My Oracle Support Banner

EM12c, EM13c : Troubleshooting External Authentication Issues in Enterprise Manager Cloud Control (Doc ID 2168491.1)

Last updated on MAY 09, 2021

Applies to:

Enterprise Manager Base Platform - Version 12.1.0.2.0 and later
Information in this document applies to any platform.

Purpose

Authentication in Enterprise Manager (EM) can fail for a number of reasons. This section discusses ways to troubleshoot authentication failures. When EM is configured with external authentication, the LDAP/SSO WebLogic authentication providers authenticate the user. If authentication succeeds, the Enterprise Manager authentication layer checks if that user exists in Enterprise Manager repository. If authentication fails, the Enterprise Manager administrator should check ldap_trace.logATN located in the ../gc_inst/user_projects/domains/GCDomain' directory. This file contains authentication entries from the LDAP authenticator. If that file does not exist, you need to enable the WebLogic debug flag (DebugSecurityAtn).

Troubleshooting Steps

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Purpose
Troubleshooting Steps
 I.) Enabling the WebLogic and external authenticator DEBUG logging:
 II.) Invalid Credentials
 III.) Timeout in LDAP Server
 IV.) Errors Outside ldap_trace.logATN

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.