EUSM Command Fails Against Specific OUD Instance with "Exception in thread "main" java.lang.NullPointerException" (Doc ID 1912789.1)

Last updated on DECEMBER 22, 2022

Applies to:

Symptoms

EUSM commands fail on one node when attempting to setup mappings between Oracle 11.2.0.3.9 database and OUD 11.1.2.2.0 using EUSM.   The same EUSM commands work successfully on the other node.

OUD is running on a two-node cluster.

An example below of the error seen when attempting to list the existing mappings -

Exception in thread "main" java.lang.NullPointerException
at oracle.security.eus.esm.EUSRealmManager.checkRealmVersion(EUSRealmManager.java:474)
at oracle.security.eus.esm.EUSDomainManager.getDBSchemaMappings(EUSDomainManager.java:1010)
at oracle.security.eus.util.ESMdriver.listMappings(ESMdriver.java:400)
at oracle.security.eus.util.ESMdriver.main(ESMdriver.java:127)

This issue seems to be limited to EUSM commands run for the Oracle database.

The following search query works fine directly on the nodes.

ldapsearch -h <HOSTNAME> -p <LDAP_PORT> -D "cn=<DS_ADMIN>" -w <PASSWORD> -b "cn=<ADMIN>,cn=OracleContext,dc=<SUFFIX_DN>" -s one-filter "(|(objectClass=orclDBEntryLevelMapping)(objectclass=orclDBSubtreeLevelMapping))" cn,orcldbdistinguishedname,orcldbnativeuser,objectclass

When the query is changed to use EUSM from the Oracle server to the OUD servers, the query fails 50% of the time.

eusm listMappings database_name="<DB_NAME>" realm_dn="dc=<SUFFIX_DN>" ldap_host=<HOST.FQDN> ldap_port=<LDAP_PORT> ldap_user_dn="cn=<DS_ADMIN>" ldap_user_password="<PASSWORD>"

There is no orclversion listed in the ldapsearch output for the OUD instance that does not work -

[NG]
$ ldapsearch -p <LDAP_PORT> -D "cn=<DS_ADMIN>" -w <PASSWORD> -b "dc=<SUFFIX_DN>" -s base objectclass="*" orclversion
# extended LDIF
#
# LDAPv3
# base <dc=<SUFFIX_DN>> with scope baseObject
# filter: objectclass=*
# requesting: orclversion
#

# example.com
dn: dc=<SUFFIX_DN>
<==== there is NO orclVerision

But there is an orclversion listed from an ldapsearch on the OUD instance that is working.

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.