OID 10g External Authentication to Novell eDirectory With SSL Fails (Doc ID 1064939.1)

Last updated on JULY 01, 2016

Applies to:

Oracle Internet Directory - Version 10.1.4 and later
Information in this document applies to any platform.
***Checked for relevance on 11-Dec-2013***

Symptoms

 

Oracle Internet Directory 10.1.4 integration with Novell eDirectory has been configured. The OID External Authentication plugins for eDirectory compare and bind operations are failing when configured to use SSL.
When the plug-ins are configured for non-SSL connection to eDirectory the problem does not reproduce: external authentication is successful.
The underlying error is LDAP Error 49: Invalid Credentials. If OID plugin debug logging is enabled with orcldebugflag=402653185, entries similar to the following are displayed in the $ORACLE_HOME/ldap/log/oidldapdINSTsPID.log when the problem is reproduced:
BEGIN
2010/01/15:09:51:44 * ServerWorker (REG):12
ConnID:15 * mesgID:1 * OpID:0 * OpName:bind 
ConnIP:199.64.108.184 ConnDN: Anonymous
INFO : gslfbidbDoBind * Version=3 BIND dn="cn=user1,cn=Users,dc=oracle,dc=com" method=128
ConnId = 15, op=0, IpAddr=2.4.5.4
09:51:44 * CLASSPATH = -Djava.class.path=C:\oracle\ora1014Infra\ldap\jlib\ospf.jar;C:\oracle\ora1014Infra\jlib\ldapjclnt10.jar;C:\oracle\ora1014Infra\jlib\jssl-1_1.jar;C:\oracle\ora1014Infra\jdbc\lib\classes12.zip;$CLASSPATH
09:51:44 * SUCCESS * sgslpvm_getJvmEnv * Creation of the JVM succeeded
09:51:44 * SUCCESS * sgslpvm_getJvmEnv * Attach to the JVM succeeded
09:51:44 * Server Java Plug-in * Entering oidexplg when_bind_replace
09:51:44 * Server Java Plug-in * Entering ExternalEntry with bind request
09:51:44 * Server Java Plug-in * User DN: cn=user1,o=oracle
09:51:44 * Server Java Plug-in * eDN: cn=user1,o=oracle
09:51:44 * Server Java Plug-in * Entering ExternalConnectivity
09:51:45 * SUCCESS * gslsbbExecWhenReplacePlugin * Successfully Executed Java Plug-in oidexplg.jar
09:51:45 * INFO * gslsbbExecWhenReplacePlugin * Operation Result Code returned from the when_replace_bind Java plug-in : 49
09:51:45 * INFO : gsleswrASndResult2 RESULT = 49 nentries=0 
END
2010/01/15:09:51:45 * ServerDispatcher :1 * sgslufread: Hard error on read, OS error = 10054
2010/01/15:09:51:45 * ServerDispatcher :1 * sgslufread: Hard error on read, OS error = 10054

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms