OID 11g DIP/ODSM Services are Down. Log Errors: JPS-10702: The datasource jdbc/OPSSDBDS is not found. | <DIP-10013> <Exception java.security.AccessControlException: Access denied (Doc ID 1998219.1)

Last updated on MARCH 08, 2017

Applies to:

Oracle Internet Directory - Version 11.1.1.7.0 and later
Oracle Platform Security for Java - Version All and later
Information in this document applies to any platform.

Symptoms

Oracle Internet Directory (OID) 11g 11.1.1.7.0 with Directory Integration Platform (DIP) and Oracle Directory Services Manager (ODSM).

This has happened before, so it could happen again.

The first time, had to recreate the WebLogic Server (WLS) Domain to workaround the issue, however needs a permanent fix.


OID, DIP and ODSM services are down.

DIP/ODSM log shows:

<Mar 19, 2015 12:00:20 PM EDT> <Warning> <oracle.jps.authorization> <JPS-04080> <Scanning of system policy failed. Reason oracle.security.jps.service.policystore.PolicyStoreException: JPS-10702: The datasource jdbc/OPSSDBDS is not found.>
<Mar 19, 2015 12:00:20 PM EDT> <Warning> <oracle.jps.authorization> <JPS-04155> <Scanning of application policy failed. Reason {0}
oracle.security.jps.service.policystore.PolicyStoreException: JPS-10702: The datasource jdbc/OPSSDBDS is not found.
at oracle.security.jps.internal.policystore.rdbms.JpsDBDataManager.getDataSourceAndSubject(JpsDBDataManager.java:1463)
at oracle.security.jps.internal.policystore.rdbms.JpsDBDataManager.getEMFAndSubject(JpsDBDataManager.java:1173)
at oracle.security.jps.internal.policystore.rdbms.JpsDBDataManager.init(JpsDBDataManager.java:951)
.....
Caused By: javax.naming.NameNotFoundException: Unable to resolve 'jdbc.OPSSDBDS'. Resolved 'jdbc'; Remaining name: 'OPSSDBDS'
.....
<Mar 19, 2015 10:30:40 AM EDT> <Error> <oracle.dip> <DIP-10013> <Exception
java.security.AccessControlException: Access denied (oracle.security.jps.service.credstore.CredentialAccessPermission context=SYSTEM,mapName=dip,keyName=cn=odisrv read)

The WLS Admin Server log shows:

<Mar 19, 2015 12:07:07 PM EDT> <Notice> <Diagnostics> <BEA-320068> <Watch 'UncheckedException' with severity 'Notice' on server 'AdminServer' has triggered at Mar 19, 2015 12:07:07 PM EDT. Notification details:
WatchRuleType: Log
WatchRule: (SEVERITY = 'Error') AND ((MSGID = 'WL-101020') OR (MSGID = 'WL-101017') OR (MSGID = 'WL-000802') OR (MSGID = 'BEA-101020') OR (MSGID = 'BEA-101017') OR (MSGID = 'BEA-000802'))
WatchData: DATE = Mar 19, 2015 12:07:07 PM EDT SERVER = AdminServer MESSAGE = [ServletContext@725166905[app:em module:/em path:/em spec-version:2.5]] Root cause of ServletException.
oracle.security.jps.JpsException: oracle.security.jps.service.policystore.PolicyStoreException: JPS-10702: The datasource jdbc/OPSSDBDS is not found.
at oracle.security.jps.internal.jaas.JpsAbsSubjectResolver.getApplicationRoles(JpsAbsSubjectResolver.java:572)
at oracle.security.jps.internal.jaas.JpsAbsSubjectResolver.createJpsSubject(JpsAbsSubjectResolver.java:378)
at oracle.security.jps.internal.jaas.JpsAbsSubjectResolver.getAnonymousSubject(JpsAbsSubjectResolver.java:363)
.....
Caused By: java.security.PrivilegedActionException: oracle.security.jps.service.policystore.PolicyStoreException: JPS-10702: The datasource jdbc/OPSSDBDS is not found.
.....

 

Changes

No major changes this time; just recently ran DIP bootstrap and applied a patch.

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms