OAM User Authentication To OVD 11g Is Always Successful Whether Password Is Correct Or Incorrect (Doc ID 1325600.1)

Last updated on MARCH 13, 2019

Applies to:

Symptoms

Any authentication through Oracle Access Manager (OAM) using Oracle Virtual Directory (OVD) 11g, i.e., 11.1.1.4, as the user directory, is always successful no matter what password is used.  This includes an application protected by OAM as well as the OAM admin interfaces themselves.

Direct bind attempts to OVD work correctly, i.e., succeed with correct password and fail with incorrect password, as they should.

The incorrect authentication behavior only occurs when the bind requests come from OAM.

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.