DAE.LOGON_DENIED error while logging into OIM Client
Today I have faced an issue while logging into to OIM Client and thought worth sharing it.
The OIM Server is installed in Oracle Application Server a remotely. Now, I have installed Client specifying the Application Server as OAS and it took RMI port automatically.
While logging into OIM Client, it threw me the below exception.
Error.keyword: DAE.LOGON_DENIED
Description: Invalid Login
Remedy: Contact your system administrator
Action: E
Severity: H
com.thortech.xl.security.tcLoginException: javax.naming.CommunicationException: Connection refused: connect [Root exception is java.net.ConnectException: Connection refused: connect]
Now, I have checked whether the OIM Server hostname and RMI port numbers given are correct or not. This gave me a clue.
I have checked the opmn.xml (locate it in OAS_Install/opmn/conf) for RMI port as shown below.
<ias-component id=”xlgroup” status=”enabled”>
<process-type id=”xluser1″ module-id=”OC4J” status=”enabled”>
<module-data>
<category id=”start-parameters”>
<data id=”java-options” value=”-server -Djava.net.preferIPv4Stack=true -DXL.HomeDir=/lvidmu01apps/oim_server/xellerate -Dlog4j.configuration=file:/lvidmu01apps/oim_server/xellerate/config/log.properties -server -XX:PermSize=128M -XX:MaxPermSize=256M -ms1280M -mx1280M -XX:AppendRatio=3 -Djava.security.policy=$ORACLE_HOME/j2ee/xluser1/config/java2.policy -Djava.awt.headless=true -Dhttp.webdir.enable=false”/>
</category>
<category id=”stop-parameters”>
<data id=”java-options” value=”-Djava.net.preferIPv4Stack=true -Djava.security.policy=$ORACLE_HOME/j2ee/xluser1/config/java2.policy -Djava.awt.headless=true -Dhttp.webdir.enable=false”/>
</category>
</module-data>
<start timeout=”600″ retry=”10″/>
<stop timeout=”600″/>
<restart timeout=”720″ retry=”10″/>
<port id=”default-web-site” range=”12501-12600″ protocol=”ajp”/>
<port id=”rmi” range=”12499″/>
<port id=”rmis” range=”12701-12800″/>
<port id=”jms” range=”12601-12700″/>
<process-set id=”xlgroup” numprocs=”1″/>
</process-type>
</ias-component>
If you observe RMI port highlighted is 12499 and it should be the same in xlConfig.xml (locate at OIM_Client_Install/Config) file of OIM Client.
Open the file xlConfig.xml and check for the tag values <ApplicationURL> and <java.naming.provider.url> as shown below.
<ApplicationURL>http://OIM_Server_Hostname:OAS_Port/xlWebApp/loginWorkflowRenderer.do</ApplicationURL>
<java.naming.provider.url>ormi://OIM_Server_Hostname:RMI_Port/Xellerate</java.naming.provider.url>
I could see that the rmi port no. is different from port specified in opmn.xml. I changed it and tried logging into OIM Client and I succeeded this time.
About the Author Mahendra
I am engulfed in Oracle Identity & Access Management domain. I have expertise on providing the optimized solutions for user provisioning, web access management, Single Sign-On and federation capabilities etc., I am also well versed with complex integrations within Identity Management and other product domains. I have expertise on building demos and implementation experience on products Oracle Access Manager, Oracle Adaptive Access Manager, Oracle Entitlement Server, Oracle Virtual Directory, Oracle Internet Directory etc., Look @ my blog: http://talkidentity.blogspot.com