OUD Returns Error Code 49 (Invalid Credentials) Instead of Error Code 52 (Exceed password retry limit. Account locked) When Account is Locked Out (Doc ID 2109044.1)

Last updated on NOVEMBER 12, 2024

Applies to:

Symptoms

Oracle Unified Directory (OUD).

When an account is locked out in OUD due to password policy and too many failed attempts, error code 49 (Invalid Credentials) is returned when LDAP return code 52 should actually be returned (Exceed password retry limit. Account locked).

In comparison, other LDAP servers, return error code 52, but in OUD error code 49 is returned.

Steps to reproduce:
1. Bind to OUD with the wrong password until the account is locked.
2. Submit an ldap operation with the correct password, and it returns error code 49 (Invalid Credentials) instead of error code 52 (Exceed password retry limit. Account lock)

Examples with OUD:

Changes

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.