My Oracle Support Banner

E1: LDAP: Security Kernel Hung Intermittently When Connecting to LDAP Server (Doc ID 2070545.1)

Last updated on APRIL 05, 2018

Applies to:

JD Edwards EnterpriseOne Tools - Version 8.98 to 9.2 [Release 8.98 to 9.2]
Information in this document applies to any platform.

Symptoms

JDE security is using LDAP and integrated with Active Directory. Intermittently (after running fine for 2 or 3 weeks) the security kernel hung when tried to connect to LDAP Server.

Following message is reported in event viewer on Enterprise Server:

"This computer was not able to set up a secure session with a domain controller in domain "DOMAIN NAME" due to the following:

The RPC server is unavailable.
This may lead to authentication problems. Make sure that this computer is connected to the network. If the problem persists, please contact your domain administrator.

ADDITIONAL INFO
If this computer is a domain controller for the specified domain, it sets up the secure session to the primary domain controller emulator in the specified domain. Otherwise, this computer sets up the secure session to any domain controller in the specified domain."

This causes all subsequent authentication attempts to fail, only workaround is to restart EnterpriseOne services.

Scheduled jobs are also affected due to this issue.

Sometimes the same behavior is noticed without any messages in any log(s).

In some cases, it is reported that every login had two immediate failures searching in the LDAP, in that case below messages shows in Security Kernel log:

Searching in LDAP using searching criteria filter=(&(objectclass=user)(sAMAccountName=<LDAPUSERNAME>)), base=OU=Example,DC=Group,DC=com,DC=au, scope=LDAP_SCOPE_SUBTREE
SearchUserInLDAP: LDAP search failed,trying to get the connection again.[rc =<81>, ldapSearchConnection =<0x127edf8>, attempt =<1>]
SearchUserInLDAP: LDAP search failed,trying to get the connection again.[rc =<81>, ldapSearchConnection =<0x127edf8>, attempt =<1>]
LDAP Searching connection binding successfully

 

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Symptoms
Cause
Solution
References


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.