DAE.LOGON_DENIED error while logging into OIM Client

Today I have faced an issue while logging into to OIM Client and thought worth sharing it.

The OIM Server is installed in Oracle Application Server a remotely. Now, I have installed Client specifying the Application Server as OAS and it took RMI port automatically.

While logging into OIM Client, it threw me the below exception.

Error.keyword: DAE.LOGON_DENIED
Description: Invalid Login
Remedy: Contact your system administrator
Action: E
Severity: H

com.thortech.xl.security.tcLoginException: javax.naming.CommunicationException: Connection refused: connect [Root exception is java.net.ConnectException: Connection refused: connect]

Now, I have checked whether the OIM Server hostname and RMI port numbers given are correct or not. This gave me a clue.

I have checked the opmn.xml (locate it in OAS_Install/opmn/conf) for RMI port as shown below.

<ias-component id=”xlgroup” status=”enabled”>
<process-type id=”xluser1″ module-id=”OC4J” status=”enabled”>
<module-data>
<category id=”start-parameters”>
<data id=”java-options” value=”-server -Djava.net.preferIPv4Stack=true -DXL.HomeDir=/lvidmu01apps/oim_server/xellerate -Dlog4j.configuration=file:/lvidmu01apps/oim_server/xellerate/config/log.properties -server -XX:PermSize=128M -XX:MaxPermSize=256M -ms1280M -mx1280M -XX:AppendRatio=3 -Djava.security.policy=$ORACLE_HOME/j2ee/xluser1/config/java2.policy -Djava.awt.headless=true -Dhttp.webdir.enable=false”/>
</category>
<category id=”stop-parameters”>
<data id=”java-options” value=”-Djava.net.preferIPv4Stack=true -Djava.security.policy=$ORACLE_HOME/j2ee/xluser1/config/java2.policy -Djava.awt.headless=true -Dhttp.webdir.enable=false”/>
</category>
</module-data>
<start timeout=”600″ retry=”10″/>
<stop timeout=”600″/>
<restart timeout=”720″ retry=”10″/>
<port id=”default-web-site” range=”12501-12600″ protocol=”ajp”/>
<port id=”rmi” range=”12499″/>
<port id=”rmis” range=”12701-12800″/>
<port id=”jms” range=”12601-12700″/>
<process-set id=”xlgroup” numprocs=”1″/>
</process-type>
</ias-component>

If you observe RMI port highlighted is 12499 and it should be the same in xlConfig.xml (locate at OIM_Client_Install/Config) file of OIM Client.

Open the file xlConfig.xml and check for the tag values <ApplicationURL> and <java.naming.provider.url>  as shown below.

<ApplicationURL>http://OIM_Server_Hostname:OAS_Port/xlWebApp/loginWorkflowRenderer.do</ApplicationURL>

<java.naming.provider.url>ormi://OIM_Server_Hostname:RMI_Port/Xellerate</java.naming.provider.url>

I could see that the rmi port no. is different from port specified in opmn.xml. I changed it and tried logging into OIM Client and I succeeded this time.

About the Author Mahendra

I am engulfed in Oracle Identity & Access Management domain. I have expertise on providing the optimized solutions for user provisioning, web access management, Single Sign-On and federation capabilities etc., I am also well versed with complex integrations within Identity Management and other product domains. I have expertise on building demos and implementation experience on products Oracle Access Manager, Oracle Adaptive Access Manager, Oracle Entitlement Server, Oracle Virtual Directory, Oracle Internet Directory etc., Look @ my blog: http://talkidentity.blogspot.com

Leave a Comment:

1 comments
oraidam says September 10, 2014

Hi,

I am trying to login to OIM design console which is installed on a windows system.

I get the error DAE.LOGON_DENIED when i try to login using xelsysadm username and password.However I am able to login to OIM URL(API) using the same xelsysadm username and password.

Also I am able to login to design console of other test environments from the same system(when used a different xlconfig file) and I am able to successfully login there. Im facing this issue only in one environment.Please help.

Reply
Add Your Reply