My Oracle Support Banner

LDAPSync Post Seed Users Job Failing For Existing Users With Error Message Of UserPassword Cannot Be Decrypted (Doc ID 2163127.1)

Last updated on FEBRUARY 03, 2019

Applies to:

Identity Manager - Version and later
Information in this document applies to any platform.


 This article will provide details on how to address the below mentioned issue:


The LDAPSync functionality is enabled following all the necessary steps for the PS3 environment that is being upgraded in the environment. New users can be created fine in the environment, but any existing users, when running the LDAPSync Post Seed Users job, are erroring saying the userPassword cannot be decrypted:

<Jan 6, 2016 2:41:38 PM EST> <Error> <XELLERATE.ACCOUNTMANAGEMENT> <BEA-000000> <Class/Method: tcDefaultDBEncryptionImpl/decrypt encounter some problems: Input length must be multiple of 16 when decrypting with padded cipher
javax.crypto.IllegalBlockSizeException: Input length must be multiple of 16 when decrypting with padded cipher
at com.sun.crypto.provider.CipherCore.doFinal(
at com.sun.crypto.provider.CipherCore.doFinal(
at com.sun.crypto.provider.AESCipher.engineDoFinal(
at javax.crypto.Cipher.doFinal(
at com.thortech.xl.crypto.tcDefaultDBEncryptionImpl.decrypt(
at com.thortech.xl.crypto.tcCryptoUtil.decrypt(
at com.thortech.xl.crypto.tcCryptoUtil.decrypt(
at oracle.iam.platform.utils.crypto.CryptoUtil.getDecryptedPassword(
at oracle.iam.platform.entitymgr.provider.ldap.LDAPUtil.basicAttibutePasswordDecryption(
at oracle.iam.platform.entitymgr.provider.ldap.LDAPUtil.createSubcontext(
at oracle.iam.platform.entitymgr.provider.ldap.LDAPDataProvider.create(
at oracle.iam.platform.entitymgr.impl.EntityManagerImpl.createEntity(
<Jan 6, 2016 2:41:38 PM EST> <Warning> <oracle.ods.virtualization.exception> <LIBOVD-40077> <Could not add entry. 'userPassword' has no values.; remaining name 'cn=uselatw,cn=Users,cn=OIM,dc=tgt,dc=dev'
at com.sun.jndi.ldap.LdapClient.add(



To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!

In this Document

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.