,
oidldapd logs are useful , check following

1. What is entry in /etc/hosts ?
2. Can you resolve to irsam-id.dchc.smil.mil ?
3. Did you change OID port to start on 389 ? (default in OID 11g is 3060)
4. Is there any things already listening on 389 ? (netstat -an | grep 389 | grep -i listen )

Reply
Tom says June 1, 2011

1) Without including IP addresses:

127.0.0.1 localhost.localdomain localhost
::1 localhost6.localdomain6 localhost6
irsam-id.dchc.smil.mil irsam-id

2) Yes
3) Yes
4) No netstat -an | grep LISTEN | grep 389 returns nothing.

Reply
Tom says June 1, 2011

Also… after the oid entry is deleted in oidmon log, the following is written over 10,000 times:

Log file (/opt/oracle/product/fmw/idminst///diagnostics/logs/OID//oid1//oidmon-0000.log) creation falied.
OS error=2

This may not help, but just the shear volume of entries in the logfile made it seem important.

Reply
Atul Kumar says June 1, 2011

@ Tom,
Change /etc/hosts like

irsam-id.dchc.smil.mil irsam-id
127.0.0.1 localhost.localdomain localhost

replace with IP of this machine (also remove IPV6 entry from /etc/hosts

Reconfigure OID again

Reply
Tom says June 1, 2011

That did not work either. Changed /etc/hosts to:

ip-address irsam-id.dchc.smil.mil irsam-id

127.0.0.1 localhost.localdomain localhost

Reply
Tom says June 1, 2011

This error is something I would think has happened before when “waiting for OID Server to come up” does not complete successfully.

Reply
Atul Kumar says June 1, 2011

@ Tom,

Update entry in /etc/hosts

Did you clear failed installation ?

Remove instance & domain directory and ODS schema from database (or create database again) and then try again.

If issue still persists then check log files again from oid1 directory as mentioned above and paste here

Reply
Tom says June 1, 2011

Uninstalled the idm instance and then removed user_projects folder to remove IDMDomain. I did not remove the ODS schema… not real sure how and didn’t know that would be necessary.

I have recreated the host (VM) and restarted from the very beginning installing database, rcu, etc with the same results.

Reply
Atul Kumar says June 1, 2011

@Tom,

Q: I did not remove the ODS schema… not real sure how and didn’t know that would be necessary.

A: During OID configuration stage, OID creates user orcladmin and then reset password to value entered during installation. If installation fails after creating user and before updating password then it will fail again in next attempt (as account is now in lock state) – This is based on my personal experience.

– What error mesaaage do you see, is it still same (Update log again and entry in /etc/hosts)

– Check logs in oraInventory/logs too

Reply
Tom says June 2, 2011

I did a complete reinstall of IDM. Everything installed without error: dbs 10.2.0.1, upgrade to 10.2.0.4, rcu, wls, and IDM.

As part of the install process we opened the necessary ports (not really necessary since this is the 1st host to be created), set ip address, unchecked IPV6, added an 8G swapfile (only need 4G), and like you had mentioned above we setup the /etc/hosts file.

The only information for the “Waiting for OID to come up” issue has been the if using the Standard edition to move to the Enterprise. We have always used the Enterprise version.

We received no errors in the logfiles for these. When config.sh was run this is the 1st issue:

[2011-06-02T11:47:56.198-04:00] [as] [NOTIFICATION] [] [oracle.as.config] [tid: 13] [ecid: 0000J1H0YrIDScWFLzATOA1DtuuV000004,0] Start OID
[2011-06-02T11:47:56.199-04:00] [as] [NOTIFICATION] [] [oracle.as.config] [tid: 13] [ecid: 0000J1H0YrIDScWFLzATOA1DtuuV000004,0] Starting oidmon
[2011-06-02T11:47:56.199-04:00] [as] [NOTIFICATION] [] [oracle.as.config] [tid: 13] [ecid: 0000J1H0YrIDScWFLzATOA1DtuuV000004,0] Cmd: /opt/oracle/product/fmw/i dm//bin/oidmon connect=OIDDB start
[2011-06-02T11:48:26.485-04:00] [as] [NOTIFICATION] [] [oracle.as.config] [tid: 13] [ecid: 0000J1H0YrIDScWFLzATOA1DtuuV000004,0] Waiting for OID Server to come up
[2011-06-02T11:48:41.510-04:00] [as] [NOTIFICATION] [] [oracle.as.config] [tid: 13] [ecid: 0000J1H0YrIDScWFLzATOA1DtuuV000004,0] Waiting for OID Server to come up
[2011-06-02T11:48:56.518-04:00] [as] [NOTIFICATION] [] [oracle.as.config] [tid: 13] [ecid: 0000J1H0YrIDScWFLzATOA1DtuuV000004,0] Waiting for OID Server to come up
[2011-06-02T11:49:11.530-04:00] [as] [NOTIFICATION] [] [oracle.as.config] [tid: 13] [ecid: 0000J1H0YrIDScWFLzATOA1DtuuV000004,0] Waiting for OID Server to come up
[2011-06-02T11:49:26.539-04:00] [as] [NOTIFICATION] [] [oracle.as.config] [tid: 13] [ecid: 0000J1H0YrIDScWFLzATOA1DtuuV000004,0] Waiting for OID Server to come up
[2011-06-02T11:49:41.550-04:00] [as] [NOTIFICATION] [] [oracle.as.config] [tid: 13] [ecid: 0000J1H0YrIDScWFLzATOA1DtuuV000004,0] Waiting for OID Server to come up
[2011-06-02T11:49:56.560-04:00] [as] [NOTIFICATION] [] [oracle.as.config] [tid: 13] [ecid: 0000J1H0YrIDScWFLzATOA1DtuuV000004,0] Waiting for OID Server to come up
[2011-06-02T11:50:11.568-04:00] [as] [NOTIFICATION] [] [oracle.as.config] [tid: 13] [ecid: 0000J1H0YrIDScWFLzATOA1DtuuV000004,0] Waiting for OID Server to come up
[2011-06-02T11:50:26.580-04:00] [as] [NOTIFICATION] [] [oracle.as.config] [tid: 13] [ecid: 0000J1H0YrIDScWFLzATOA1DtuuV000004,0] Waiting for OID Server to come up
[2011-06-02T11:50:41.586-04:00] [as] [NOTIFICATION] [] [oracle.as.config] [tid: 13] [ecid: 0000J1H0YrIDScWFLzATOA1DtuuV000004,0] Waiting for OID Server to come up
[2011-06-02T11:50:56.868-04:00] [as] [NOTIFICATION] [] [oracle.as.config] [tid: 13] [ecid: 0000J1H0YrIDScWFLzATOA1DtuuV000004,0] Cmd: /opt/oracle/product/fmw/i dm//bin/oidctl connect=OIDDB server=OIDLDAPD inst=1 delete
[2011-06-02T11:50:56.924-04:00] [as] [NOTIFICATION] [] [oracle.as.config] [tid: 13] [ecid: 0000J1H0YrIDScWFLzATOA1DtuuV000004,0] Error Stream: NLS_LANG not set in environment
[2011-06-02T11:50:56.925-04:00] [as] [NOTIFICATION] [] [oracle.as.config] [tid: 13] [ecid: 0000J1H0YrIDScWFLzATOA1DtuuV000004,0] Error Stream: Setting NLS_LANG to AMERICAN_AMERICA.AL32UTF8
[2011-06-02T11:50:59.128-04:00] [as] [NOTIFICATION] [] [oracle.as.config] [tid: 13] [ecid: 0000J1H0YrIDScWFLzATOA1DtuuV000004,0] Input Stream: oidctl:Stopped OI DLDAPD (instance=1) successfully
[2011-06-02T11:50:59.129-04:00] [as] [NOTIFICATION] [] [oracle.as.config] [tid: 13] [ecid: 0000J1H0YrIDScWFLzATOA1DtuuV000004,0] Input Stream:
[2011-06-02T11:50:59.134-04:00] [as] [NOTIFICATION] [] [oracle.as.config] [tid: 13] [ecid: 0000J1H0YrIDScWFLzATOA1DtuuV000004,0] Moving Directory /opt/oracle/pr oduct/fmw/idminst/diagnostics/logs/OID/oid1
[2011-06-02T11:50:59.139-04:00] [as] [NOTIFICATION] [] [oracle.as.config] [tid: 13] [ecid: 0000J1H0YrIDScWFLzATOA1DtuuV000004,0] Num of OIDs: 1
[2011-06-02T11:50:59.139-04:00] [as] [NOTIFICATION] [] [oracle.as.config] [tid: 13] [ecid: 0000J1H0YrIDScWFLzATOA1DtuuV000004,0] Deleting file /opt/oracle/produ ct/fmw/idminst/config/tnsnames.ora
[2011-06-02T11:50:59.139-04:00] [as] [NOTIFICATION] [] [oracle.as.config] [tid: 13] [ecid: 0000J1H0YrIDScWFLzATOA1DtuuV000004,0] Deleting file /opt/oracle/produ ct/fmw/idminst/config/tnsnames_copy.ora
[2011-06-02T11:50:59.139-04:00] [as] [NOTIFICATION] [] [oracle.as.config] [tid: 13] [ecid: 0000J1H0YrIDScWFLzATOA1DtuuV000004,0] Deleting file /opt/oracle/produ ct/fmw/idminst/OID/admin
[2011-06-02T11:51:02.014-04:00] [as] [ERROR] [] [oracle.as.config] [tid: 13] [ec id: 0000J1H0YrIDScWFLzATOA1DtuuV000004,0] Error in postCreateConfig()oracle.as.c onfig.ProvisionException: Error Starting OID

Reply
Atul Kumar says June 3, 2011

@ Tom,
Could you please update /etc/hosts again.

Also did you find anything with error in /full_path/oraInventory/logs

cd /full_path/oraInventory/logs
grep -i error *

Do you see any errors in listener.log or alert log of your database ? (Is OID request coming till database – db listener log should tell this)

What do you mean by “if using the Standard edition to move to the Enterprise” (Is this weblogic or database) ?

Reply
Tom says June 3, 2011

In the oraInventory/logs the only ERRORs that I see are:

[2011-06-03T09:02:53.991-04:00] [as] [ERROR] [] [oracle.as.install.engine.modules.validation] [tid: 11] [ecid: 0000J1LaLqvDScWFLz3V8A1DuDhu000002,0] Exception[[
oracle.as.install.engine.modules.handler.exception.HandlerLaunchException: java.lang.NoClassDefFoundError: Could not initialize class sun.awt.X11GraphicsEnvironment

The listener.log does not have any errors.

The Standard vs Enterprise edition of the DB… this is the note:

OID Fails to Start in a New Install With “Waiting for OID server to come up” Or “Failed to start component” [ID 1096085.1]

Reply
Bhanu says May 2, 2012

Hi Friends, When I enter ‘opmnctl status’ command OID related information ( OID entry) is not found in the results displayed.

Can somebody plz tell me how to see the status, start/stop OID in this situation.

Reply
Odesa says June 11, 2012

Hola

What is needs to work with OIM?
I need, to connect or configure OID with Oracle identity manager for create user accounts?

Thanks you,

Reply
Atul Kumar says June 11, 2012

@ Odessa,
If you are on OIM 11gR1 then you can use LDAPSync http://onlineappsdba.com/index.php/2010/12/29/part-viii-optional-configure-ldap-sync-with-oim-11g-oim-11g-integration-with-ovdoid/

or OIM connector for OID .

If you are on previous version of OIM then use OID connector.

Reply
Odesa says June 20, 2012

Thanks you…

Reply
Raghu says August 1, 2012

Hi Atul,

We are seeing below errors in oidldapd01.log.
We have OID replicatiion in 3 servers and error is Same in other servers as well.

2012/07/25:04:05:09Oid Server Connected to DB store via oidp1.groton.pfizer.com connect string.
2012/07/25:04:05:09OiD LDAP server started.
2012/07/26:04:05:04DispatcherListener: Shutting down
2012/07/26:04:05:04SendPort: Error while writing to the other end of communication endpoint
2012/07/26:04:05:04SendPort: Error while writing to the other end of communication endpoint
2012/07/26:04:05:04SendPort: Error while writing to the other end of communication endpoint
2012/07/26:04:05:04ProcessDispatcher: shutting down
2012/07/26:04:05:09DispatcherController: OiD LDAP server exiting with status 0

Also we are getting below errors intermittently while connecting remote desktops
sgslufread: Hard error on read, OS error = 10054
sgslufread: Hard error on read, OS error = 10054

Reply
moulali says January 2, 2013

hi ,

I have tried installing oim but it fails saying ldap is not up and running eventhough it is up and running…

Thank you.

Reply
Atul Kumar says January 2, 2013

@ moulali,
What ldap server details you are giving ?
Is that port (on OID host) open across firewall from OIM server ?
What user you are provided during LDAP SYNC screen ?
Is that user created in OID ?

Reply
Bill Laperch says August 21, 2014

I just set up server chaining to AD following note Note 1495244.1
We have an oracle OAM/OIM single sign on environment that has been working for 18 months 11.1.1.5. After configuring Server Chaining, I can no longer update any OID entries nor can i authenticate. I can no longer log onto the oamconsole. I turned off server chaining by disabling
Server Chaining Authentication
Server Chaining Modification
Server Chaining Search
but it seeems like it is still active. Also I am getting an invalid credential in the oam server log when I try and log into the console but I did not change any passwords nor did any expire or get locked out. I don’t know where else to look. I opened a server request with oracle but so far nothing.

Reply
Add Your Reply

[i]
[i]
[i]
[i]
[index]
[index]
[523.251,1046.50]
[523.251,1046.50]
[523.251,1046.50]
[523.251,1046.50]
[index]
[index]
[523.251,1046.50]
[523.251,1046.50]
[523.251,1046.50]
[523.251,1046.50]