Part VI : Configure Identity Manager (OIM) : #OracleIdM 11g : Step by Step Installation of OAM, OIM, OAAM, OAPM, OIN

Hi Atul,

This IDAM installation series is really helpful to a newbie like me. Your summary of the installation process is pretty simple and easy to follow. I appreciate your effort and thank you for bringing this together.
I am still working on my installation, hope to finish it soon.
Thank you
Siva Alagu

Hi Atul Kumar,

After performing the procedures shown here, I created a user but the error messages below appeared:

“An error occurred while executing the transaction creating the user. Unable to get LDAP connection, and the root cause is – Failed to get connection due to the pool with initialization error: Failed to start intialize and UCP Connection pool”

On the server that Identity Manager is installed there is a (Open-LDAP/Berkley).
Thus, is there some possibility of creating a connection in an easy way for this LDAP?

Thank´s

@ Chrisz,
By default identity store for OIM is embedded ldap server (part of weblogic). More here http://download.oracle.com/docs/cd/E13222_01/wls/docs81/secmanage/ldap.html

It is possible to synchronize OIM users with LDAP user which is documented here http://download.oracle.com/docs/cd/E14571_01/doc.1111/e14308/config_ldapauth.htm#CBHBEDED

for your issue : Failed to start intialize and UCP Connection pool

Did you configure any LDAP synchronization ?

Hello Atul,

I have OIM working now and when i try to start OAM config. it fails.

were you able to test that?

Thanks

@ Raj,
What is error message ?

You mentioned that OIM is working then is there any reason for reconfigure this ?

Hi Atul,

I am currently trying to use the OIM Config Wizard to setup OIM configurations. I am getting an error message when attempting to setup the connection to the Oracle Database.

ERROR:
INST:6102 Unable to connect to the database with the given credentials. Check the values. Make sure the Database is up and running and connect string, user name, and password are correct.

My Database SID = orcl
My Service Name = orcl.dev.com

I have attempted using connect String = localhost:1521:orcl or connect String = localhost:1521:orcl.dev.com in the config wizard receiving the same error.

I can successfully connect to the database using SQL Plus and a Java Test Client that connects specifying the driver, url, user, and password.

Here is the test client…

import java.sql.Connection;
import java.sql.DatabaseMetaData;
import java.sql.DriverManager;
import java.sql.ResultSet;

public class JDBCTest {

public static void main(String[] args) throws Exception {
String url = “jdbc:oracle:thin:@localhost:1521:orcl”;
String driver = “oracle.jdbc.OracleDriver”;
String user = “DEV_OIM”;
String password = “Password1”;

try {
Class.forName(driver);
Connection conn = DriverManager.getConnection(url, user, password);

// Get the MetaData
DatabaseMetaData metaData = conn.getMetaData();

// Get driver information
System.out.println(“”);
System.out.println(“#########################################”);
System.out.println(“# ***DRIVER INFORMATION***”);
System.out.println(“#”);
System.out.println(“# Driver Name = ” + metaData.getDriverName());
System.out.println(“# Driver Version = ” + metaData.getDriverVersion());
System.out.println(“#”);
System.out.println(“#########################################”);
System.out.println(“”);
System.out.println(“”);

// Get database information
System.out.println(“#########################################”);
System.out.println(“# ***DATABASE INFORMATION***”);
System.out.println(“#”);
System.out.println(“# Database Product Name = ” + metaData.getDatabaseProductName());
System.out.println(“# Database Product Version = ” + metaData.getDatabaseProductVersion());
System.out.println(“#”);
System.out.println(“#########################################”);
System.out.println(“”);
System.out.println(“”);

// Get schema information
ResultSet schemas = metaData.getSchemas();
System.out.println(“#########################################”);
System.out.println(“# ***SCHEMA INFORMATION***”);
System.out.println(“#”);
System.out.println(“# Schemas:”);
while (schemas.next()) {
System.out.println(“# ” + schemas.getString(1));
}
System.out.println(“#########################################”);
System.out.println(“”);
System.out.println(“”);

// Get table information
System.out.println(“Tables”);
ResultSet tables = metaData.getTables(“”, “”, “”, null);
while (tables.next()) {
System.out.println(tables.getString(3));
}
conn.close();
} catch (Exception ex) {
ex.printStackTrace();
}
}
}

Any thoughts or suggestions on how to get around this error would be appreciated.

@ HOOPER,
Did you check username/password too ?

For which user it is complaining ? See if you can connect using that user/password from sqlplus.

I was following along this install and I received an odd error..

LDAP:error code 65 – Failed to find obpasswordexpirydate in madatory or optional attribute list.

At this point the install fails.. doesn’t allow back tracking.. only allows retry which of course gives the same error.. Any suggestions would be greatly appreciated..

@ Garry,
Are you integrating OIM with OAM ?

At which step you are hitting this error message (Is this during create domain or later) ?

I think it was because I checked the integrate OIM with OAM check box.. I redid the config and didn’t select that and it worked the second time. I do need to understand the integration at some point..

Gary

Hi Atul,

Thank you for the follow-up. I can successfully connect to the database using sqlplus.exe and my jdbc test client with either DEV_OIM or DEV_MDS schema owners.

When creating the Oracle DB schemas I used the same password for all schemas, so the Passwords for DEV_OIM and DEV_MDS are the same.

I have also dropped the schema and recreated using a different prefix and password and am still encountering the same issue.

I am installing on Windows 7 OS, running Weblogic 10.3.3 and Oracle DB 11gR2.
As an additional step I have confirmed that the port 1521 is enabled for incoming and outgoing traffic and is not blocked by my Windows Firewall settings.

Do you have any other suggestions for troubleshooting or debugging? Is there a debugging/logging setting that would capture this error in the OIM Server Configuration Wizard?

@ Hooper, wat username password you are using ? Did you try using ?

Note that OIM administrator pasword can be different . Let me know exact screen and steps you are doing .

Hi Atul,

So some quick background…when creating my Schemas using RCU 11.1.1.3.3 I used the following Database Connection Details

DB TYPE: Oracle Database
HOST NAME: localhost
PORT: 1521
SERVICE NAME: orcl.dev.com
USERNAME: sys
PASSWORD: Password1
ROLE: SYSDBA

I used a Prefix of “DEV” when creating the schemas so Schema Owners DEV_OIM and DEV_MDS where created.

I configured to use the same password for all Schemas: “Password1”. So the password for DEV_OIM and DEV_MDS should be the same, “Password1”.

When I launch the Oracle Identity Management 11g Configuration Wizard I am first brought to the “Welcome” Screen. I click the [Next>] button.

Next, I am on the “Components to Configure” screen where I select OIM Server and OIM Design Console and click the [Next>] button. (NOTE I have also tested by simply selecting only the OIM Server)

Next, I am on the “Database” screen where I enter the connection information

Connection String: localhost:1521:orcl.dev.com
(NOTE I have also tested using localhost:1521:orcl)

OIM Schema User Name: DEV_OIM
OIM Schema Password: Password1
MDS Schema User Name: DEV_MDS
MDS Schema Password: Password1

When I click the [Next>] button after entering the Database Connection details I encounter the following two errors (1 error for each logon DEV_OIM and DEV_MDS)

INST:6102 Unable to connect to the database with the given credentials.

INST:6102 Unable to connect to the database with the given credentials.

NOTE: I can successfully start the Oracle DB Services and connect via the Enterprise Console, SQL Plus, and JDBCTest Java Client…I just cannot get past this connection error in the OIM Server Configuration Wizard.

I appreciate your help and any suggestions or thoughts on how to best continue troubleshooting.

Many Thanks,
-Brian

@ Brian,
Check installer log file to see if you notice anything unusual. This should be in oraInventory/logs (for windows its c:\program files\oracle\ and for Linux check location in /etc/oraInst.loc )

Error looks really strange, check “lsnrctl status” to see of if listener is listening on local host ? Try with IP in place of localhost

Did RCU complete successfully ?

Hi Atul,

Thanks for the reply.

The RCU did complete successfully, and I am not seeing anything jumping right off the page in the Installer Log.

When the Listener Service is off I get the following output using lsnrctl status command

C:\> lsnrctl status

LSNRCTL for 32-bit Windows: Version 11.2.0.1.0 – Production on 21-SEP-2010 15:59:43

Copyright (c) 1991, 2010 Oracle. All rights reserved.

Connecting to (DESCRIPTION=(ADDRESS(PROTOCOL=TCP)(HOST=localhost)(PORT=1521)))
TNS-12451: TNS:no listener
TNS-12560: TNS:protocol adapter error
TNS-00511: No listener
32-bit Windows Error: 61 Unknown Error

When the Listener Service is on I get the following output using lsnrctl status command

C:\> lsnrctl status

LSNRCTL for 32-bit Windows: Version 11.2.0.1.0 – Production on 21-SEP-2010 15:59:43

Copyright (c) 1991, 2010 Oracle. All rights reserved.

STATUS of the LISTENER
—————————–
Alias LISTENER
Version TNSLSNR for 32-bit Windows:Version 11.2.0.1.0 – Production
Start Date 21-SEP-2010 14:43:57
Uptime 0 days 1 hr. 15 min. 46 sec
Trace Level off
Security ON: Local OS Authentication
SNMP OFF
Listener Parameter File C:\MyApps\Oracle\DB_HOME\11.2.0\dbhome_1\NETWORK\ADMIN\listener.ora
Listener Log File c:\myapps\oracle\diag\tnslsnr\\listener\alert\log.xml
Listening Endpoints Summary…
(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=127.0.0.1)(PORT=1521)))
Services Summary…
Service “CLRExtProc” has 1 instance(s).
Instance “CLRExtProc”, status UNKNOWN, has 1 handler(s) for this service…
Service “orcl.dev.com” has 1 instance(s).
Instance “orcl”, status READY, has 1 handler(s) for this service….
Service “orclXDB.dev.com” has 1 instance(s).
Instance “orcl” status READY, has 1 handler(s) for this service…
The command completed successfully

So from here it looks like the Listener Service is running. Quick question, are there any special configurations that need to be made to the tnsnames.ora and listener.ora files?

Hi Atul,

Quick question…I am using the Oracle DB 11gR2 “Personal Edition”, can you confirm which Oracle DB Edition you are using?

@ Hooper,
There are no changes required for listener.ora or tnsnames.ora. I am using “Enterprise Edition” but as per RCU certification http://www.oracle.com/technetwork/middleware/ias/downloads/fusion-requirements-100147.html#CHDJGECA there is no such limitation (Personal Edition or EE)

When you type username and password then check alert log and listener log to see if request is hitting to database or not . Other thing you could try is to enable trace on user login (DEV_OIM and DEV_MDS) to see if logon request is coming all the way from installer to database or not.

If you are planning to reinstall with enterprse edition database use hostname (machine name) instead of localhost

Hi Atul,

Ok, so I removed all Oracle components in my sandbox and reinstalled this time using the Enterprise Edition of the database, and am still running into the same issue.

@ Hooper, This is bit strange, Try changing listener.ora and tnsnames.ora from localhost/127.0.0.1 to actual IP and while entering database details give IP on Middleware install and see if this helps.

If this is windows 7 or vista then try disabling user access control

Hi Atul,

I am attempting to install on my machine which is running Windows 7 OS 32-bit. Several install attempts ago I did disable the User Account Control.

On this last test I updated tnsname.ora with the following host 127.0.0.1:

ORCL =
(DESCRIPTION =
(ADDRESS = (PROTOCOL = TCP)(HOST = 127.0.0.1)(PORT = 1521))
(CONNECT_DATA =
(SERVER = DEDICATED)
(SERVICE_NAME = orcl.dev.com)
)

I also updated listener.ora with the following 127.0.0.1 host:

LISTENER =
(DESCRIPTION_LIST =
(DESCRIPTION =
(ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC1521))
(ADDRESS = (PROTOCOL = TCP)(HOST = 127.0.0.1)(PORT = 1521))
)
)
)

I am still running into the same issue with the OIM configuration wizard…

If I test using my JDBC Java Test Client I can successfully connect using the following parameters

String url = “jdbc:oracle:thin:@127.0.0.1:1521:orcl”;
String driver = “oracle.jdbc.OracleDriver”;
String user = “DEV_MDS”;
String password = “Password1”;

This error really has me scratching my head? Any other ideas?

Can you forward over a quick summary of your Database Installation Steps?

Here is what I am doing…

1.) DOWNLOAD .zip DISTRIBUTIONS OF ORACLE DATABASE 11gR2 .ZIP FILES
win32_11gR2_database_1of2.zip
win32_11gR2_database_2of2.zip

2.) EXTRACT ALL FILES TO LOCAL DIRECTORY

3.) LAUNCH UNIVERSAL INSTALLER via setup.exe

4.) INSTALL DATABASE VIA OUI

– Select Install Option, I select Create and Configure Database

– System Class, I select Desktop Class

– Typical Install Configuration I use the following settings:

Oracle base: C:\MyApps\Oracle
Software location: C:\MyApps\Oracle\DB_HOME\11.2.0\dbhome_1
Database file location: C:\MyApps\Oracle\DB_HOME\oradata
Database Edition: Enterprise Edition (3.27 GB)
Character Set: Unicode (AL32UTF8)
Global database name: orcl.dev.com
Administrative Password: Password1
Confirm Password: Password1

127.0.0.1 is loop back adapter. What is IP of this machine ? Change listener.ora to use that IP (192 or 10 series) , restart listener , use actual IP of machine during config.sh and then try

Hi Atul,

Ok, so I have modified my tnsnames.ora and listener.ora files to use my machine’s IP Address.

# listener.ora Network Configuration File:
SID_LIST_LISTENER =
(SID_LIST =
(SID_DESC =
(SID_NAME = CLRExtProc)
(ORACLE_HOME = C:\MyApps\Oracle\DB_HOME\11.2.0\dbhome_1)
(PROGRAM = extproc)
(ENVS = “EXTPROC_DLLS=ONLY:C:\MyApps\Oracle\DB_HOME\11.2.0\dbhome_1\bin\oraclr11.dll”)
)
(SID_DESC =
(GLOBAL_DBNAME = ORCL.DEV.COM)
(ORACLE_HOME = C:\MyApps\Oracle\DB_HOME\11.2.0\dbhome_1)
(SID_NAME = ORCL)
)
)

LISTENER =
(DESCRIPTION_LIST =
(DESCRIPTION =
(ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC1521))
(ADDRESS = (PROTOCOL = TCP)(HOST = 10.XX.XX.XX)(PORT = 1521))
)
)

ADR_BASE_LISTENER = C:\MyApps\Oracle

# tnsnames.ora Network Configuration File:
LISTENER_ORCL =
(ADDRESS = (PROTOCOL = TCP)(HOST = 10.XX.XX.XX)(PORT = 1521))

ORACLR_CONNECTION_DATA =
(DESCRIPTION =
(ADDRESS_LIST =
(ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC1521))
)
(CONNECT_DATA =
(SID = CLRExtProc)
(PRESENTATION = RO)
)
)

ORCL.DEV.COM =
(DESCRIPTION =
(ADDRESS_LIST =
(ADDRESS = (PROTOCOL = TCP)(HOST = 10.XX.XX.XX)(PORT = 1521))
)
(CONNECT_DATA =
(SERVICE_NAME = ORCL.DEV.COM)
(SERVER = DEDICATED)
)
)

I have updated my JDBC Java Test Client to use the following parameters:

String url = “jdbc:oracle:thin:@10.XX.XX.XX:1521:orcl”;
String driver = “oracle.jdbc.OracleDriver”;
String user = “DEV_MDS”;
String password = “Password1”;

I am testing successfully using the Java Test client.

I stopped and restarted the oracle DB and listener services prior to retesting the OIM Configuration Wizard. I am still getting the same error message in the OIM Server:

INST-6102: Unable to connect to the database with the given credentials

Interesting to note: if I open a new command prompt and issue the following command:

C:\> sqlplus dev_oim/Password1@orcl.dev.com

I am able to connect to SQLPLUS without any problems.

@ HOOPER, Update listener and alert log file during time when you get

INST:6102 Unable to connect to the database with the given credentials.

@ Hooper , also run below command as sys user

SQL>select * from dba_users where username like ‘DEV%’;

Hi Atul,

So over this past weekend I was able to determine the root cause to my issue and was able to successfully install and configure OIM 11g on my Windows 7 machine.

Basically the root cause was related to the USER ID that I was using to install and configure the software components. I was able to confirm that the presence of special characters in an USER ID such as $ and # symbols. The presence of these types of characters in the USER ID that was installing, configuring, and launching the OIM 11g Server causes problems on my Windows 7 machine.

I was able to install all of the components including Oracle DB 11gR2, WebLogic 10.3.3, SOA Suite 11.1.1.2 and 11.1.1.3, and IAM Suite with OIM11g. However, when attempting to configure the OIM 11g Server with the Database and WebLogic Admin Server for my sandbox domain I was unable to connect to the database via the OIM Server Configuration Wizard. It was interesting to note that I was able to connect to the Database using various testing methods, including SQL Plus, JDBC Java Test Clients, the Enterprise Console, and etc.

I retested this morning and was able to also confirm that even with the OIM Server properly installed and configured, when using a USER ID with special characters such as # or $ symbols the Start Up Scripts also fail when attempting to start the OIM Server using the “startManagedWebLogic.cmd oim_server1” at the command line.

I appreciate your assistance in troubleshooting this issue. I was able to use a lot of your suggestions to eliminate possible causes and determine the root cause.

Kind Regards,
-Hooper

@ Hooper, Glad to hear that you finally fixed it.

Excellent article!
And when will be Part VIII?

Oops! I wanted to write цhen will be Part VII?

@ Alex, I am working on WebGate installation/registration in OAM 11g which is part VII.

I should be able to post it by next week (if everything goes as per plan)

Hi Atual,

I installed 11g and configured the Identity Manager as mentioned in Part IV. I logged on to Web Console and the status of AdminServer(admin) and oim_server1 is running. However when I tried to sign on to OIM I am getting the following error:
Error 404 –Not found
from rfc 2068 hypertext transfer protocol – HTTP/1.1:
I am not getting the oim login page to enter the id and password.

I am using the url
http://myhost:14000/oim

I appreciate your assistance in troubleshooting this issue.

Regards,
Viraf

Hi Atul,

I installed OIM 11g on windows 2003 and configured OIM as mentioned in part IV above. I am unable to get the OIM login page. The status of AdminServer and oim_server1 is showing in running mode.

To sign on to OIM User and Admin console, I typing the below url.

http://myhost:14000/oim

Error 404–Not Found
From RFC 2068 Hypertext Transfer Protocol — HTTP/1.1:
10.4.5 404 Not Found
The server has not found anything matching the Request-URI. No indication is given of whether the condition is temporary or permanent.

If the server does not wish to make this information available to the client, the status code 403 (Forbidden) can be used instead. The 410 (Gone) status code SHOULD be used if the server knows, through some internally configurable mechanism, that an old resource is permanently unavailable and has no forwarding address.

I appreciate your assistance in troubleshooting this issue.

Regards,
Viraf

I reconfigured the OIM Part VI and it works.
Thanks.

I am also getting this error on login page. Please post the solution:

Error 404–Not Found
From RFC 2068 Hypertext Transfer Protocol — HTTP/1.1:
10.4.5 404 Not Found
The server has not found anything matching the Request-URI. No indication is given of whether the condition is temporary or permanent.

If the server does not wish to make this information available to the client, the status code 403 (Forbidden) can be used instead. The 410 (Gone) status code SHOULD be used if the server knows, through some internally configurable mechanism, that an old resource is permanently unavailable and has no forwarding address.

@ Sandeebh,
Did you start OIM server ? Check logs under weblogic managed server for OIM i.e. $DOMAIN_HOME/servers/oim_server1/logs

Hi Atul,

Thanks for the excellent article. I am trying to install OIM on Windows Vista 32 bit os. In the step VI, trying to configure OIM, the following error is shown.

INST-6174: The OIMLocales.properties file could not be loaded
Make sure the properties file exists and is not corrupt

Appreciate any help.

Thanks,
Srini

@ Srini,
On which screen you are hitting this error ?

Atul,

It’s happening on the verifying the BD Settings screen

@ srinivas,
Which screen number or step from above screenshots ?

@ srinivas,
I have never seen this error and couldn’t find this in any of bug database. Recommend you to reinstall.

@srinivas Hi,
I had the same problem. Try right-click on the config.bat and choose “Run as Administrator”.

Good luck!

Joon

The same worked for me also

After OIM installation is done i am unable to start weblogic
I am getting Force Shutdown in the CMD and prompt is closed

@abhinay_a,
Please update what error message you are hitting before force shutdown. It should be on cmd window where you are starting services.

after installing OIM i am getting the below error
i am starting weblogic from base_domains\bin\startweblogic.cmd

admin server log has the below

####
####
####
#### <>
#### <>
#### <>
#### <>
#### <>
#### <>
#### <>
#### <>
#### <>
#### <>
#### <>
#### <>
#### <>
#### <>
#### <>
#### <>
#### <>
#### <>
#### <>
#### <>
#### <>
#### <>
#### <>
#### <> <The following exception has occurred:

java.lang.NoClassDefFoundError: oracle/core/ojdl/l
ogging/MessageIdKeyResourceBundle
at java.lang.ClassLoader.defineClass1(Native Method)
at java.lang.ClassLoader.defineClassCond(ClassLoader.java:632)
at java.lang.ClassLoader.defineClass(ClassLoader.java:616)
at java.security.SecureClassLoader.defineClass(SecureClassLoader.java:141)
at java.net.URLClassLoader.defineClass(URLClassLoader.java:283)
at java.net.URLClassLoader.access$000(URLClassLoader.java:58)
at java.net.URLClassLoader$1.run(URLClassLoader.java:197)
at java.security.AccessController.doPrivileged(Native Method)
at java.net.URLClassLoader.findClass(URLClassLoader.java:190)
at java.lang.ClassLoader.loadClass(ClassLoader.java:307)
at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:301)
at java.lang.ClassLoader.loadClass(ClassLoader.java:248)
at oracle.security.am.agent.util.logging.AgentLogger.(AgentLogger.java:41)
at oracle.security.am.agent.wls.providers.asserter.OAMIdent
ityAssertionProviderImpl.initialize(OAMIdentityAssertionProviderImpl.java:225)
at oracle.security.am.agent.wls.providers.safiap.OAMServletAuth
enticationFilterIAProvider.initialize(OAMServletAuthenticationFilterIAProvider.java:74)
at com.bea.common.security.internal.legacy.service.SecurityPro
viderImpl.init(SecurityProviderImpl.java:65)
at com.bea.common.engine.internal.ServiceEngineImpl.findOrStartService(ServiceEngineImpl.java:363)
at com.bea.common.engine.internal.ServiceEngineImpl.findOrStartService(ServiceEngineImpl.java:315)
at com.bea.common.engine.internal.ServiceEngineImpl.lookupService(ServiceEngineImpl.java:257)
at com.bea.common.engine.internal.ServicesImpl.getService(ServicesImpl.java:72)
at weblogic.security.service.internal.WLSIdentityServiceImpl.initialize(WLSIdentityServiceImpl.java:47)
at weblogic.security.service.CSSWLSDelegateImpl.initializeServiceEngine(CSSWLSDelegateImpl.java:300)
at weblogic.security.service.CSSWLSDelegateImpl.initialize(CSSWLSDelegateImpl.java:221)
at weblogic.security.service.CommonSecurityServiceManagerDel
egateImpl.InitializeServiceEngine(CommonSecurityServiceManagerDelegateImpl.java:1783)
at weblogic.security.service.CommonSecurityServiceManagerDelega
teImpl.initializeRealm(CommonSecurityServiceManagerDelegateImpl.java:442)
at weblogic.security.service.CommonSecurityServiceManagerDelegat
eImpl.loadRealm(CommonSecurityServiceManagerDelegateImpl.java:840)
at weblogic.security.service.CommonSecurityServiceManagerDelegat
eImpl.initializeRealms(CommonSecurityServiceManagerDelegateImpl.java:869)
at weblogic.security.service.CommonSecurityServiceManagerDelegat
eImpl.initialize(CommonSecurityServiceManagerDelegateImpl.java:1028)
at weblogic.security.service.SecurityServiceManag
er.initialize(SecurityServiceManager.java:875)
at weblogic.security.SecurityService.start(SecurityService.java:141)
at weblogic.t3.srvr.SubsystemRequest.run(SubsystemRequest.java:64)
at weblogic.work.ExecuteThread.execute(ExecuteThread.java:201)
at weblogic.work.ExecuteThread.run(ExecuteThread.java:173)

Caused By: java.lang.ClassNotFoundException: oracle.core.ojd
l.logging.MessageIdKeyResourceBundle
at java.net.URLClassLoader$1.run(URLClassLoader.java:202)
at java.security.AccessController.doPrivileged(Native Method)
at java.net.URLClassLoader.findClass(URLClassLoader.java:190)
at java.lang.ClassLoader.loadClass(ClassLoader.java:307)
at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:301)
at java.lang.ClassLoader.loadClass(ClassLoader.java:248)
at java.lang.ClassLoader.defineClass1(Native Method)
at java.lang.ClassLoader.defineClassCond(ClassLoader.java:632)
at java.lang.ClassLoader.defineClass(ClassLoader.java:616)
at java.security.SecureClassLoader.defineClass(SecureClassLoader.java:141)
at java.net.URLClassLoader.defineClass(URLClassLoader.java:283)
at java.net.URLClassLoader.access$000(URLClassLoader.java:58)
at java.net.URLClassLoader$1.run(URLClassLoader.java:197)
at java.security.AccessController.doPrivileged(Native Method)
at java.net.URLClassLoader.findClass(URLClassLoader.java:190)
at java.lang.ClassLoader.loadClass(ClassLoader.java:307)
at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:301)
at java.lang.ClassLoader.loadClass(ClassLoader.java:248)
at oracle.security.am.agent.util.logging.AgentLogger.(AgentLogger.java:41)
at oracle.security.am.agent.wls.providers.asserter.OAMIden
tityAssertionProviderImpl.initialize(OAMIdentityAssertionProviderImpl.java:225)
at oracle.security.am.agent.wls.providers.safiap.OAMServletA
uthenticationFilterIAProvider.initialize(OAMServletAuthenticationFilterIAProvider.java:74)
at com.bea.common.security.internal.legacy.service.SecurityProviderImpl.init(SecurityProviderImpl.java:65)
at com.bea.common.engine.internal.ServiceEngineImpl.findOrStartService(ServiceEngineImpl.java:363)
at com.bea.common.engine.internal.ServiceEngineImpl.findOrStartService(ServiceEngineImpl.java:315)
at com.bea.common.engine.internal.ServiceEngineImpl.lookupService(ServiceEngineImpl.java:257)
at com.bea.common.engine.internal.ServicesImpl.getService(ServicesImpl.java:72)
at weblogic.security.service.internal.WLSIdentityServiceImpl.initialize(WLSIdentityServiceImpl.java:47)
at weblogic.security.service.CSSWLSDelegateImpl.initializeServiceEngine(CSSWLSDelegateImpl.java:300)
at weblogic.security.service.CSSWLSDelegateImpl.initialize(CSSWLSDelegateImpl.java:221)
at weblogic.security.service.CommonSecurityServiceManagerDelegateIm
pl.InitializeServiceEngine(CommonSecurityServiceManagerDelegateImpl.java:1783)
at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.
initializeRealm(CommonSecurityServiceManagerDelegateImpl.java:442)
at weblogic.security.service.CommonSecurityServiceManagerDelegateImp
l.loadRealm(CommonSecurityServiceManagerDelegateImpl.java:840)
at weblogic.security.service.CommonSecurityServiceManagerDelegateImp
l.initializeRealms(CommonSecurityServiceManagerDelegateImpl.java:869)
at weblogic.security.service.CommonSecurityServiceManagerDelegateImp
l.initialize(CommonSecurityServiceManagerDelegateImpl.java:1028)
at weblogic.security.service.SecurityServiceManager.initialize(SecurityServiceManager.java:875)
at weblogic.security.SecurityService.start(SecurityService.java:141)
at weblogic.t3.srvr.SubsystemRequest.run(SubsystemRequest.java:64)
at weblogic.work.ExecuteThread.execute(ExecuteThread.java:201)
at weblogic.work.ExecuteThread.run(ExecuteThread.java:173)
>
#### <> <The realm “myrealm” failed to be loaded: weblogic.secu
rity.service.SecurityServiceException: java.lang.NoClassDefFoundError:
oracle/core/ojdl/logging/MessageIdKeyResourceBundle.
weblogic.security.service.SecurityServiceException: java.lang.NoClassDefFoundErro
r: oracle/core/ojdl/logging/MessageIdKeyResourceBundle
at weblogic.security.service.CSSWLSDelegateImpl.initializeServiceEngine(CSSWLSDelegateImpl.java:342)
at weblogic.security.service.CSSWLSDelegateImpl.initialize(CSSWLSDelegateImpl.java:221)
at weblogic.security.service.CommonSecurityServiceManagerDelegate
Impl.InitializeServiceEngine(CommonSecurityServiceManagerDelegateImpl.java:1783)
at weblogic.security.service.CommonSecurityServiceManagerDelegateIm
pl.initializeRealm(CommonSecurityServiceManagerDelegateImpl.java:442)
at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl
.loadRealm(CommonSecurityServiceManagerDelegateImpl.java:840)
at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.
initializeRealms(CommonSecurityServiceManagerDelegateImpl.java:869)
at weblogic.security.service.CommonSecurityServiceManagerDelegateImp
l.initialize(CommonSecurityServiceManagerDelegateImpl.java:1028)
at weblogic.security.service.SecurityServiceManager.initialize(SecurityServiceManager.java:875)
at weblogic.security.SecurityService.start(SecurityService.java:141)
at weblogic.t3.srvr.SubsystemRequest.run(SubsystemRequest.java:64)
at weblogic.work.ExecuteThread.execute(ExecuteThread.java:201)
at weblogic.work.ExecuteThread.run(ExecuteThread.java:173)

Caused By: java.lang.NoClassDefFoundError: oracle/core/ojdl/logging/MessageIdKeyResourceBundle
at java.lang.ClassLoader.defineClass1(Native Method)
at java.lang.ClassLoader.defineClassCond(ClassLoader.java:632)
at java.lang.ClassLoader.defineClass(ClassLoader.java:616)
at java.security.SecureClassLoader.defineClass(SecureClassLoader.java:141)
at java.net.URLClassLoader.defineClass(URLClassLoader.java:283)
at java.net.URLClassLoader.access$000(URLClassLoader.java:58)
at java.net.URLClassLoader$1.run(URLClassLoader.java:197)
at java.security.AccessController.doPrivileged(Native Method)
at java.net.URLClassLoader.findClass(URLClassLoader.java:190)
at java.lang.ClassLoader.loadClass(ClassLoader.java:307)
at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:301)
at java.lang.ClassLoader.loadClass(ClassLoader.java:248)
at oracle.security.am.agent.util.logging.AgentLogger.(AgentLogger.java:41)
at oracle.security.am.agent.wls.providers.asserter.OAMIdentityAssertionP
roviderImpl.initialize(OAMIdentityAssertionProviderImpl.java:225)
at oracle.security.am.agent.wls.providers.safiap.OAMServletAuthenticatio
nFilterIAProvider.initialize(OAMServletAuthenticationFilterIAProvider.java:74)
at com.bea.common.security.internal.legacy.service.SecurityProviderImpl.init(SecurityProviderImpl.java:65)
at com.bea.common.engine.internal.ServiceEngineImpl.findOrStartService(ServiceEngineImpl.java:363)
at com.bea.common.engine.internal.ServiceEngineImpl.findOrStartService(ServiceEngineImpl.java:315)
at com.bea.common.engine.internal.ServiceEngineImpl.lookupService(ServiceEngineImpl.java:257)
at com.bea.common.engine.internal.ServicesImpl.getService(ServicesImpl.java:72)
at weblogic.security.service.internal.WLSIdentityServiceImpl.initialize(WLSIdentityServiceImpl.java:47)
at weblogic.security.service.CSSWLSDelegateImpl.initializeServiceEngine(CSSWLSDelegateImpl.java:300)
at weblogic.security.service.CSSWLSDelegateImpl.initialize(CSSWLSDelegateImpl.java:221)
at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.In
itializeServiceEngine(CommonSecurityServiceManagerDelegateImpl.java:1783)
at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl
.initializeRealm(CommonSecurityServiceManagerDelegateImpl.java:442)
at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl
.loadRealm(CommonSecurityServiceManagerDelegateImpl.java:840)
at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.init
ializeRealms(CommonSecurityServiceManagerDelegateImpl.java:869)
at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.i
nitialize(CommonSecurityServiceManagerDelegateImpl.java:1028)
at weblogic.security.service.SecurityServiceManager.initialize(SecurityServiceManager.java:875)
at weblogic.security.SecurityService.start(SecurityService.java:141)
at weblogic.t3.srvr.SubsystemRequest.run(SubsystemRequest.java:64)
at weblogic.work.ExecuteThread.execute(ExecuteThread.java:201)
at weblogic.work.ExecuteThread.run(ExecuteThread.java:173)

Caused By: java.lang.ClassNotFoundException: oracle.core.ojdl.logging.MessageIdKeyResourceBundle
at java.net.URLClassLoader$1.run(URLClassLoader.java:202)
at java.security.AccessController.doPrivileged(Native Method)
at java.net.URLClassLoader.findClass(URLClassLoader.java:190)
at java.lang.ClassLoader.loadClass(ClassLoader.java:307)
at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:301)
at java.lang.ClassLoader.loadClass(ClassLoader.java:248)
at java.lang.ClassLoader.defineClass1(Native Method)
at java.lang.ClassLoader.defineClassCond(ClassLoader.java:632)
at java.lang.ClassLoader.defineClass(ClassLoader.java:616)
at java.security.SecureClassLoader.defineClass(SecureClassLoader.java:141)
at java.net.URLClassLoader.defineClass(URLClassLoader.java:283)
at java.net.URLClassLoader.access$000(URLClassLoader.java:58)
at java.net.URLClassLoader$1.run(URLClassLoader.java:197)
at java.security.AccessController.doPrivileged(Native Method)
at java.net.URLClassLoader.findClass(URLClassLoader.java:190)
at java.lang.ClassLoader.loadClass(ClassLoader.java:307)
at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:301)
at java.lang.ClassLoader.loadClass(ClassLoader.java:248)
at oracle.security.am.agent.util.logging.AgentLogger.(AgentLogger.java:41)
at oracle.security.am.agent.wls.providers.asserter.OAMIdentityAssertionP
roviderImpl.initialize(OAMIdentityAssertionProviderImpl.java:225)
at oracle.security.am.agent.wls.providers.safiap.OAMServletAuthentica
tionFilterIAProvider.initialize(OAMServletAuthenticationFilterIAProvider.java:74)
at com.bea.common.security.internal.legacy.service.SecurityProviderImpl.init(SecurityProviderImpl.java:65)
at com.bea.common.engine.internal.ServiceEngineImpl.findOrStartService(ServiceEngineImpl.java:363)
at com.bea.common.engine.internal.ServiceEngineImpl.findOrStartService(ServiceEngineImpl.java:315)
at com.bea.common.engine.internal.ServiceEngineImpl.lookupService(ServiceEngineImpl.java:257)
at com.bea.common.engine.internal.ServicesImpl.getService(ServicesImpl.java:72)
at weblogic.security.service.internal.WLSIdentityServiceImpl.initialize(WLSIdentityServiceImpl.java:47)
at weblogic.security.service.CSSWLSDelegateImpl.initializeServiceEngine(CSSWLSDelegateImpl.java:300)
at weblogic.security.service.CSSWLSDelegateImpl.initialize(CSSWLSDelegateImpl.java:221)
at weblogic.security.service.CommonSecurityServiceManagerDelegateI
mpl.InitializeServiceEngine(CommonSecurityServiceManagerDelegateImpl.java:1783
)
at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.
initializeRealm(CommonSecurityServiceManagerDelegateImpl.java:442)
at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.lo
adRealm(CommonSecurityServiceManagerDelegateImpl.java:840)
at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.ini
tializeRealms(CommonSecurityServiceManagerDelegateImpl.java:869)
at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.initi
alize(CommonSecurityServiceManagerDelegateImpl.java:1028)
at weblogic.security.service.SecurityServiceManager.initialize(SecurityServiceManager.java:875)
at weblogic.security.SecurityService.start(SecurityService.java:141)
at weblogic.t3.srvr.SubsystemRequest.run(SubsystemRequest.java:64)
at weblogic.work.ExecuteThread.execute(ExecuteThread.java:201)
at weblogic.work.ExecuteThread.run(ExecuteThread.java:173)
>
#### <>
#### <>
#### <>
#### <>
#### <>
#### <>

Hi Atul,

Thank you very much for all your installation & configuration series.

I need your help for the Part VII that you mentioned above, that is: how to configure Oracle Access Manager 11g for integrating the Identity Administration (OIM 11g) with OAM.

I’ve used all your “Step by Step Installation Series of IDAM 11g” and everything works as expected! Thanks a lot for that.
My objective is now to integrate the Identity Administration with OAM 11g…has proposed during the installation process of OIM 11g (see “LDAP Sync and OAM”).
Unfortunately, this was part of the initial setup using the OIM Configuration Wizard, and it seems that we cannot run the OIM Configuration Wizard again (i.e., after the initial setup) to modify the configuration of OIM Server. I can read that we must use Oracle Enterprise Manager for such modifications, but I’m not very confident about it.
What are your recommendations for configuring OAM 11g (OIM being already installed & configured)?
Do we have to run the associated config-file of OAM 11g? Extend an existing WebLogic domain to modify the configuration settings?
What’s the best way to complete the integration?

Thank you very much in advance for your time and consideration.

@ fthomas,
You can rerun config.sh/cmd from $ORACLE_HOME/bin and select OIM Server and other option as mentioned in above post and then select integration options.

Do not forget to complete prereq. steps mentioned here
http://download.oracle.com/docs/cd/E14571_01/install.1111/e12002/integrate003.htm

Revert back in case of any issues . Step by Step OIM/OAM integration steps will follow soon (1-2 month)

@ abhinay_a,

Your error means class MessageIdKeyResourceBundle is missing from your classpath (in script which you are using to start). As far as I know this class is part of ojdl.jar. Check if this file is presnet and part of classpath.

If this file is present them raise call with Oracle Support and check in which jar file above class is present and include that jar file in classpath.

Dear all,

Thank you very much for these installation series and advices about Oracle IDAM 11g.

I’ve used all the “Step by Step Installation Series of OAM, OIM, OAAM, OAPM, OIN (11.1.1.3.0)” to install my IDAM-environment, and everything works as expected! Thanks a lot.

I’d like to integrate the Identity Administration (i.e., OIM 11g) with OAM 11g…has proposed during the installation process of OIM 11g (see above: LDAP Sync and OAM).
Unfortunately, this configuration was part of the initial setup using the OIM Configuration Wizard, and it seems that we cannot run the OIM Configuration Wizard again (i.e., after the initial setup) to modify the configuration of OIM Server. I can read that we must use Oracle Enterprise Manager for such modifications, but I have no idea about that tool.
What are your recommendations for configuring OAM 11g (OIM being already installed & configured)?
Do we have to run the associated config-file of OAM 11g (\bin\config.cmd)? Extend the existing WebLogic domain?
Thank you very much in advance for your time and consideration.

-Franck

@ Franck,
You don’t need to extend domain but you will have to reconfigure OIM by running $ORACLE_HOME/bin/config.cmd and select “LDAP Synch” & “OAM Integration option”.

Before doing so there are preLDAPConfig script and then later postLDAPConfig which you should run.

You will also need OID/OVD for OIM-OAM integration.

I’ll cover step by step instructions for OIM 11g integration with OAM 11g on this site in 2-3 days (LDAP sync is prereq of OIM/OAM integration)

@Atul

Thanks a lot.
Could you please tell me more about those preLDAPConfig and postLDAPConfig scripts? Why do we need those scripts, and where are they?

I also do not understand why we need OID/OVD here 🙁
Why do we need OID/OVD in such deployment? To store the configuration and policy data?
I thought that the configuration and policy data are stored in the OIM/OAM/SOA Database, and the LDAP identity store (e.g. OID/OVD) was only used to store OAM Administrator and user identities for use during authentication and authorization.

Thank you for your help.

Regards.

@ ftthomas,

For answer to your first question check

http://onlineappsdba.com/index.php/2010/12/29/part-viii-optional-configure-ldap-sync-with-oim-11g-oim-11g-integration-with-ovdoid/

Why OID/OVD is required for OIM/OAM integration ?
OIM/OAM integration requires LDAP Sync in OIM which in turn requires OID (though I am sure we can live without OVD but I have not tried configuring LDAP sync without OVD).

[…] For Part VI Configure Identity Manager click here […]

I have started installation again on windows 2003 and everything is fine and OIM is working. Earlier when i was trying on windows 7 i was facing some problem.

@Atul thanks for installation steps and support
can you post anything related to migration of SIM to OIM

@ abhinay_a,
Good to hear that OIM is working on windows 2003.

For windows 7, disable user access control and then try.

Sure i will try by disabling user access control

Can you post anything related to SIM -OIM Migration

Do you mean Sun Identity Manager (SIM) ?

I have not worked on SIM so check with OIM team for migration or check in SIM forums.

Hi Atul,

Is windows 2003 compatible with OIM 11g
I am able to start with OIM server and work but i have problem with SOA server im able to start when im trying to work with approval tasks im facing the below error

An error occurred while searching tasks from the SOA Server

@ abhinay_a,
What is eact error in soa_server/oim_server log file ?

Log location is $DOMAIN_HOME/servers/oim_server1/soa_server1/logs

Hi,
I am able to start weblogic server.
Error starting Weblogic managed server
oim server at http://servername:port/oim.displays page not found.
the $DOMAIN_HOME/servers/oim_server1/logs/oim_server.log file contains:
java.sql.SQLRecoverableException: No more data to read from socket
at oracle.jdbc.driver.SQLStateMapping.newSQLException(SQLStateMapping.java:105)
at oracle.jdbc.driver.DatabaseError.newSQLException(DatabaseError.java:135)
at oracle.jdbc.driver.DatabaseError.throwSqlException(DatabaseError.java:203)
at oracle.jdbc.driver.DatabaseError.throwSqlException(DatabaseError.java:267)
at oracle.jdbc.driver.DatabaseError.throwSqlException(DatabaseError.java:276)
at oracle.jdbc.driver.DatabaseError.throwSqlException(DatabaseError.java:453)
at oracle.jdbc.driver.T4CMAREngine.unmarshalUB1(T4CMAREngine.java:1113)
at oracle.jdbc.driver.T4CMAREngine.unmarshalSB1(T4CMAREngine.java:1062)
at oracle.jdbc.driver.T4CTTIoauthenticate.receiveOsesskey(T4CTTIoauthenticate.java:281)
at oracle.jdbc.driver.T4CConnection.logon(T4CConnection.java:375)
at oracle.jdbc.driver.PhysicalConnection.(PhysicalConnection.java:640)
at oracle.jdbc.driver.T4CConnection.(T4CConnection.java:205)
at oracle.jdbc.driver.T4CDriverExtension.getConnection(T4CDriverExtension.java:35)
at oracle.jdbc.driver.OracleDriver.connect(OracleDriver.java:554)
at weblogic.jdbc.common.internal.ConnectionEnvFactory.makeConnection(ConnectionEnvFactory.java:327)
at weblogic.jdbc.common.internal.ConnectionEnvFactory.createResource(ConnectionEnvFactory.java:227)
at weblogic.common.resourcepool.ResourcePoolImpl.makeResources(ResourcePoolImpl.java:1193)
at weblogic.common.resourcepool.ResourcePoolImpl.makeResources(ResourcePoolImpl.java:1117)
at weblogic.common.resourcepool.ResourcePoolImpl.reserveResourceInternal(ResourcePoolImpl.java:427)
at weblogic.common.resourcepool.ResourcePoolImpl.reserveResource(ResourcePoolImpl.java:332)
at weblogic.common.resourcepool.ResourcePoolImpl.reserveResource(ResourcePoolImpl.java:322)
at weblogic.jdbc.common.internal.ConnectionPool.reserve(ConnectionPool.java:438)
at weblogic.jdbc.common.internal.ConnectionPool.reserve(ConnectionPool.java:317)
at weblogic.jdbc.common.internal.ConnectionPoolManager.reserve(ConnectionPoolManager.java:93)
at weblogic.jdbc.common.internal.RmiDataSource.getPoolConnection(RmiDataSource.java:342)
at weblogic.jdbc.common.internal.RmiDataSource.getConnection(RmiDataSource.java:360)
at oracle.mds.internal.persistence.db.JNDIConnectionManagerImpl.fetchConnection(JNDIConnectionManagerImpl.java:91)
at oracle.mds.internal.persistence.db.ConnectionManager.getConnection(ConnectionManager.java:347)
at oracle.mds.internal.persistence.db.BaseReposAccess.(BaseReposAccess.java:347)
at oracle.mds.internal.persistence.db.shredded.ShreddedReposAccess.(ShreddedReposAccess.java:274)
at oracle.mds.internal.persistence.db.shredded.ShreddedDBMSConnection.createReposAccess(ShreddedDBMSConnection.java:444)
at oracle.mds.internal.persistence.db.BaseDBMSConnection.getOrCreateReposAccess(BaseDBMSConnection.java:2072)
at oracle.mds.internal.persistence.db.BaseDBMSConnection.queryStoreForLatestCommitNumber(BaseDBMSConnection.java:2503)
at oracle.mds.internal.persistence.db.DBDocumentChangeProvider.queryStoreForLatestCommitNumber(DBDocumentChangeProvider.java:330)
at oracle.mds.internal.persistence.db.DBDocumentChangeProvider.getChanges(DBDocumentChangeProvider.java:81)
at oracle.mds.persistence.stores.db.DBMetadataStoreCommunicator.signalChanges(DBMetadataStoreCommunicator.java:134)
at oracle.mds.internal.persistence.db.ChangePollingThread.run(ChangePollingThread.java:81)

@ Vidya,
Looking at error message it looks like issue is while connection to daatabase server.

See if database server and database listener is up, running and accessible from OIM/OAM weblogic managed servers.

An error occurred while searching tasks from the SOA Server.
In the logs: it was mentioned as:

[2011-06-08T09:20:14.938+01:00] [soa_server1] [ERROR] [] [oracle.soa.services.workflow.verification] [tid: [ACTIVE].ExecuteThread: ‘8’ for queue: ‘weblogic.kernel.Default (self-tuning)’] [userId: idmlab] [ecid: 0000J1iLaSB6UOYFLrvH8A1DvaG10000C9,1:20651] [APP: soa-infra] authenticateUser: error: Identity Service Authentication failure.[[
Identity Service Authentication failure.
Either the user name or password are incorrect. Check the error stack and fix the cause of the error. Contact oracle support if error is not fixable.

]]
[2011-06-08T09:20:59.969+01:00] [soa_server1] [ERROR] [] [oracle.soa.services.identity] [tid: [ACTIVE].ExecuteThread: ‘3’ for queue: ‘weblogic.kernel.Default (self-tuning)’] [userId: idmlab] [ecid: 0000J1iLlaY6UOYFLrvH8A1DvaG10000CM,1:20653] [APP: soa-infra] authentication FAILED
[2011-06-08T09:20:59.969+01:00] [soa_server1] [ERROR] [] [oracle.soa.services.identity] [tid: [ACTIVE].ExecuteThread: ‘3’ for queue: ‘weblogic.kernel.Default (self-tuning)’] [userId: idmlab] [ecid: 0000J1iLlaY6UOYFLrvH8A1DvaG10000CM,1:20653] [APP: soa-infra] Identity Service Authentication failure.[[
Identity Service Authentication failure.
Either the user name or password are incorrect. Check the error stack and fix the cause of the error. Contact oracle support if error is not fixable.
ORABPEL-10528

Identity Service Authentication failure.
Identity Service Authentication failure.
Either the user name or password are incorrect. Check the error stack and fix the cause of the error. Contact oracle support if error is not fixable.

at oracle.tip.pc.services.identity.jps.JpsProvider.authenticateUser(JpsProvider.java:2147)
at oracle.tip.pc.services.identity.jps.JpsProvider.authenticateUser(JpsProvider.java:2121)
at oracle.tip.pc.services.identity.jps.AuthenticationServiceImpl.authenticateUser(AuthenticationServiceImpl.java:135)
at oracle.tip.pc.services.identity.jps.AuthenticationServiceImpl.authenticateUser(AuthenticationServiceImpl.java:121)
at oracle.tip.pc.services.identity.jps.IdentityServiceImpl.authenticateUser(IdentityServiceImpl.java:529)
at oracle.bpel.services.workflow.verification.impl.VerificationService.authenticateUser(VerificationService.java:657)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:307)
at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:182)
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:149)
at oracle.bpel.services.workflow.common.WorkflowServiceCacheEventAdvice.invoke(WorkflowServiceCacheEventAdvice.java:89)
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
at oracle.bpel.services.common.dms.MethodPhaseEventAspect.invoke(MethodPhaseEventAspect.java:82)
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
at oracle.bpel.services.common.dms.MethodEventAspect.invoke(MethodEventAspect.java:70)
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
at $Proxy207.authenticateUser(Unknown Source)
at oracle.bpel.services.workflow.query.impl.TaskQueryService.authenticate(TaskQueryService.java:457)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:307)
at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:182)
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:149)
at oracle.bpel.services.workflow.common.WorkflowServiceCacheEventAdvice.invoke(WorkflowServiceCacheEventAdvice.java:89)
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
at oracle.bpel.services.workflow.test.workflow.ExceptionTestCaseBuilder.invoke(ExceptionTestCaseBuilder.java:155)
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
at oracle.bpel.services.common.dms.MethodEventAspect.invoke(MethodEventAspect.java:70)
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
at oracle.bpel.services.common.dms.MethodPhaseEventAspect.invoke(MethodPhaseEventAspect.java:82)
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
at $Proxy220.authenticate(Unknown Source)
at oracle.bpel.services.workflow.query.ejb.TaskQueryServiceBean.authenticate(TaskQueryServiceBean.java:80)
at oracle.bpel.services.workflow.query.ejb.TaskQueryService_oz1ipg_EOImpl.authenticate(TaskQueryService_oz1ipg_EOImpl.java:587)
at oracle.bpel.services.workflow.query.ejb.TaskQueryService_oz1ipg_EOImpl_WLSkel.invoke(Unknown Source)
at weblogic.rmi.internal.BasicServerRef.invoke(BasicServerRef.java:590)
at weblogic.rmi.cluster.ClusterableServerRef.invoke(ClusterableServerRef.java:230)
at weblogic.rmi.internal.BasicServerRef$1.run(BasicServerRef.java:478)
at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:147)
at weblogic.rmi.internal.BasicServerRef.handleRequest(BasicServerRef.java:473)
at weblogic.rmi.internal.wls.WLSExecuteRequest.run(WLSExecuteRequest.java:119)
at weblogic.work.ExecuteThread.execute(ExecuteThread.java:201)
at weblogic.work.ExecuteThread.run(ExecuteThread.java:173)
Caused by: oracle.security.idm.ObjectNotFoundException: No users found matching the criteria.
at oracle.iam.userrole.providers.oimdb.OIMDBSimpleUserSearchResponse.(OIMDBSimpleUserSearchResponse.java:64)
at oracle.iam.userrole.providers.oimdb.OIMDBSimpleUserSearchResponse.(OIMDBSimpleUserSearchResponse.java:70)
at oracle.iam.userrole.providers.oimdb.OIMDBIdentityStore.searchUsers(OIMDBIdentityStore.java:457)
at oracle.iam.userrole.providers.oimdb.OIMDBIdentityStore.searchUser(OIMDBIdentityStore.java:398)
at oracle.iam.userrole.providers.oimdb.OIMDBIdentityStore.searchUser(OIMDBIdentityStore.java:433)
at oracle.iam.userrole.providers.oimdb.OIMDBUserManager.authenticateUser(OIMDBUserManager.java:80)
at oracle.tip.pc.services.identity.jps.JpsProvider.authenticateUser(JpsProvider.java:2139)
at oracle.tip.pc.services.identity.jps.JpsProvider.authenticateUser(JpsProvider.java:2122)
at oracle.tip.pc.services.identity.jps.AuthenticationServiceImpl.authenticateUser(AuthenticationServiceImpl.java:136)
… 47 more

]]

@ vamsi56,
Is this issue happening on exernal SOA environment integrated with OID or SOA which comes as part of OIM.

Is there any change like integration with external ldap store ?

This is happening with OID and SOA which has come along with OIM and there is no change in terms of integration.

Thanks,
Vamsi.

@ vamsi56,
Are you using LDAP sync (OID or OVD) ?

If yes then create group Administrators and user weblogic in OID. Add this user to group Administrators in OID.

Restart Admin and all managed server and check

I did not configure any LDAP sync in the configuration. I have installed OIM-OID connector and started to direct provision the user, it worked. I logged in as xelsysadmin and tried to provsion the same resource created with OIM-OID connector and then clicking on tasks tab, it threw me this excpetion.

Thanks,
Vamsi.

When i start oim_server1 and I get error. I did the config.sh from ORACLE_HOME/bin.

OIM application intialization failed because of the following reasons:
oim-config.xml was not found in MDS Repository.

at oracle.iam.platform.utils.OIMAppInitializationListener.preStart(OIMAppInitializationListener.java:145)

Hello Atul,

After following all the steps in this tutorial in which was successfull (all the managed servers [soa_server1, oam_server1 and oim_server1] started up with no error), when I tried to run a job inside the OIM application called “LDAPSync Post Enable Provision Users to LDAP”, the following error arrived. My doubt is if I have to do some aditional configuration in order the provisioning to work with the embedded ldap.

<An error occurred while determining the LDAP container.
oracle.iam.ldapsync.exception.LDAPContainerMappingException: Failed to load LDAP container mapping rules.
at oracle.iam.ldapsync.impl.DefaultLDAPContainerMapper.loadRules(DefaultLDAPContainerMapper.java:286)
at oracle.iam.ldapsync.impl.DefaultLDAPContainerMapper.getUserContainerDN(DefaultLDAPContainerMapper.java:119)
at oracle.iam.ldapsync.vo.LDAPContainer.(LDAPContainer.java:76)
at oracle.iam.ldapsync.impl.util.CommonNameGenerationUtil.isCommonNameExistingOrReserved(CommonNameGenerationUtil.java:187)
at oracle.iam.ldapsync.impl.plugins.FirstNameLastNamePolicy.getCommonNameFromPolicy(FirstNameLastNamePolicy.java:157)
at oracle.iam.ldapsync.impl.util.CommonNameGenerationUtil.generateCommonName(CommonNameGenerationUtil.java:116)
at oracle.iam.ldapsync.impl.util.CommonNameGenerationUtil.generateCommonName(CommonNameGenerationUtil.java:82)
at oracle.iam.oimtoldap.impl.SeedOIMDataInLDAPImpl.createUserInLDAP(SeedOIMDataInLDAPImpl.java:182)
at oracle.iam.oimtoldap.api.SeedOIMDataInLDAPEJB.createUserInLDAPx(Unknown Source)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at com.bea.core.repackaged.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:310)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:182)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:149)
at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.doProceed(DelegatingIntroductionInterceptor.java:131)
at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.invoke(DelegatingIntroductionInterceptor.java:119)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
at com.bea.core.repackaged.springframework.jee.spi.MethodInvocationVisitorImpl.visit(MethodInvocationVisitorImpl.java:37)
at weblogic.ejb.container.injection.EnvironmentInterceptorCallbackImpl.callback(EnvironmentInterceptorCallbackImpl.java:54)
at com.bea.core.repackaged.springframework.jee.spi.EnvironmentInterceptor.invoke(EnvironmentInterceptor.java:50)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
at com.bea.core.repackaged.springframework.aop.interceptor.ExposeInvocationInterceptor.invoke(ExposeInvocationInterceptor.java:89)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.doProceed(DelegatingIntroductionInterceptor.java:131)
at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.invoke(DelegatingIntroductionInterceptor.java:119)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
at com.bea.core.repackaged.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
at $Proxy496.createUserInLDAPx(Unknown Source)
at oracle.iam.oimtoldap.api.SeedOIMDataInLDAP_8d8qil_SeedOIMDataInLDAPRemoteImpl.__WL_invoke(Unknown Source)
at weblogic.ejb.container.internal.SessionRemoteMethodInvoker.invoke(SessionRemoteMethodInvoker.java:40)
at oracle.iam.oimtoldap.api.SeedOIMDataInLDAP_8d8qil_SeedOIMDataInLDAPRemoteImpl.createUserInLDAPx(Unknown Source)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at weblogic.ejb.container.internal.RemoteBusinessIntfProxy.invoke(RemoteBusinessIntfProxy.java:85)
at $Proxy149.createUserInLDAPx(Unknown Source)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:307)
at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:198)
at $Proxy495.createUserInLDAPx(Unknown Source)
at oracle.iam.oimtoldap.api.SeedOIMDataInLDAPDelegate.createUserInLDAP(Unknown Source)
at oracle.iam.oimtoldap.scheduletasks.user.SeedOIMUsersInLDAP.execute(SeedOIMUsersInLDAP.java:59)
at oracle.iam.scheduler.vo.TaskSupport.executeJob(TaskSupport.java:145)
at sun.reflect.GeneratedMethodAccessor1577.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at oracle.iam.scheduler.impl.quartz.QuartzJob.execute(QuartzJob.java:196)
at org.quartz.core.JobRunShell.run(JobRunShell.java:202)
at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:529)
Caused By: oracle.mds.core.MetadataNotFoundException: MDS-00013: no metadata found for metadata object “/db/LDAPContainerRules.xml”
at oracle.mds.core.MetadataObject.getBaseMO(MetadataObject.java:1279)
at oracle.mds.core.MDSSession.getBaseMO(MDSSession.java:3040)
at oracle.mds.core.MDSSession.getMetadataObject(MDSSession.java:1211)
at oracle.mds.core.MDSSession.getMetadataObject(MDSSession.java:1157)
at oracle.iam.ldapsync.impl.DefaultLDAPContainerMapper.loadRules(DefaultLDAPContainerMapper.java:282)
at oracle.iam.ldapsync.impl.DefaultLDAPContainerMapper.getUserContainerDN(DefaultLDAPContainerMapper.java:119)
at oracle.iam.ldapsync.vo.LDAPContainer.(LDAPContainer.java:76)
at oracle.iam.ldapsync.impl.util.CommonNameGenerationUtil.isCommonNameExistingOrReserved(CommonNameGenerationUtil.java:187)
at oracle.iam.ldapsync.impl.plugins.FirstNameLastNamePolicy.getCommonNameFromPolicy(FirstNameLastNamePolicy.java:157)
at oracle.iam.ldapsync.impl.util.CommonNameGenerationUtil.generateCommonName(CommonNameGenerationUtil.java:116)
at oracle.iam.ldapsync.impl.util.CommonNameGenerationUtil.generateCommonName(CommonNameGenerationUtil.java:82)
at oracle.iam.oimtoldap.impl.SeedOIMDataInLDAPImpl.createUserInLDAP(SeedOIMDataInLDAPImpl.java:182)
at oracle.iam.oimtoldap.api.SeedOIMDataInLDAPEJB.createUserInLDAPx(Unknown Source)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at com.bea.core.repackaged.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:310)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:182)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:149)
at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.doProceed(DelegatingIntroductionInterceptor.java:131)
at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.invoke(DelegatingIntroductionInterceptor.java:119)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
at com.bea.core.repackaged.springframework.jee.spi.MethodInvocationVisitorImpl.visit(MethodInvocationVisitorImpl.java:37)
at weblogic.ejb.container.injection.EnvironmentInterceptorCallbackImpl.callback(EnvironmentInterceptorCallbackImpl.java:54)
at com.bea.core.repackaged.springframework.jee.spi.EnvironmentInterceptor.invoke(EnvironmentInterceptor.java:50)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
at com.bea.core.repackaged.springframework.aop.interceptor.ExposeInvocationInterceptor.invoke(ExposeInvocationInterceptor.java:89)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.doProceed(DelegatingIntroductionInterceptor.java:131)
at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.invoke(DelegatingIntroductionInterceptor.java:119)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
at com.bea.core.repackaged.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
at $Proxy496.createUserInLDAPx(Unknown Source)
at oracle.iam.oimtoldap.api.SeedOIMDataInLDAP_8d8qil_SeedOIMDataInLDAPRemoteImpl.__WL_invoke(Unknown Source)
at weblogic.ejb.container.internal.SessionRemoteMethodInvoker.invoke(SessionRemoteMethodInvoker.java:40)
at oracle.iam.oimtoldap.api.SeedOIMDataInLDAP_8d8qil_SeedOIMDataInLDAPRemoteImpl.createUserInLDAPx(Unknown Source)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at weblogic.ejb.container.internal.RemoteBusinessIntfProxy.invoke(RemoteBusinessIntfProxy.java:85)
at $Proxy149.createUserInLDAPx(Unknown Source)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:307)
at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:198)
at $Proxy495.createUserInLDAPx(Unknown Source)
at oracle.iam.oimtoldap.api.SeedOIMDataInLDAPDelegate.createUserInLDAP(Unknown Source)
at oracle.iam.oimtoldap.scheduletasks.user.SeedOIMUsersInLDAP.execute(SeedOIMUsersInLDAP.java:59)
at oracle.iam.scheduler.vo.TaskSupport.executeJob(TaskSupport.java:145)
at sun.reflect.GeneratedMethodAccessor1577.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at oracle.iam.scheduler.impl.quartz.QuartzJob.execute(QuartzJob.java:196)
at org.quartz.core.JobRunShell.run(JobRunShell.java:202)
at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:529)

Thanks,
Alexandre

hi

After configure ldapsync

java.sql.SQLException: Unable to start the Universal Connection Pool: oracle.ucp.UniversalConnectionPoolException: Error during pool creation in Universal Connection Pool Manager MBean
at oracle.ucp.util.UCPErrorHandler.newSQLException(UCPErrorHandler.java:541)
at oracle.ucp.jdbc.PoolDataSourceImpl.throwSQLException(PoolDataSourceImpl.java:587)
at oracle.ucp.jdbc.PoolDataSourceImpl.startPool(PoolDataSourceImpl.java:276)
at oracle.ucp.jdbc.PoolDataSourceImpl.getConnection(PoolDataSourceImpl.java:646)
at oracle.ucp.jdbc.PoolDataSourceImpl.getConnection(PoolDataSourceImpl.java:613)
at oracle.ucp.jdbc.PoolDataSourceImpl.getConnection(PoolDataSourceImpl.java:607)
at oracle.iam.platform.auth.impl.DBStore.getConnection(DBStore.java:131)
at oracle.iam.platform.auth.impl.DBStore.setSQLHint(DBStore.java:108)
at oracle.iam.platform.auth.impl.DBStore.(DBStore.java:63)
at oracle.iam.platform.auth.impl.DBStore.getInstance(DBStore.java:84)
at oracle.iam.platform.auth.impl.Authenticator.(Authenticator.java:87)
at oracle.iam.platform.auth.impl.Authenticator.getInstance(Authenticator.java:71)
at oracle.iam.platform.auth.providers.wls.OIMAssertionLoginModule.login(OIMAssertionLoginModule.java:40)
at com.bea.common.security.internal.service.LoginModuleWrapper$1.run(LoginModuleWrapper.java:110)
at com.bea.common.security.internal.service.LoginModuleWrapper.login(LoginModuleWrapper.java:106)
at sun.reflect.GeneratedMethodAccessor520.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at javax.security.auth.login.LoginContext.invoke(LoginContext.java:769)
at javax.security.auth.login.LoginContext.access$000(LoginContext.java:186)
at javax.security.auth.login.LoginContext$4.run(LoginContext.java:683)
at javax.security.auth.login.LoginContext.invokePriv(LoginContext.java:680)
at javax.security.auth.login.LoginContext.login(LoginContext.java:579)
at com.bea.common.security.internal.service.JAASLoginServiceImpl.login(JAASLoginServiceImpl.java:113)
at sun.reflect.GeneratedMethodAccessor509.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at com.bea.common.security.internal.utils.Delegator$ProxyInvocationHandler.invoke(Delegator.java:57)
at $Proxy22.login(Unknown Source)
at weblogic.security.service.internal.WLSJAASLoginServiceImpl$ServiceImpl.login(WLSJAASLoginServiceImpl.java:91)
at com.bea.common.security.internal.service.IdentityAssertionCallbackServiceImpl.assertIdentity(IdentityAssertionCallbackServiceImpl.java:142)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at com.bea.common.security.internal.utils.Delegator$ProxyInvocationHandler.invoke(Delegator.java:57)
at $Proxy23.assertIdentity(Unknown Source)
at com.bea.common.security.internal.service.IdentityAssertionServiceImpl.assertIdentity(IdentityAssertionServiceImpl.java:83)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at com.bea.common.security.internal.utils.Delegator$ProxyInvocationHandler.invoke(Delegator.java:57)
at $Proxy43.assertIdentity(Unknown Source)
at weblogic.security.service.WLSIdentityAssertionServiceWrapper.assertIdentity(WLSIdentityAssertionServiceWrapper.java:59)
at weblogic.security.service.PrincipalAuthenticator.assertIdentity(PrincipalAuthenticator.java:427)
at weblogic.servlet.security.internal.CertSecurityModule.assertIdentity(CertSecurityModule.java:140)
at weblogic.servlet.security.internal.CertSecurityModule.checkUserPerm(CertSecurityModule.java:71)
at weblogic.servlet.security.internal.ChainedSecurityModule.checkAccess(ChainedSecurityModule.java:89)
at weblogic.servlet.security.internal.ServletSecurityManager.checkAccess(ServletSecurityManager.java:82)
at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2204)
at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2174)
at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1446)
at weblogic.work.ExecuteThread.execute(ExecuteThread.java:201)
at weblogic.work.ExecuteThread.run(ExecuteThread.java:173)
Caused by: oracle.ucp.UniversalConnectionPoolException: Error during pool creation in Universal Connection Pool Manager MBean
at oracle.ucp.util.UCPErrorHandler.newUniversalConnectionPoolException(UCPErrorHandler.java:421)
at oracle.ucp.util.UCPErrorHandler.newUniversalConnectionPoolException(UCPErrorHandler.java:389)
at oracle.ucp.admin.UniversalConnectionPoolManagerMBeanImpl.createConnectionPool(UniversalConnectionPoolManagerMBeanImpl.java:361)
at oracle.ucp.jdbc.PoolDataSourceImpl.startPool(PoolDataSourceImpl.java:251)
… 52 more
Caused by: oracle.ucp.UniversalConnectionPoolException: Error during pool creation in Universal Connection Pool Manager
at oracle.ucp.util.UCPErrorHandler.newUniversalConnectionPoolException(UCPErrorHandler.java:421)
at oracle.ucp.util.UCPErrorHandler.newUniversalConnectionPoolException(UCPErrorHandler.java:389)
at oracle.ucp.admin.UniversalConnectionPoolManagerBase.createConnectionPool(UniversalConnectionPoolManagerBase.java:567)
at oracle.ucp.admin.UniversalConnectionPoolManagerMBeanImpl.createConnectionPool(UniversalConnectionPoolManagerMBeanImpl.java:348)
… 53 more
Caused by: oracle.ucp.UniversalConnectionPoolException: Universal Connection Pool already exists in the Universal Connection Pool Manager. Universal Connection Pool cannot be added to the Universal Connection Pool Manager
at oracle.ucp.util.UCPErrorHandler.newUniversalConnectionPoolException(UCPErrorHandler.java:421)
at oracle.ucp.util.UCPErrorHandler.newUniversalConnectionPoolException(UCPErrorHandler.java:389)
at oracle.ucp.util.UCPErrorHandler.newUniversalConnectionPoolException(UCPErrorHandler.java:403)
at oracle.ucp.admin.UniversalConnectionPoolManagerBase.setConnectionPool(UniversalConnectionPoolManagerBase.java:606)
at oracle.ucp.admin.UniversalConnectionPoolManagerBase.createConnectionPool(UniversalConnectionPoolManagerBase.java:563)
… 54 more

java.sql.SQLException: Unable to start the Universal Connection Pool: oracle.ucp.UniversalConnectionPoolException: Error during pool creation in Universal Connection Pool Manager MBean
at oracle.ucp.util.UCPErrorHandler.newSQLException(UCPErrorHandler.java:541)
at oracle.ucp.jdbc.PoolDataSourceImpl.throwSQLException(PoolDataSourceImpl.java:587)
at oracle.ucp.jdbc.PoolDataSourceImpl.startPool(PoolDataSourceImpl.java:276)
at oracle.ucp.jdbc.PoolDataSourceImpl.getConnection(PoolDataSourceImpl.java:646)
at oracle.ucp.jdbc.PoolDataSourceImpl.getConnection(PoolDataSourceImpl.java:613)
at oracle.ucp.jdbc.PoolDataSourceImpl.getConnection(PoolDataSourceImpl.java:607)
at oracle.iam.platform.auth.impl.DBStore.getConnection(DBStore.java:131)
at oracle.iam.platform.auth.impl.DBStore.setSQLHint(DBStore.java:108)
at oracle.iam.platform.auth.impl.DBStore.(DBStore.java:63)
at oracle.iam.platform.auth.impl.DBStore.getInstance(DBStore.java:84)
at oracle.iam.platform.auth.impl.Authenticator.(Authenticator.java:87)
at oracle.iam.platform.auth.impl.Authenticator.getInstance(Authenticator.java:71)
at oracle.iam.platform.auth.providers.wls.OIMAssertionLoginModule.login(OIMAssertionLoginModule.java:40)
at com.bea.common.security.internal.service.LoginModuleWrapper$1.run(LoginModuleWrapper.java:110)
at com.bea.common.security.internal.service.LoginModuleWrapper.login(LoginModuleWrapper.java:106)
at sun.reflect.GeneratedMethodAccessor520.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at javax.security.auth.login.LoginContext.invoke(LoginContext.java:769)
at javax.security.auth.login.LoginContext.access$000(LoginContext.java:186)
at javax.security.auth.login.LoginContext$4.run(LoginContext.java:683)
at javax.security.auth.login.LoginContext.invokePriv(LoginContext.java:680)
at javax.security.auth.login.LoginContext.login(LoginContext.java:579)
at com.bea.common.security.internal.service.JAASLoginServiceImpl.login(JAASLoginServiceImpl.java:113)
at sun.reflect.GeneratedMethodAccessor509.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at com.bea.common.security.internal.utils.Delegator$ProxyInvocationHandler.invoke(Delegator.java:57)
at $Proxy22.login(Unknown Source)
at weblogic.security.service.internal.WLSJAASLoginServiceImpl$ServiceImpl.login(WLSJAASLoginServiceImpl.java:91)
at com.bea.common.security.internal.service.IdentityAssertionCallbackServiceImpl.assertIdentity(IdentityAssertionCallbackServiceImpl.java:142)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at com.bea.common.security.internal.utils.Delegator$ProxyInvocationHandler.invoke(Delegator.java:57)
at $Proxy23.assertIdentity(Unknown Source)
at com.bea.common.security.internal.service.IdentityAssertionServiceImpl.assertIdentity(IdentityAssertionServiceImpl.java:83)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at com.bea.common.security.internal.utils.Delegator$ProxyInvocationHandler.invoke(Delegator.java:57)
at $Proxy43.assertIdentity(Unknown Source)
at weblogic.security.service.WLSIdentityAssertionServiceWrapper.assertIdentity(WLSIdentityAssertionServiceWrapper.java:59)
at weblogic.security.service.PrincipalAuthenticator.assertIdentity(PrincipalAuthenticator.java:427)
at weblogic.servlet.security.internal.CertSecurityModule.assertIdentity(CertSecurityModule.java:140)
at weblogic.servlet.security.internal.CertSecurityModule.checkUserPerm(CertSecurityModule.java:71)
at weblogic.servlet.security.internal.ChainedSecurityModule.checkAccess(ChainedSecurityModule.java:89)
at weblogic.servlet.security.internal.ServletSecurityManager.checkAccess(ServletSecurityManager.java:82)
at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2204)
at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2174)
at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1446)
at weblogic.work.ExecuteThread.execute(ExecuteThread.java:201)
at weblogic.work.ExecuteThread.run(ExecuteThread.java:173)
Caused by: oracle.ucp.UniversalConnectionPoolException: Error during pool creation in Universal Connection Pool Manager MBean
at oracle.ucp.util.UCPErrorHandler.newUniversalConnectionPoolException(UCPErrorHandler.java:421)
at oracle.ucp.util.UCPErrorHandler.newUniversalConnectionPoolException(UCPErrorHandler.java:389)
at oracle.ucp.admin.UniversalConnectionPoolManagerMBeanImpl.createConnectionPool(UniversalConnectionPoolManagerMBeanImpl.java:361)
at oracle.ucp.jdbc.PoolDataSourceImpl.startPool(PoolDataSourceImpl.java:251)
… 52 more
Caused by: oracle.ucp.UniversalConnectionPoolException: Error during pool creation in Universal Connection Pool Manager
at oracle.ucp.util.UCPErrorHandler.newUniversalConnectionPoolException(UCPErrorHandler.java:421)
at oracle.ucp.util.UCPErrorHandler.newUniversalConnectionPoolException(UCPErrorHandler.java:389)
at oracle.ucp.admin.UniversalConnectionPoolManagerBase.createConnectionPool(UniversalConnectionPoolManagerBase.java:567)
at oracle.ucp.admin.UniversalConnectionPoolManagerMBeanImpl.createConnectionPool(UniversalConnectionPoolManagerMBeanImpl.java:348)
… 53 more
Caused by: oracle.ucp.UniversalConnectionPoolException: Universal Connection Pool already exists in the Universal Connection Pool Manager. Universal Connection Pool cannot be added to the Universal Connection Pool Manager
at oracle.ucp.util.UCPErrorHandler.newUniversalConnectionPoolException(UCPErrorHandler.java:421)
at oracle.ucp.util.UCPErrorHandler.newUniversalConnectionPoolException(UCPErrorHandler.java:389)
at oracle.ucp.util.UCPErrorHandler.newUniversalConnectionPoolException(UCPErrorHandler.java:403)
at oracle.ucp.admin.UniversalConnectionPoolManagerBase.setConnectionPool(UniversalConnectionPoolManagerBase.java:606)
at oracle.ucp.admin.UniversalConnectionPoolManagerBase.createConnectionPool(UniversalConnectionPoolManagerBase.java:563)
… 54 more

java.sql.SQLException: Unable to start the Universal Connection Pool: oracle.ucp.UniversalConnectionPoolException: Error during pool creation in Universal Connection Pool Manager MBean
at oracle.ucp.util.UCPErrorHandler.newSQLException(UCPErrorHandler.java:541)
at oracle.ucp.jdbc.PoolDataSourceImpl.throwSQLException(PoolDataSourceImpl.java:587)
at oracle.ucp.jdbc.PoolDataSourceImpl.startPool(PoolDataSourceImpl.java:276)
at oracle.ucp.jdbc.PoolDataSourceImpl.getConnection(PoolDataSourceImpl.java:646)
at oracle.ucp.jdbc.PoolDataSourceImpl.getConnection(PoolDataSourceImpl.java:613)
at oracle.ucp.jdbc.PoolDataSourceImpl.getConnection(PoolDataSourceImpl.java:607)
at oracle.iam.platform.auth.impl.DBStore.getConnection(DBStore.java:131)
at oracle.iam.platform.auth.impl.DBStore.setSQLHint(DBStore.java:108)
at oracle.iam.platform.auth.impl.DBStore.(DBStore.java:63)
at oracle.iam.platform.auth.impl.DBStore.getInstance(DBStore.java:84)
at oracle.iam.platform.auth.impl.Authenticator.(Authenticator.java:87)
at oracle.iam.platform.auth.impl.Authenticator.getInstance(Authenticator.java:71)
at oracle.iam.platform.auth.providers.wls.OIMAssertionLoginModule.login(OIMAssertionLoginModule.java:40)
at com.bea.common.security.internal.service.LoginModuleWrapper$1.run(LoginModuleWrapper.java:110)
at com.bea.common.security.internal.service.LoginModuleWrapper.login(LoginModuleWrapper.java:106)
at sun.reflect.GeneratedMethodAccessor520.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at javax.security.auth.login.LoginContext.invoke(LoginContext.java:769)
at javax.security.auth.login.LoginContext.access$000(LoginContext.java:186)
at javax.security.auth.login.LoginContext$4.run(LoginContext.java:683)
at javax.security.auth.login.LoginContext.invokePriv(LoginContext.java:680)
at javax.security.auth.login.LoginContext.login(LoginContext.java:579)
at com.bea.common.security.internal.service.JAASLoginServiceImpl.login(JAASLoginServiceImpl.java:113)
at sun.reflect.GeneratedMethodAccessor509.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at com.bea.common.security.internal.utils.Delegator$ProxyInvocationHandler.invoke(Delegator.java:57)
at $Proxy22.login(Unknown Source)
at weblogic.security.service.internal.WLSJAASLoginServiceImpl$ServiceImpl.login(WLSJAASLoginServiceImpl.java:91)
at com.bea.common.security.internal.service.IdentityAssertionCallbackServiceImpl.assertIdentity(IdentityAssertionCallbackServiceImpl.java:142)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at com.bea.common.security.internal.utils.Delegator$ProxyInvocationHandler.invoke(Delegator.java:57)
at $Proxy23.assertIdentity(Unknown Source)
at com.bea.common.security.internal.service.IdentityAssertionServiceImpl.assertIdentity(IdentityAssertionServiceImpl.java:83)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at com.bea.common.security.internal.utils.Delegator$ProxyInvocationHandler.invoke(Delegator.java:57)
at $Proxy43.assertIdentity(Unknown Source)
at weblogic.security.service.WLSIdentityAssertionServiceWrapper.assertIdentity(WLSIdentityAssertionServiceWrapper.java:59)
at weblogic.security.service.PrincipalAuthenticator.assertIdentity(PrincipalAuthenticator.java:427)
at weblogic.servlet.security.internal.CertSecurityModule.assertIdentity(CertSecurityModule.java:140)
at weblogic.servlet.security.internal.CertSecurityModule.checkUserPerm(CertSecurityModule.java:71)
at weblogic.servlet.security.internal.ChainedSecurityModule.checkAccess(ChainedSecurityModule.java:89)
at weblogic.servlet.security.internal.ServletSecurityManager.checkAccess(ServletSecurityManager.java:82)
at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2204)
at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2174)
at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1446)
at weblogic.work.ExecuteThread.execute(ExecuteThread.java:201)
at weblogic.work.ExecuteThread.run(ExecuteThread.java:173)
Caused by: oracle.ucp.UniversalConnectionPoolException: Error during pool creation in Universal Connection Pool Manager MBean
at oracle.ucp.util.UCPErrorHandler.newUniversalConnectionPoolException(UCPErrorHandler.java:421)
at oracle.ucp.util.UCPErrorHandler.newUniversalConnectionPoolException(UCPErrorHandler.java:389)
at oracle.ucp.admin.UniversalConnectionPoolManagerMBeanImpl.createConnectionPool(UniversalConnectionPoolManagerMBeanImpl.java:361)
at oracle.ucp.jdbc.PoolDataSourceImpl.startPool(PoolDataSourceImpl.java:251)
… 52 more
Caused by: oracle.ucp.UniversalConnectionPoolException: Error during pool creation in Universal Connection Pool Manager
at oracle.ucp.util.UCPErrorHandler.newUniversalConnectionPoolException(UCPErrorHandler.java:421)
at oracle.ucp.util.UCPErrorHandler.newUniversalConnectionPoolException(UCPErrorHandler.java:389)
at oracle.ucp.admin.UniversalConnectionPoolManagerBase.createConnectionPool(UniversalConnectionPoolManagerBase.java:567)
at oracle.ucp.admin.UniversalConnectionPoolManagerMBeanImpl.createConnectionPool(UniversalConnectionPoolManagerMBeanImpl.java:348)
… 53 more
Caused by: oracle.ucp.UniversalConnectionPoolException: Universal Connection Pool already exists in the Universal Connection Pool Manager. Universal Connection Pool cannot be added to the Universal Connection Pool Manager
at oracle.ucp.util.UCPErrorHandler.newUniversalConnectionPoolException(UCPErrorHandler.java:421)
at oracle.ucp.util.UCPErrorHandler.newUniversalConnectionPoolException(UCPErrorHandler.java:389)
at oracle.ucp.util.UCPErrorHandler.newUniversalConnectionPoolException(UCPErrorHandler.java:403)
at oracle.ucp.admin.UniversalConnectionPoolManagerBase.setConnectionPool(UniversalConnectionPoolManagerBase.java:606)
at oracle.ucp.admin.UniversalConnectionPoolManagerBase.createConnectionPool(UniversalConnectionPoolManagerBase.java:563)
… 54 more

java.sql.SQLException: Unable to start the Universal Connection Pool: oracle.ucp.UniversalConnectionPoolException: Error during pool creation in Universal Connection Pool Manager MBean
at oracle.ucp.util.UCPErrorHandler.newSQLException(UCPErrorHandler.java:541)
at oracle.ucp.jdbc.PoolDataSourceImpl.throwSQLException(PoolDataSourceImpl.java:587)
at oracle.ucp.jdbc.PoolDataSourceImpl.startPool(PoolDataSourceImpl.java:276)
at oracle.ucp.jdbc.PoolDataSourceImpl.getConnection(PoolDataSourceImpl.java:646)
at oracle.ucp.jdbc.PoolDataSourceImpl.getConnection(PoolDataSourceImpl.java:613)
at oracle.ucp.jdbc.PoolDataSourceImpl.getConnection(PoolDataSourceImpl.java:607)
at oracle.iam.platform.auth.impl.DBStore.getConnection(DBStore.java:131)
at oracle.iam.platform.auth.impl.DBStore.setSQLHint(DBStore.java:108)
at oracle.iam.platform.auth.impl.DBStore.(DBStore.java:63)
at oracle.iam.platform.auth.impl.DBStore.getInstance(DBStore.java:84)
at oracle.iam.platform.auth.impl.Authenticator.(Authenticator.java:87)
at oracle.iam.platform.auth.impl.Authenticator.getInstance(Authenticator.java:71)
at oracle.iam.platform.auth.providers.wls.OIMAssertionLoginModule.login(OIMAssertionLoginModule.java:40)
at com.bea.common.security.internal.service.LoginModuleWrapper$1.run(LoginModuleWrapper.java:110)
at com.bea.common.security.internal.service.LoginModuleWrapper.login(LoginModuleWrapper.java:106)
at sun.reflect.GeneratedMethodAccessor520.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at javax.security.auth.login.LoginContext.invoke(LoginContext.java:769)
at javax.security.auth.login.LoginContext.access$000(LoginContext.java:186)
at javax.security.auth.login.LoginContext$4.run(LoginContext.java:683)
at javax.security.auth.login.LoginContext.invokePriv(LoginContext.java:680)
at javax.security.auth.login.LoginContext.login(LoginContext.java:579)
at com.bea.common.security.internal.service.JAASLoginServiceImpl.login(JAASLoginServiceImpl.java:113)
at sun.reflect.GeneratedMethodAccessor509.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at com.bea.common.security.internal.utils.Delegator$ProxyInvocationHandler.invoke(Delegator.java:57)
at $Proxy22.login(Unknown Source)
at weblogic.security.service.internal.WLSJAASLoginServiceImpl$ServiceImpl.login(WLSJAASLoginServiceImpl.java:91)
at com.bea.common.security.internal.service.IdentityAssertionCallbackServiceImpl.assertIdentity(IdentityAssertionCallbackServiceImpl.java:142)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at com.bea.common.security.internal.utils.Delegator$ProxyInvocationHandler.invoke(Delegator.java:57)
at $Proxy23.assertIdentity(Unknown Source)
at com.bea.common.security.internal.service.IdentityAssertionServiceImpl.assertIdentity(IdentityAssertionServiceImpl.java:83)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at com.bea.common.security.internal.utils.Delegator$ProxyInvocationHandler.invoke(Delegator.java:57)
at $Proxy43.assertIdentity(Unknown Source)
at weblogic.security.service.WLSIdentityAssertionServiceWrapper.assertIdentity(WLSIdentityAssertionServiceWrapper.java:59)
at weblogic.security.service.PrincipalAuthenticator.assertIdentity(PrincipalAuthenticator.java:427)
at weblogic.servlet.security.internal.CertSecurityModule.assertIdentity(CertSecurityModule.java:140)
at weblogic.servlet.security.internal.CertSecurityModule.checkUserPerm(CertSecurityModule.java:71)
at weblogic.servlet.security.internal.ChainedSecurityModule.checkAccess(ChainedSecurityModule.java:89)
at weblogic.servlet.security.internal.ServletSecurityManager.checkAccess(ServletSecurityManager.java:82)
at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2204)
at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2174)
at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1446)
at weblogic.work.ExecuteThread.execute(ExecuteThread.java:201)
at weblogic.work.ExecuteThread.run(ExecuteThread.java:173)
Caused by: oracle.ucp.UniversalConnectionPoolException: Error during pool creation in Universal Connection Pool Manager MBean
at oracle.ucp.util.UCPErrorHandler.newUniversalConnectionPoolException(UCPErrorHandler.java:421)
at oracle.ucp.util.UCPErrorHandler.newUniversalConnectionPoolException(UCPErrorHandler.java:389)
at oracle.ucp.admin.UniversalConnectionPoolManagerMBeanImpl.createConnectionPool(UniversalConnectionPoolManagerMBeanImpl.java:361)
at oracle.ucp.jdbc.PoolDataSourceImpl.startPool(PoolDataSourceImpl.java:251)
… 52 more
Caused by: oracle.ucp.UniversalConnectionPoolException: Error during pool creation in Universal Connection Pool Manager
at oracle.ucp.util.UCPErrorHandler.newUniversalConnectionPoolException(UCPErrorHandler.java:421)
at oracle.ucp.util.UCPErrorHandler.newUniversalConnectionPoolException(UCPErrorHandler.java:389)
at oracle.ucp.admin.UniversalConnectionPoolManagerBase.createConnectionPool(UniversalConnectionPoolManagerBase.java:567)
at oracle.ucp.admin.UniversalConnectionPoolManagerMBeanImpl.createConnectionPool(UniversalConnectionPoolManagerMBeanImpl.java:348)
… 53 more
Caused by: oracle.ucp.UniversalConnectionPoolException: Universal Connection Pool already exists in the Universal Connection Pool Manager. Universal Connection Pool cannot be added to the Universal Connection Pool Manager
at oracle.ucp.util.UCPErrorHandler.newUniversalConnectionPoolException(UCPErrorHandler.java:421)
at oracle.ucp.util.UCPErrorHandler.newUniversalConnectionPoolException(UCPErrorHandler.java:389)
at oracle.ucp.util.UCPErrorHandler.newUniversalConnectionPoolException(UCPErrorHandler.java:403)
at oracle.ucp.admin.UniversalConnectionPoolManagerBase.setConnectionPool(UniversalConnectionPoolManagerBase.java:606)
at oracle.ucp.admin.UniversalConnectionPoolManagerBase.createConnectionPool(UniversalConnectionPoolManagerBase.java:563)
… 54 more
<Sep 15, 2011 10:18:

Hello:
Great site you have with lots of tips, I installed OIM 11g for testing purposes with (Oracle DB 11g-R2, RCU-11.1.1.5.0, and WebLogic server 1035, SOA-11.1.1.5.0, OIM-idm_win_11.1.1.2.0 patched with idm-11.1.1.2.0 and iam-11.1.1.5.0 ) on VirtualBox with server 2003 running JDK 6u-23:
When trying to run OIM Client console I get the following error:

\’classpath\’ is not recognized as an internal or external command,
operable program or batch file.
Exception in thread \”main\” java.lang.NoClassDefFoundError: com/thortech/xl/clien
t/base/tcAppWindow
Caused by: java.lang.ClassNotFoundException: com.thortech.xl.client.base.tcAppWi
ndow
at java.net.URLClassLoader$1.run(URLClassLoader.java:202)
at java.security.AccessController.doPrivileged(Native Method)
at java.net.URLClassLoader.findClass(URLClassLoader.java:190)
at java.lang.ClassLoader.loadClass(ClassLoader.java:307)
at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:301)
at java.lang.ClassLoader.loadClass(ClassLoader.java:248)
Could not find the main class: com.thortech.xl.client.base.tcAppWindow. Program
will exit.

wls server run fine, I can log to the DB server fine
wls oim and soa servers do change to running status as well.

Any suggestions with this will be greatly appreciated.

@ ayham,
Did you create wlfullclient.cmd on server and copied it to machine where you are installing design console ?

check http://onlineappsdba.com/index.php/2010/10/11/part-vii-install-configure-oim-design-console-oracleidm-11g-step-by-step-installation-of-oam-oim-oaam-oapm-oin/

Hi Atul,

Your site helped me in most of the cases. One more issue was there in our environment during OIM configuration.

We have installed OIM, OID, OVD, OAM, SOA, BIP suites and then configured one after the other. Each step, I have verified if they are working. I could able to login OIM console for the first time. I stopped the managed server, then did the next steps of configuration related to OAM. After starting WLS 10.3.5 and OIM, the login page appeared. But, I could not login with xelsysadm user with the given password. It stays on the same login screen showing Invalid signin exception. In the logs, the exception was: user – xelsysadm login denied. Also, during the startup of oim managed server, it threw an exception – user oiminternal login denied.

When I checked in the wls console in the security realms, the providers listed were:
IAMSuiteAgent – Have changed it to optional
Default Authenticator – Optional
DefaultIdentityAsserter

There is no OIMAuthenticationProvider in the list. Is this causing any error to login with xelsysadm user?

Thanks for the help !!!

Vamsi.

Hi Atul,
Installed all product but i want to use embedded ldap not OID. in this case do i need any OAM&OIM integration ? I could not see “enable identity administration integration with OAM” option at OIM config step 6 page.

Thanks.

@ kerim kendirli,
OAM/OIM integration is required if you wish to use forgot password and user management with application.

This integration is also required of you wish to access OIM application using SSO.

OIM/OAM integration has nothing to do with which LDAP server you use (Weblogic’s Embedded LDAP or OID)

Hi again,
I am little bit confused.
Now I see that OAM and OIM already integrated because when i want to login OIM console sso login page appears. I do not do any think for that it is autoconfigured because
I installed OAM&OIM same domain on same machine.
in his case can i use embedded ldap for OAM and OIM ? I think I am not using because when I create user from OIM I can not see that user from OAM.
is it possible using embedded ldap for OAM&OIM without OID?
is it necessary to use OID or another ldap solution. I could not find any example for that.

Thank you

Hi Atul,

I am getting “java.io.IOException: [Management:141245]Schema Validation Error in config/config.xml see log for details. Schema validation can be disabled by starting the server with the command line option: -Dweblogic.configuration.schemaValidationEnabled=false” error while configuring OIM as a Remote managed server. After I extend the domain, pack and unpack I ran config wizard on remote machine. But I see “Activate Changes” button highlighted in WL console and when I activate I am getting the above error.
Pls help reg this as I am stuck here since long and unable to login into OIM Console.
-Madhu

Hi Atul,

I am getting “java.io.IOException: [Management:141245]Schema Validation Error in config/config.xml see log for details. Schema validation can be disabled by starting the server with the command line option: -Dweblogic.configuration.schemaValidationEnabled=false” error while configuring OIM as a Remote managed server. After I extend the domain, pack and unpack I ran config wizard on remote machine. But I see “Activate Changes” button highlighted in WL console and when I activate I am getting the above error.

Pls help reg this as I am stuck here since long and unable to login into OIM Console.
-Madhu K

@ Kerim Kendirli,
When you install OAM & OIM in same weblogic domain, OAM automatically creates WebGate Agent of type j2ee called as IAMSuiteAgent. If you start OAM server then this IAMSuite agent will protect application including IAM.

If you don’t want OIM to go to OAM login page then delete this agent IAMSuiteAgent from WebLogic (authentication providers). When you delete this agent OIM will use its own authentication engine and will validate user credential against USR table in OIM schema.

If you want OIM to login via OAM then OID (or supported LDAP server like AD) is mandatory and OIM should sync users between its own repository and LDAP server. OAM should be configured to authenticate against this LDAP server (OAM by default authenticates against weblogic embedded ldap server)

still confused 🙂
I am new at OAM sorry for my question. maybe it is simple for you but i am new.
it is not problem with login to OIM with sso.

First of all i do not want to use unnecessary components because of complexity.
İf i can use embedded ldap for OAM and OIM i do not want to use OID&OVD or why must i use OID&OVD.

if OIM and OAM using same weblogic embedded ldap store why i could not see same users/groups from OAM and OIM. i sad that before i created new user from OIM but i could not see that user from OAM. maybe i am missing something.

weblogic 10.3.5
soa 11.1.1.5
oam11g 11.1.1.5

Thanks.

@ kerim,
No issues, I had similar questions few years back and I learnt it in hard way by myself.

You said : If OIM and OAM using same weblogic embedded ldap store.

No, OIM doesn’t use embedded ldap store of weblogic. OIM has its own username/password in OIM schema. There is additional authenticator OIMAuthenticator in weblogic (comes as part of OIM configuration) which is used to validated OIM/username password stored in OIM schema. This authentication happens when users login via OIM authentication screen.

You said: If OIM and OAM using same weblogic embedded ldap store why i could not see same users/groups from OAM and OIM.

This is because your assumption that OIM and OAM uses same weblogic embedded ldap store is wrong, they don’t

Atul,

I am using Weblogic 10.3.5 and OIM 11.1.1.5.0

Thanks,
Madhu Kidambi

Hi Atul,

Could you pls reply to my query reg the Schema Validation error? I am getting this error though I use the combination of Weblogic 10.3.5 and OIM 11.1.1.5.0.

Pls help me

Thanks,
Madhu Kidambi

Hi Atul,

Hi,

I am a new bie to OIM.

I have an approval process that has 3 levels of approval. In the 1st level the request sholud be assigned to all the users present in the “initial Approvers” group. I have developed a SOA composite for that and delpoyed,registered the composite.

When I raise a request, the request is failing with the following two errors.

1st Error:

Please help me in resolving this issue.

Thanks,
Preeti

Please find the error below for the above query

Hi Atul,

I am unable to paste the error message.I am typing the exception here

javax.security.auth.loginexception:
java.net.connectException:
t3://localhost:14000:Destination unreachable;
nested exception is :
java.net.ConnectException:Connection refused: connect; No available router to destination

Check if OIM server is running and if yes on what port (default is 14000) ?

Check if there is anything listening on port 14000

netstat -an | grep 14000

Update content of /etc/hosts (I am assuming OIM/SOA is on Unix)

I am assuming SOA and OIM are on same server so localhost should work.

Hi Atul,

Thanks for your reply. The issue is resolved now.

I have one more query in Approval process.I have created a SOA composite and deployed it.For the 1st level of approval I need to get the list of approvers from the group “Initial Approvers”.I am getting the data and when I raise a request I am getting an exception.

Following is the exception.

<> < <
com.oracle.bpel.client.BPELFault: faultName: {{http://schemas.xmlsoap.org/ws/2003/03/business-process/}selectionFailure}
messageType: {{http://schemas.oracle.com/bpel/extension}RuntimeFaultMessage}
parts: {{
summary=XPath query string returns zero node.
The assign activity of the to node query is returning zero node.
Either the to node data or the xpath query in the to node was invalid.
According to BPEL4WS spec 1.1 section 14.3, verify the to node value at line number 344 in the BPEL source.
}

Following is the code

Please help me in resolving this issue.
Thanks in Advance for your help.

Thanks,
Preeti

Following is the code

Hi Atul,

Please find the error message below.

com.oracle.bpel.client.BPELFault: faultName: {{http://schemas.xmlsoap.org/ws/2003/03/business-process/}selectionFailure}
messageType: {{http://schemas.oracle.com/bpel/extension}RuntimeFaultMessage}
parts: {{
summary=XPath query string returns zero node.
The assign activity of the to node query is returning zero node.
Either the to node data or the xpath query in the to node was invalid.
According to BPEL4WS spec 1.1 section 14.3, verify the to node value at line number 360 in the BPEL source.
}

at com.collaxa.cube.engine.ext.bpel.common.BPELWMPHelper.copy(BPELWMPHelper.java:2009)
at com.collaxa.cube.engine.ext.bpel.common.BPELWMPHelper.performCopyTo(BPELWMPHelper.java:532)
at com.collaxa.cube.engine.ext.bpel.v1.wmp.BPEL1AssignWMP.__executeStatements(BPEL1AssignWMP.java:213)
at com.collaxa.cube.engine.ext.bpel.common.wmp.BaseBPELActivityWMP.perform(BaseBPELActivityWMP.java:158)
at com.collaxa.cube.engine.CubeEngine.performActivity(CubeEngine.java:2543)
at com.collaxa.cube.engine.CubeEngine._handleWorkItem(CubeEngine.java:1166)
at com.collaxa.cube.engine.CubeEngine.handleWorkItem(CubeEngine.java:1071)
at com.collaxa.cube.engine.dispatch.message.instance.PerformMessageHandler.handleLocal(PerformMessageHandler.java:73)
at com.collaxa.cube.engine.dispatch.DispatchHelper.handleLocalMessage(DispatchHelper.java:220)
at com.collaxa.cube.engine.dispatch.DispatchHelper.sendMemory(DispatchHelper.java:328)
at com.collaxa.cube.engine.CubeEngine.endRequest(CubeEngine.java:4430)
at com.collaxa.cube.engine.CubeEngine.endRequest(CubeEngine.java:4362)
at com.collaxa.cube.engine.CubeEngine._createAndInvoke(CubeEngine.java:698)
at com.collaxa.cube.engine.CubeEngineSecurityManager$2.run(CubeEngineSecurityManager.java:85)
at javax.security.auth.Subject.doAsPrivileged(Subject.java:517)
at oracle.security.jps.internal.jaas.AccActionExecutor.execute(AccActionExecutor.java:47)
at oracle.security.jps.internal.jaas.CascadeActionExecutor$SubjectPrivilegedExceptionAction.run(CascadeActionExecutor.java:79)
at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:146)

code:

Thanks,
Preeti

Hi Atul,

I am facing an issue after extending the Domain (Which is already having OIM configured) with OAM and with Clustered setup. WL Admin Server, OIM Cluster and OAM Cluster are distributed on diff. machines

After extending the domain (packing and unpacking the domain), I am getting a Coherence error “Oracle Coherence GE 3.5.3/465p2 Terminating ClusterService due to unhandled exception: oracle.security.am.foundation.map.exceptions.MapRuntimeException” while starting the WL Admin Server

Could you pls help on resolving this?

Hi Atul,

Thanks for your response.

Sure I will go thru the Metalink Doc.
The two machines are in the same subnet.

Actually I am trying to configure all the IDM and IDAM (including Web tier) components in a single domain for a PoC purpose though its not recommended or used in Prod.

I have recently found that I am getting problems with having OIM and OAM in the same domain (But with distributed managed servers)

When I configure OIM First and then OAM I am getting Cohernce Cluster related Issues.

When I configure OAM First and then OIM I am getting Schema Validation errors after finishing OIM configuration wizard from remote machine.

Pls share your thoughts on this.

-Madhu Kidambi

Atul,

I have mentioned that having IDM components and IAM components in the single domain is not recommended (Mentioned in EDG itself)not the IAM components(OIM & OAM) in a single domain.

Just for sake I have mentioned.

As you told the issue is something which I am unable to figure it out. Is there any possibility that I can send you my logs so that you can have a look and help me?

I hope I cannot attach the log file here.

Will it be fine with you if I send my log files to atul@onlineappsdba.com ??

Hi,

I did all steps all right and without errors.

I fail on the last step. My weblogic admin users is called “wlsadmin”. When I try to start Managed server (startManagedServer.bat oim_server1 http://localhost:14000), I am prompted to enter weblogic admin, but it says that “wlsadmin is not found” and managed server stops..

Hi Atul, I noticed that in OIM, by default users requests are not going to the immediate managers. All requests are going to the OIM admin xelsysadm. Looks like it is bug. So, we will have to change the SOA composite to redierect the approval to manager ? I read it somewhere else also someone changing it but I thought of confirming from you.

Appreciate your input.

thanks
Jyothi

Atul, como estas? necesito ayuda, despues que instalé el OIM y reinicié los server correspondientes, cuando voy al navegador y le especifico la url, con el puerto y todo, me da un error:

Error 404–Not Found
From RFC 2068 Hypertext Transfer Protocol — HTTP/1.1:
10.4.5 404 Not Found
The server has not found anything matching the Request-URI. No indication is given of whether the condition is temporary or permanent.

If the server does not wish to make this information available to the client, the status code 403 (Forbidden) can be used instead. The 410 (Gone) status code SHOULD be used if the server knows, through some internally configurable mechanism, that an old resource is permanently unavailable and has no forwarding address.

¿Qué será esto?
Puede ayudarme al respecto.

Saludos y gracias de antemano.

Especificarle que no tengo ningún OVD, puedo trabajar conectandome a un OID solamente?
Como realizar esa configuración?
Gracias nuevamente

Hi Atul,

I am facing Issue in OIM Configuration at last step.

after clicking on config error “config Action Oracle Identity Manager Configuration Failed”,

Summarizing,

1. Install Weblogic 10.3.6
2. Database Schemas Creation by RCU 11.1.1.6.0
3. Install Oracle Identity Management 11.1.1.6.0
4. Install Oracle Identity and Access Management 11.1.1.5.0
5. Install SOA Suite
6. Configuration and Domain creation by bin/config.sh utility of Oracle Identity Management
7. Extending domain adding Oracle Identity Manager and SOA Components
8. Configuration of OIMServer by bin/config.sh utility of Oracle Identity and Access Management

error in the 8th step after clicking on config “config Action Oracle Identity Manager Configuration Failed”,

Help Appreciated.

@IgnitedMind

Remove everything including database and change make two MW_HOME & two domain (one for IDAM and second for IDM)

1. Install Weblogic 10.3.6 -> Change this to 10.3.5
2. Database Schemas Creation by RCU 11.1.1.6.0 –> change this to 11.1.1.5.2 (or 11.1.1.5 if avaulable)
3. Install Oracle Identity & Access Management 11.1.1.5.0
4. Install Oracle SOA 11.1.1.5.0 –

Second domain with second Middleware home

1. Install Weblogic 10.3.6
2. Database Schemas Creation by RCU 11.1.1.6.0
3. Install Oracle Identity Management 11.1.1.6.0

Both IDAM & IDM works in same MW_HOME and domain but there are some addiitonal patches and it is more clean to keep IDAM & IDM separately

3. Install Oracle Identity Management 11.1.1.6.0 ->

Thanks Autl quick response. Now I understood “Different version Different Middleware”.

Hi Atul, Have one doubt here.

after completing Identity management part, while IAM configuration, there is a screen ‘Configuration Administration Server’ which has fields like
Name: AdminServer
port: 7001,

my doubt is as already Admin Server (while working on Identiy Management Part) is listening on 7001,
1. Should I select Admin Server Configuration option here?
2. If i select, should i use different port ?

after this I will have two admin server listening on different port.

Help appreciated.

Hi Atul,

I installed and configured OAM/OIM successfully on the same host, I can open OIM login page via: http://hostname:14000/oim. However, I am facing an issue when I login with xelsysadm user, the Login page auto redirect to http://fusion01:14000/oim/faces/pages/Self.jspx and display “Error 403–Forbidden”.
I also tried http://fusion01:14000/admin/faces/pages/Admin.jspx, the error is the same “Error 403–Forbidden”.

Could you give me advice?
Thanks.

Hi Atul,

Sub: ./startManagedWeblogic.sh soa_server1 fails

We are setting up an OIM 11g R2 environment, and we have 2 Middleware homes,over the RHEL6.4

Middleware1 for OUD
Middleware2 for OIM, OAM components

Database has been installed on a different server(s), which is on Active – Passive mode.

We had completed the OUD and ODSM part, and is good, over the Middleware1

When started to perform the OUI configuration, it mandated the SOA server start. we run the command ./startManagedWeblogic.sh soa_server1 from the Middleware2 path under the base_domain/bin. it fails with the errors codes as below

&

Please advice.

Hi

I am working on setup of OIM 11.1.1.7.0

The other products versions I am using ar as follows:

Oracle Database: 11.2.0.1

Oracle Identity Management : 11.1.1.7.0

Oracle SOA: 11.1.1.7.0

RCU: 11.1.1.7.0

Oracle Weblogic Server: 10.3.6.0

I installed Oracle Weblgic server, installed database, run RCU, installed OIM, installed SOA, configured Weblogic domain.

But after on this configuring OIM server, I am getting error that Configure OIM Server failed

In inventory logs, the error is

[2014-04-01T17:03:16.466+05:30] [as] [NOTIFICATION] [] [oracle.as.provisioning] [tid: 52] [ecid: 0000KKT47jLFw015zvs1yW1JEeDW000003,0] [OIM_CONFIG] Update the SOA Mbean with OIM JPS-CONTEXT Failed.

Please help me on this. I am stucked here from 3-4 days. not getting any fix