EM 13c: LDAP/AD Users Unable to Login EM Console. Users Are Not Listed Under Provider. (Doc ID 2715980.1)

Last updated on MARCH 16, 2021

Applies to:

Symptoms

All the LDAP/AD users disappeared suddenly from admin console in below navigation. 

• Login to OEM WebLogic Admin console. 
• Click on 'Security Realms' > myrealm > Providers. 
• Select the integrated AD/LDAP Provider > Click on 'Users and Groups' 

There are no LDAP/AD users listed anymore here.  

When LDAP/AD users try to login to OEM/WL Admin console, the following error reported in emoms.trc

2020-09-29 16:08:58,993 [[ACTIVE] ExecuteThread: '35' for queue: 'weblogic.kernel.Default (self-tuning)'] DEBUG auth.SearchEnterpriseUsersBean handleSearch.147 - Searching for principals with operator STARTSWITH operator val <User Name>
2020-09-29 16:08:59,107 [[ACTIVE] ExecuteThread: '35' for queue: 'weblogic.kernel.Default (self-tuning)'] WARN opss.OPSSPolicyStoreUtil run.762 - Error while fetching enterprise users
oracle.igf.ids.IDSException: Invalid Credentials: entity= op=search mesg= AdditionalInfo: LDAP Error 49 : [LDAP: error code 49 - 80090308: LdapErr: DSID-0C090453, comment: AcceptSecurityContext error, data 532, v3839^@]
at oracle.igf.ids.arisid.ArisIdServiceManager.searchEntities(ArisIdServiceManager.java:2975)
at oracle.igf.ids.UserManager.searchUsers(UserManager.java:312)
at oracle.sysman.core.sec.authz.opss.OPSSPolicyStoreUtil$3.run(OPSSPolicyStoreUtil.java:745)
at java.security.AccessController.doPrivileged(Native Method)
at oracle.sysman.core.sec.authz.opss.OPSSPolicyStoreUtil.getEnterpriseUsers(OPSSPolicyStoreUtil.java:677)
at oracle.sysman.core.security.ui.SearchEnterpriseUsersBean.handleSearch(SearchEnterpriseUsersBean.java:153) 

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.