{"id":2117,"date":"2010-09-20T09:33:19","date_gmt":"2010-09-20T13:33:19","guid":{"rendered":"http:\/\/onlineappsdba.com\/index.php\/2010\/09\/20\/oid-11g-down-unable-to-start-oid-11g-using-opmn-ods-schema-locked-ora-28002\/"},"modified":"2010-09-20T09:45:24","modified_gmt":"2010-09-20T13:45:24","slug":"oid-11g-down-unable-to-start-oid-11g-using-opmn-ods-schema-locked-ora-28002","status":"publish","type":"post","link":"https:\/\/onlineappsdba.com\/index.php\/2010\/09\/20\/oid-11g-down-unable-to-start-oid-11g-using-opmn-ods-schema-locked-ora-28002\/","title":{"rendered":"OID 11g Down : Unable to Start OID 11g using OPMN (ODS schema locked ORA-28002)"},"content":{"rendered":"

This post covers OID 11g start-up issue<\/strong> caused by password policy in OID database .<\/p>\n

OID 11g :<\/strong> Oracle Internet Directory <\/strong>is LDAP (Lightweight Directory Access Protocol)\u00a0compliant directory server with Oracle Database as repository and managed via OPMN<\/strong> (Oracle Process Manager and Notification) . For step by step installation on OID 11g<\/strong> click here<\/a><\/p>\n

MW_HOME<\/strong> : This is directory under which you install WebLogic<\/strong> & Oracle Identity Management Product (OID, OVD, DIP, OIM, OAM, OIF ….). MW_HOME is created during weblogic installation.
\nORACLE_HOME<\/strong> : This is directory under MW_HOME (usually MW_HOME\/Oracle_IDM1<\/font>) which contains software\/binaries for OID\/OVD\/OIF\/…
\nORACLE_INSTANCE<\/strong>: This is directory (usually under $MW_HOME\/asinst_1 but can be even outside MW_HOME<\/font>) which contains runtime configuration file and log file .<\/p>\n

.
\nThings good to know for OID<\/u><\/strong><\/p>\n

1.<\/strong>OID consist of middle tier processes oidldapd<\/strong>, oidmon<\/strong> process and Oracle Database as repository.<\/p>\n

2. <\/strong>opmnctl<\/strong> (part of OPMN) is used to start\/stop and manage OID 11g<\/p>\n

3. <\/strong>OID 11g uses OIDDB<\/strong> (as tns alias) from $ORACLE_INSTANCE\/config\/tnsnames.ora<\/p>\n

4.<\/strong> OID schema name is ODS<\/p>\n

5. <\/strong>OID status is stored in ods_process_status<\/strong> table in ODS schema<\/p>\n

6. <\/strong>OID 11g logs are in $ORACLE_INSTANCE\/diagnostics\/logs\/OID\/[oid1]\/oidXXXXX.log<\/p>\n

7. <\/strong>OID Middle Tier Processes connect to database (ODS schema) using password in $ORACLE_INSTANCE\/OID\/admin\/oidpwdXXXXXX<\/p>\n

8. <\/strong>Default Database Schema Password expiration policy in 11g database is 180 days (Change this database password policy or reset ODS & ODDSM password in database every 179 days)<\/p>\n

9. <\/strong>Use Enterprise Manager ( \/em) or<\/strong> $ORACLE_HOME\/ldap\/bin\/oidpasswd<\/strong> to change ODS schema password.<\/p>\n

10. <\/strong>OID schema (ODS<\/strong>) in grace period (PASSWORD_LIFE_TIME set to 180 days in database) will prevent OID start-up.<\/p>\n

11.<\/strong> It is possible to install OID 11g without<\/strong> weblogic\u00a0with NO<\/strong> ODSM & DIP (ODSM and DIP are J2EE application deployed on WebLogic Server)<\/p>\n

.<\/p>\n

Troubleshoot OID startup Issues<\/u><\/strong><\/p>\n

1.<\/strong> Check status of OID using “opmnctl status<\/strong>” or in ods.ods_process_status<\/strong> table. (If you are not sure about database location check $ORACLE_INSTANCE\/config\/tnsnames.ora on OID node<\/font>)<\/p>\n

____________
\nopmnctl status<\/strong><\/p>\n

Processes in Instance: asinst_1
\n———————————+——————–+———+———
\nias-component\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 | process-type\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 |\u00a0\u00a0\u00a0\u00a0 pid | status
\n———————————+——————–+———+———
\novd1\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 | OVD\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 |\u00a0\u00a0 11843 | Alive
\noid1\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 | oidldapd\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 |\u00a0\u00a0\u00a0\u00a0 N\/A | Down
\noid1\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 | oidldapd\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 |\u00a0\u00a0\u00a0\u00a0 N\/A | Down
\noid1\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 | oidmon\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 |\u00a0\u00a0\u00a0\u00a0 N\/A | Down
\n<\/font><\/strong>EMAGENT\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 | EMAGENT\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 |\u00a0\u00a0 11844 | Alive<\/p>\n

.
\n2. <\/strong>Look for error messages in OID log location $MW_HOME\/[asinst_1]\/diagnostics\/logs\/OID\/[oid1]\/oidmonXXXXX.log<\/p>\n

In my case ODS schema password expired at it was account was in grace period<\/p>\n

______________
\n[2010-09-12T10:03:09+01:00] [OID] [NOTIFICATION:16] [] [OIDMON] [host: XXXXXX] [pid: 8226] [tid: 0] Guardian: Connecting to database, connect string is oiddb<\/font><\/p>\n

[2010-09-12T10:03:10+01:00] [OID] [NOTIFICATION:16] [] [OIDMON] [host: XXXXXXX] [pid: 8226] [tid: 0] Guardian: [gsdsiConnect]ORA-28002, ORA-28002: the password will expire within 7 days<\/font><\/p>\n

[2010-09-12T10:03:10+01:00] [OID] [NOTIFICATION:16] [] [OIDMON] [host: xxxxxxxx] [pid: 8226] [tid: 0] Guardian: [oidmon]: Unable to connect to database,
\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 will retry again after 10 sec<\/font>
\n______________<\/p>\n


\n3.<\/strong> Verify account status from database
\nSQL> select * from dba_users where username like ‘ODS’;<\/strong><\/p>\n

ODS\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 42
\nEXPIRED(GRACE)\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 19-SEP-10
\nOLTS_DEFAULT\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 TEMP\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 05-MAR-10
\nDEFAULT\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 DEFAULT_CONSUMER_GROUP<\/p>\n

10G 11G\u00a0 N<\/p>\n

.
\nFix <\/strong>: Reset password using oidpasswd<\/strong><\/p>\n

1.<\/strong>export ORACLE_HOME=\/oracle\/apps\/Middleware\/Oracle_IDM1 (Change location as per your ORACLE_HOME<\/font>)
\n2.<\/strong> On database reset password of ODS schema –
\nSQL>alter user ods identified by [new_password];
\nCheck password column, it should not be locked or expired
\nSQL>select * from dba_users where username like ‘ODS’;<\/p>\n

2.<\/strong> $ORACLE_HOME\/ldap\/bin\/oidpasswd connect=OIDDB change_oiddb_pwd=true<\/strong><\/p>\n

current password : [password updated using sqlplus command]
\nnew password : [new password]
\nnew password : [new password]<\/p>\n

Replication password file exists
\npassword set
\nThis command will reset password in database (ods schema) and middle tieon OID node ( $ORACLE_INSTANCE\/OID\/admin\/oidpwdXXXXXX )<\/p>\n

Now start OID using opmnctl<\/strong><\/p>\n

.<\/strong>
\nQ: How to reset ODS\/ODSSM database profile from lock after 180 days to no lock ?
\n<\/strong>SQL> ALTER PROFILE ODS LIMIT PASSWORD_LIFE_TIME UNLIMITED;
\nSQL> ALTER PROFILE ODSSM LIMIT PASSWORD_LIFE_TIME UNLIMITED;<\/p>\n

.<\/p>\n

Related\/References<\/u><\/strong><\/p>\n

<\/u><\/strong><\/p>\n