Invalid credential while trying to login into OAM console

Today I have faced issue like unable to login into OAM using admin user.

Environment Details

We have installed the base version of osinfra application server (version: 101401) and then we applied osinfra patch (p7215628_101430_LINUX) and installed OAM components successfully. Later we tried to login into access console but we didn’t able to login. The ERROS is invalid credential.

Cause:Base version of OID is 10.1.4.0.1 and we upgrade into 10.1.4.3, so a new tuning attribute “orclinmemfiltprocess” was introduced. This attribute can help the performance of certain types of search operations and it’s a useful one with OAM, as some of the searches OAM performs can be especially expensive in the database without the use of “orclinmemfiltprocess“.

In every OAM/OID deployment, the following modification should be performed.

Solution:

./ldapmodify –h -p –D cn=orcladmin –w -v <EOF dn: cn=dsaconfig,cn=configsets,cn=oracle internet directory changetype: modify replace: orclinmemfiltprocess orclinmemfiltprocess:(|(!(obuseraccountcontrol=*))(obuseraccountcontrol=activated)) orclinmemfiltprocess:(|(obuseraccountcontrol=activated)(!(obuseraccountcontrol=*))) orclinmemfiltprocess:(obapp=groupservcenter)(!(obdynamicparticipantsset=*)) orclinmemfiltprocess:(objectclass=oblixworkflowinstance) orclinmemfiltprocess:(objectclass=inetorgperson) orclinmemfiltprocess:(objectclass=oblixorgperson) orclinmemfiltprocess:(objectclass=oblixworkflowstepinstance) EOF

Note that there should not be space at the end of the line for any attribute value.

Metalink:558040.1

About the Author sarath

An Oracle Identity and Access Management professional, having working on Oracle Access Manager Single Sign-On implementations, Installation/Configuration of Identity Server, Web Pass, Web Gate, Access Gate, Policy Manager, Access Server, Policy Domains, Authentication /Authorization schemes, Single Sign-On (single and multi-domain), OIM, OVD, OID, OAAM, OIF, High Availability/Failover/ SSL deployment.

Leave a Comment:

13 comments
Kumar says October 2, 2012

Hi, I am unable to login through http://servername:7001/oamconsole. Login screen comes back without any error.
Admin server is running and stoped the OAM server. I feel, when login, it trys to authenticate through OAM server instead of directly authenticate to Default Embedded LDAP.
http://servername:7001/em works fine
http://servername:7001/console works fine
Could you help me to fix it

Reply
Kumar says October 2, 2012

username: weblogic
password:

I don’t know which OAM’s system store pointing to, because unable to login to OAMCONSOLE

Reply
Kumar says October 3, 2012

My domain have Admin server & OAM server. OAM server is down. Using default weblogic embedded LADAP.

Now trying to login using user “weblogic”,
http://servername:7001/oamconsole – unable to login. can you explain how this applicatin trys to authenticate. What are the components are invoked.

http://servername:7001/em – able to login
http://servername:7001/comsole – able to login

Reply
    Atul Kumar says October 3, 2012

    @ Kumar,
    If you have OAM 11g with default embedded LDAP server then weblgoic shoiuld work . How are you checking that OAM is configured with embedded LDAP and not with external LDAP .

    If this is embedded ldap server that comes with weblogic then oamconsole should work. If this is not working then see Admin Server log

    Reply
Kumar says October 3, 2012

Caused By: oracle.security.am.engines.common.identity.provider.exceptions.IdentityProviderException: OAMSSA-20005: Error initializing User/Role API : null.

Reply
Kumar says October 3, 2012

OAMSSA-20007: Unable to connect to the User Store. User Store may not be initialized : Error initializing User/Role API : null..

Reply
oamoracloim says November 12, 2012

I am receiving invalid credential to the OAM 10g console. I am logging in with orcladmin credentials. This was working fine until a power outage and the servers running OAM and OID came down.

Reply
    Atul Kumar says November 12, 2012

    @oamoracloim,
    Check if you can login to OID (ldapbind) using cn=orcladmin . What version of OID do you have ?

    Reply
sunil sharma says February 1, 2013

Hi Gurus,
When i login to oim console with xelsysadm it gives me invalid sign in error.All this happen in base_domain1.but when i open oim console in base_domain it works fine.It is not due to more attempt to login. please suggest me correct sloution for it,As my friend also suffering from same issue they just install everything.But i want to know the proper solution.Thanks in advance. I am new to idm.

Reply
sunil sharma says February 1, 2013

Hi Gurus,
When i login to oim console with xelsysadm it gives me invalid sign in error.All this happen in base_domain1.but when i open oim console in base_domain it works fine.It is not due to more attempt to login. please suggest me correct sloution for it,As my friend also suffering from same issue they just install everything.But i want to know the proper solution.Thanks in advance. I am new to idm.Ya its completed isuue for us.We dont have any oracle support.It’s a part of our training.

Reply
Ram says June 28, 2014

Hi Atul,

Iam not able to login through single signon to EBS test database after the EBS test database was refreshed with production. Iam getting the following error: Could not get user : rgadiyarada,
idstore: OIDSB, with exception: oracle.security.idm.ObjectNotFoundException: No User found matching the criteria.
RGADIYARADA is my id which is there in OID and I don’t have any logon problems in oid or oamconsole. But the problem is present only when I try to log into EBS using single sign on. Can you please help me diagnose this problem?

Thanks

Ram

Reply
Add Your Reply

Not found