My Oracle Support Banner

Error Initializing User/Role API : Null.. (Doc ID 1519272.1)

Last updated on MARCH 08, 2017

Applies to:

Oracle Access Manager - Version 11.1.1.5.0 and later
Information in this document applies to any platform.

Symptoms

You are trying to add the groups as part of the Authorization Policy -> Constraints. However, you are unable to perform the search on groups against OVD directory. On the other hand, OAM authentication against same OVD directory works fine.

You have tried an ldapsearch command on the group name and the group returned successfully:

(MYBOX|oracle)$ ldapsearch -b dc=oracle,dc=com -h mybox.oracle.com -p 6501 -D cn=orcladmin "(&(objectclass=*)(cn=MyPortalUsersOID))" -q
Please enter bind password:
cn=MyPortalUsersOID,cn=portal_dev,cn=Groups,ou=oid,dc=us,dc=oracle,dc=com

Performed 'Test Connection' with all data sources, all successful. Moreover Authentication works fine. We get this error only when we try to do search on group names from the Authorizaiton Policy-> Constraints


AdminServer-diagnostic.log shows that for some reason OAM thinks it unable to connect to OVD store.

[2013-01-07T17:12:40.164-05:00] [AdminServer] [ERROR] [] [oracle.oam.admin.console.generic] [tid: [ACTIVE].ExecuteThread: '11' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: abcdsysoid] [ecid: 87e93035333f6d95:7dbc7e5f:1333dece089:-8000-000000000002fda0,0] [APP: oam_admin#11.1.1.3.0] Unable to connect to the User Store. User Store may not be initialized : Error initializing User/Role API : null..[[
oracle.security.am.engines.common.identity.provider.exceptions.IdentityProviderException: OAMSSA-20007: Unable to connect to the User Store. User Store may not be initialized : Error initializing User/Role API : null..
at oracle.security.am.engines.common.identity.provider.impl.IdentityProviderImpl.init(IdentityProviderImpl.java:277)
at oracle.security.am.engines.common.identity.provider.impl.IdentityProviderImpl.init(IdentityProviderImpl.java:210)
at oracle.security.am.engines.common.identity.provider.impl.IdentityProviderImpl.getRoleList(IdentityProviderImpl.java:1089)
at oracle.security.am.engines.common.identity.provider.impl.OracleUserIdentityProvider.getRoleList(OracleUserIdentityProvider.java:617)

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Symptoms
Cause
Solution

This document is being delivered to you via Oracle Support's Rapid Visibility (RaV) process and therefore has not been subject to an independent technical review.
My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.