Enterprise Manager Cloud Control and eusm issues: AuthenticationException

Very useful for 12c users…

Florence Blanc-Renaud's technical spot

Enterprise Manager Cloud Control is a web-based interface that allows to administer Enterprise User Security. When connecting to  OUD server, the interface may complain about an invalid password even though the credentials are correct.

The same problem happens with eusm 12c (the command-line tool delivered with Oracle Database):

$ eusm listDomains realm_dn=dc=example,dc=com ldap_host=$ldap_host ldap_port=1389 ldap_user_dn="cn=directory manager" ldap_user_password=****
javax.naming.AuthenticationException: [LDAP: error code 49 - Invalid Credentials]

If OUD access log shows the following error:

The server was not able to find any user entries for the provided username of cn=directory manager

then the fix is provided in Oracle Identity Management Suite Bundle Patch 11.1.2.2.8 (22085294), or Oracle Identity Management Suite Bundle Patch 11.1.2.3.3 (22085274)  depending on your OUD version.

The connection method between Enterprise Manager Cloud Control and OUD (or eusm 12c and OUD) is using SASL/DIGEST-MD5 authentication instead of a simple BIND. SASL/DIGEST-MD5 requires the password to be stored in…

View original post 148 more words

OUD as a OAM Identity Store

Since 11gR2, OUD can be used natively as a OAM Identity Store. Select  “OUD: Oracle Unified Directory” as Store Type as described here.

As an alternate solution, you can also configure OVD as Identity Store with OAM and then configure LDAP adapter for OVD with OUD details.Configuring Identity store for OAM is documented here. Choose “OVD: Oracle Virtual Directory” as store type and provide store details as per the document. Configuring LDAP adapter for OVD is documented here. Provide your OUD details required as per the document.

New convenient Information Center about OUD in My Oracle Support

A new “Information Center” dedicated to Oracle Unified Directory is available from the Oracle Support Site. This page provides you with all the useful links and news related to the product, including technical articles, docs, licensing info and the latest patches available.

To access it, log into MOS (My Oracle Support) at http://support.oracle.com,  search for 1418884.2 doc id in the search field on the front page, then click on the “Information Center : Overview Oracle Unified Directory (OUD)” link.

Introduction

Dear Reader,

I am Sylvain Duloutre, I work at Oracle as a Software Architect in the Directory Integration Team, the customer-facing part of Directory Services & Identity Management Product Development, working on Architecture Design and Technical Field Enablement.

This blog is a place-holder for technical articles I wrote about the technologies I’m working on. Some of these posts are also available from corporate blogging sites, but the views expressed here are my own and do not necessarily reflect the views of Oracle.

Posts are mostly architecture design recommendations, deployment guidelines and tips that may be useful to the technical community, especially Oracle Identity Management and Oracle Unified Directory. If you are interesting by these topics, don’t hesitate to contact me directly or reach the OTN community.

Cheers

Sylvain