My Oracle Support Banner

Patching Breaks SOA Identity Service and OIM Inbox/Views with oracle.igf.ids.IDSException and ORABPEL-10585 and BPEL-10555 Errors and/or Requests Fail with IAM-2050126 (Doc ID 2539571.1)

Last updated on MAY 21, 2020

Applies to:

Oracle SOA Suite - Version 12.2.1.3.0 and later
Identity Manager - Version 12.2.1.3.0 and later
Information in this document applies to any platform.

Symptoms

After patching, four issues are seen:

Issue 1

The weblogic admin user is not able to log in to the BPMWorklist application. After entering the username and password, the page is blank and the URL flashes with constantly changing "afrLoop" numbers.

When this issue occurs, two incidents will be created.  Both of the incidents have

Problem Key: DFW-99998 [oracle.security.jps.service.idstore.IdentityStoreException][oracle.security.jps.internal.idstore.util.LibOvdUtil$IDSConfigProvider.getIgfLdapProperties][worklistapp]

and contain a Description with ORABPEL-10555, BPEL-10555, ORABPEL-10585 and BPEL-10585 errors followed by

JPS-01520: Cannot initialize identity store, cause: oracle.igf.ids.IDSException.

and

oracle.security.jps.service.idstore.IdentityStoreException: JPS-02597: You configured a custom Authentication Provider or WLS generic LDAPAuthenticator, which the libOvd can not recognize. Supply the idstore.type property in jps-config.xml file, or use a specific WLS LDAP Authentication provider that matches your LDAP server instead of a generic one.:

Description
-----------
Incident detected using watch rule "UncheckedException":
Watch time: May 7, 2019 12:58:28 PM MDT
Watch ServerName: <SOA_SERVER>
Watch RuleType: Log
Watch Rule: (log.severityString == 'Error') and ((log.messageId == 'WL-101020') or (log.messageId == 'WL-101017') or (log.messageId == 'WL-000802') or (log.messageId == 'BEA-101020') or (log.messageId == 'BEA-101017') or (log.messageId == 'BEA-000802'))
Watch DomainName: <DOMAIN_NAME>
Watch Data:
MESSAGE : [ServletContext@<id>[app:worklistapp module:/integration/worklistapp path:null spec-version:3.1]] Root cause of ServletException.
ORABPEL-0

exception.code:0
exception.type: ERROR

at weblogic.rmi.internal.ServerRequest.sendReceive(ServerRequest.java:287)
at weblogic.rmi.cluster.ClusterableRemoteRef.invoke(ClusterableRemoteRef.java:552)
at weblogic.rmi.cluster.ClusterableRemoteRef.invoke(ClusterableRemoteRef.java:313)
at oracle.bpel.services.workflow.query.ejb.TaskQueryService_oz1ipg_EOImpl_12213_WLStub.authenticate(Unknown Source)
at oracle.bpel.services.workflow.query.client.TaskQueryServiceRemoteClient.authenticate(TaskQueryServiceRemoteClient.java:138)
at sun.reflect.GeneratedMethodAccessor1404.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:498)
...
Caused By: ORABPEL-0

exception.code:0
exception.type: ERROR

at oracle.bpel.services.workflow.verification.impl.VerificationService.createWorkflowContext(VerificationService.java:1367)
at oracle.bpel.services.workflow.verification.impl.VerificationService.getWorkflowContext(VerificationService.java:1259)
at oracle.bpel.services.workflow.verification.impl.VerificationService.getWorkflowContext(VerificationService.java:1217)
at sun.reflect.GeneratedMethodAccessor1408.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:498)
...
Caused By: BPEL-10555

Identity Service Configuration error.
Identity Service Configuration has error.
Please refer to the identity service configuration guidelines and correct the Identity Service configurations.

at oracle.tip.pc.services.common.ServiceFactory.getAuthorizationServiceInstance(ServiceFactory.java:167)
at oracle.bpel.services.workflow.verification.cache.local.LocalCacheManager.getAuthorizationService(LocalCacheManager.java:656)
at oracle.bpel.services.workflow.verification.cache.local.LocalCacheManager.lookupUser(LocalCacheManager.java:634)
at oracle.bpel.services.workflow.verification.cache.local.LocalCacheManager.getBPMUserFromUserMap(LocalCacheManager.java:574)
at oracle.bpel.services.workflow.verification.impl.VerificationService.createWorkflowContext(VerificationService.java:1322)
at oracle.bpel.services.workflow.verification.impl.VerificationService.getWorkflowContext(VerificationService.java:1259)
at oracle.bpel.services.workflow.verification.impl.VerificationService.getWorkflowContext(VerificationService.java:1217)
at sun.reflect.GeneratedMethodAccessor1408.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:498)
...
Caused By: ORABPEL-00000

Exception not handled by the Collaxa Cube system.
exception.default.description
exception.default.fix
Exception: ORABPEL-10585

Service error.
Internal Error; Service error occurs in IGFProvider in method getIdentityDirectory().
Refer to the log file that is configured for oracle.soa.services.identity for more details on this error.

Handled As: oracle.tip.pc.services.common.ServiceException

at oracle.tip.pc.services.identity.jps.IdentityServiceImpl.getInstance(IdentityServiceImpl.java:127)
at oracle.tip.pc.services.common.ServiceFactory.getService(ServiceFactory.java:324)
at oracle.tip.pc.services.common.ServiceFactory.getAuthorizationServiceInstance(ServiceFactory.java:148)
at oracle.bpel.services.workflow.verification.cache.local.LocalCacheManager.getAuthorizationService(LocalCacheManager.java:656)
at oracle.bpel.services.workflow.verification.cache.local.LocalCacheManager.lookupUser(LocalCacheManager.java:634)
at oracle.bpel.services.workflow.verification.cache.local.LocalCacheManager.getBPMUserFromUserMap(LocalCacheManager.java:574)
at oracle.bpel.services.workflow.verification.impl.VerificationService.createWorkflowContext(VerificationService.java:1322)
at oracle.bpel.services.workflow.verification.impl.VerificationService.getWorkflowContext(VerificationService.java:1259)
at oracle.bpel.services.workflow.verification.impl.VerificationService.getWorkflowContext(VerificationService.java:1217)
at sun.reflect.GeneratedMethodAccessor1408.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:498)
...
Caused By: ORABPEL-10585

Service error.
Internal Error; Service error occurs in IGFProvider in method getIdentityDirectory().
Refer to the log file that is configured for oracle.soa.services.identity for more details on this error.

at oracle.tip.pc.services.identity.igf.IGFProvider.getIdentityDirectory(IGFProvider.java:393)
at oracle.tip.pc.services.identity.igf.IGFProvider.init(IGFProvider.java:305)
at oracle.tip.pc.services.identity.igf.IGFProvider.<init>(IGFProvider.java:266)
at oracle.tip.pc.services.identity.igf.IGFProvider.getInstance(IGFProvider.java:278)
at oracle.tip.pc.services.identity.jps.IdentityServiceImpl.init(IdentityServiceImpl.java:149)
at oracle.tip.pc.services.identity.BPMServiceBase.<init>(BPMServiceBase.java:50)
at oracle.tip.pc.services.identity.jps.IdentityServiceImpl.<init>(IdentityServiceImpl.java:101)
at oracle.tip.pc.services.identity.jps.IdentityServiceImpl.getInstance(IdentityServiceImpl.java:115)
at oracle.tip.pc.services.common.ServiceFactory.getService(ServiceFactory.java:324)
at oracle.tip.pc.services.common.ServiceFactory.getAuthorizationServiceInstance(ServiceFactory.java:148)
at oracle.bpel.services.workflow.verification.cache.local.LocalCacheManager.getAuthorizationService(LocalCacheManager.java:656)
at oracle.bpel.services.workflow.verification.cache.local.LocalCacheManager.lookupUser(LocalCacheManager.java:634)
at oracle.bpel.services.workflow.verification.cache.local.LocalCacheManager.getBPMUserFromUserMap(LocalCacheManager.java:574)
at oracle.bpel.services.workflow.verification.impl.VerificationService.createWorkflowContext(VerificationService.java:1322)
at oracle.bpel.services.workflow.verification.impl.VerificationService.getWorkflowContext(VerificationService.java:1259)
at oracle.bpel.services.workflow.verification.impl.VerificationService.getWorkflowContext(VerificationService.java:1217)
at sun.reflect.GeneratedMethodAccessor1408.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:498)
...
Caused By: BPEL-10555

Identity Service Configuration error.
Identity Service Configuration has error.
Please refer to the identity service configuration guidelines and correct the Identity Service configurations.

at oracle.tip.pc.services.identity.igf.IGFUtil.getIdentityDirectory(IGFUtil.java:76)
at oracle.tip.pc.services.identity.igf.IGFProvider.getIdentityDirectory(IGFProvider.java:391)
at oracle.tip.pc.services.identity.igf.IGFProvider.init(IGFProvider.java:305)
at oracle.tip.pc.services.identity.igf.IGFProvider.<init>(IGFProvider.java:266)
at oracle.tip.pc.services.identity.igf.IGFProvider.getInstance(IGFProvider.java:278)
at oracle.tip.pc.services.identity.jps.IdentityServiceImpl.init(IdentityServiceImpl.java:149)
at oracle.tip.pc.services.identity.BPMServiceBase.<init>(BPMServiceBase.java:50)
at oracle.tip.pc.services.identity.jps.IdentityServiceImpl.<init>(IdentityServiceImpl.java:101)
at oracle.tip.pc.services.identity.jps.IdentityServiceImpl.getInstance(IdentityServiceImpl.java:115)
at oracle.tip.pc.services.common.ServiceFactory.getService(ServiceFactory.java:324)
at oracle.tip.pc.services.common.ServiceFactory.getAuthorizationServiceInstance(ServiceFactory.java:148)
at oracle.bpel.services.workflow.verification.cache.local.LocalCacheManager.getAuthorizationService(LocalCacheManager.java:656)
at oracle.bpel.services.workflow.verification.cache.local.LocalCacheManager.lookupUser(LocalCacheManager.java:634)
at oracle.bpel.services.workflow.verification.cache.local.LocalCacheManager.getBPMUserFromUserMap(LocalCacheManager.java:574)
at oracle.bpel.services.workflow.verification.impl.VerificationService.createWorkflowContext(VerificationService.java:1322)
at oracle.bpel.services.workflow.verification.impl.VerificationService.getWorkflowContext(VerificationService.java:1259)
at oracle.bpel.services.workflow.verification.impl.VerificationService.getWorkflowContext(VerificationService.java:1217)
at sun.reflect.GeneratedMethodAccessor1408.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:498)
...
Caused By: oracle.security.jps.service.idstore.IdentityStoreException: JPS-01520: Cannot initialize identity store, cause: oracle.igf.ids.IDSException.
at oracle.security.jps.internal.idstore.AbstractIdmIdentityStore.initIdentityDirectory(AbstractIdmIdentityStore.java:331)
at oracle.security.jps.internal.idstore.AbstractIdmIdentityStore.getIdentityStore(AbstractIdmIdentityStore.java:207)
at oracle.tip.pc.services.identity.igf.IGFUtil.getIdentityDirectory(IGFUtil.java:71)
at oracle.tip.pc.services.identity.igf.IGFProvider.getIdentityDirectory(IGFProvider.java:391)
at oracle.tip.pc.services.identity.igf.IGFProvider.init(IGFProvider.java:305)
at oracle.tip.pc.services.identity.igf.IGFProvider.<init>(IGFProvider.java:266)
at oracle.tip.pc.services.identity.igf.IGFProvider.getInstance(IGFProvider.java:278)
at oracle.tip.pc.services.identity.jps.IdentityServiceImpl.init(IdentityServiceImpl.java:149)
at oracle.tip.pc.services.identity.BPMServiceBase.<init>(BPMServiceBase.java:50)
at oracle.tip.pc.services.identity.jps.IdentityServiceImpl.<init>(IdentityServiceImpl.java:101)
at oracle.tip.pc.services.identity.jps.IdentityServiceImpl.getInstance(IdentityServiceImpl.java:115)
at oracle.tip.pc.services.common.ServiceFactory.getService(ServiceFactory.java:324)
at oracle.tip.pc.services.common.ServiceFactory.getAuthorizationServiceInstance(ServiceFactory.java:148)
at oracle.bpel.services.workflow.verification.cache.local.LocalCacheManager.getAuthorizationService(LocalCacheManager.java:656)
at oracle.bpel.services.workflow.verification.cache.local.LocalCacheManager.lookupUser(LocalCacheManager.java:634)
at oracle.bpel.services.workflow.verification.cache.local.LocalCacheManager.getBPMUserFromUserMap(LocalCacheManager.java:574)
at oracle.bpel.services.workflow.verification.impl.VerificationService.createWorkflowContext(VerificationService.java:1322)
at oracle.bpel.services.workflow.verification.impl.VerificationService.getWorkflowContext(VerificationService.java:1259)
at oracle.bpel.services.workflow.verification.impl.VerificationService.getWorkflowContext(VerificationService.java:1217)
at sun.reflect.GeneratedMethodAccessor1408.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:498)
...
Caused By: oracle.igf.ids.IDSException
at oracle.igf.ids.IdentityDirectoryFactory.setAllIdsConfigProperties(IdentityDirectoryFactory.java:476)
at oracle.igf.ids.IdentityDirectoryFactory.getGlobalIdentityDirectory(IdentityDirectoryFactory.java:236)
at oracle.security.jps.internal.idstore.AbstractIdmIdentityStore.initIdentityDirectory(AbstractIdmIdentityStore.java:320)
at oracle.security.jps.internal.idstore.AbstractIdmIdentityStore.getIdentityStore(AbstractIdmIdentityStore.java:207)
at oracle.tip.pc.services.identity.igf.IGFUtil.getIdentityDirectory(IGFUtil.java:71)
at oracle.tip.pc.services.identity.igf.IGFProvider.getIdentityDirectory(IGFProvider.java:391)
at oracle.tip.pc.services.identity.igf.IGFProvider.init(IGFProvider.java:305)
at oracle.tip.pc.services.identity.igf.IGFProvider.<init>(IGFProvider.java:266)
at oracle.tip.pc.services.identity.igf.IGFProvider.getInstance(IGFProvider.java:278)
at oracle.tip.pc.services.identity.jps.IdentityServiceImpl.init(IdentityServiceImpl.java:149)
at oracle.tip.pc.services.identity.BPMServiceBase.<init>(BPMServiceBase.java:50)
at oracle.tip.pc.services.identity.jps.IdentityServiceImpl.<init>(IdentityServiceImpl.java:101)
at oracle.tip.pc.services.identity.jps.IdentityServiceImpl.getInstance(IdentityServiceImpl.java:115)
at oracle.tip.pc.services.common.ServiceFactory.getService(ServiceFactory.java:324)
at oracle.tip.pc.services.common.ServiceFactory.getAuthorizationServiceInstance(ServiceFactory.java:148)
at oracle.bpel.services.workflow.verification.cache.local.LocalCacheManager.getAuthorizationService(LocalCacheManager.java:656)
at oracle.bpel.services.workflow.verification.cache.local.LocalCacheManager.lookupUser(LocalCacheManager.java:634)
at oracle.bpel.services.workflow.verification.cache.local.LocalCacheManager.getBPMUserFromUserMap(LocalCacheManager.java:574)
at oracle.bpel.services.workflow.verification.impl.VerificationService.createWorkflowContext(VerificationService.java:1322)
at oracle.bpel.services.workflow.verification.impl.VerificationService.getWorkflowContext(VerificationService.java:1259)
at oracle.bpel.services.workflow.verification.impl.VerificationService.getWorkflowContext(VerificationService.java:1217)
at sun.reflect.GeneratedMethodAccessor1408.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:498)
...
Caused By: java.security.PrivilegedActionException: java.lang.reflect.InvocationTargetException
at java.security.AccessController.doPrivileged(Native Method)
at oracle.igf.ids.IdentityDirectoryFactory.setAllIdsConfigProperties(IdentityDirectoryFactory.java:455)
at oracle.igf.ids.IdentityDirectoryFactory.getGlobalIdentityDirectory(IdentityDirectoryFactory.java:236)
at oracle.security.jps.internal.idstore.AbstractIdmIdentityStore.initIdentityDirectory(AbstractIdmIdentityStore.java:320)
at oracle.security.jps.internal.idstore.AbstractIdmIdentityStore.getIdentityStore(AbstractIdmIdentityStore.java:207)
at oracle.tip.pc.services.identity.igf.IGFUtil.getIdentityDirectory(IGFUtil.java:71)
at oracle.tip.pc.services.identity.igf.IGFProvider.getIdentityDirectory(IGFProvider.java:391)
at oracle.tip.pc.services.identity.igf.IGFProvider.init(IGFProvider.java:305)
at oracle.tip.pc.services.identity.igf.IGFProvider.<init>(IGFProvider.java:266)
at oracle.tip.pc.services.identity.igf.IGFProvider.getInstance(IGFProvider.java:278)
at oracle.tip.pc.services.identity.jps.IdentityServiceImpl.init(IdentityServiceImpl.java:149)
at oracle.tip.pc.services.identity.BPMServiceBase.<init>(BPMServiceBase.java:50)
at oracle.tip.pc.services.identity.jps.IdentityServiceImpl.<init>(IdentityServiceImpl.java:101)
at oracle.tip.pc.services.identity.jps.IdentityServiceImpl.getInstance(IdentityServiceImpl.java:115)
at oracle.tip.pc.services.common.ServiceFactory.getService(ServiceFactory.java:324)
at oracle.tip.pc.services.common.ServiceFactory.getAuthorizationServiceInstance(ServiceFactory.java:148)
at oracle.bpel.services.workflow.verification.cache.local.LocalCacheManager.getAuthorizationService(LocalCacheManager.java:656)
at oracle.bpel.services.workflow.verification.cache.local.LocalCacheManager.lookupUser(LocalCacheManager.java:634)
at oracle.bpel.services.workflow.verification.cache.local.LocalCacheManager.getBPMUserFromUserMap(LocalCacheManager.java:574)
at oracle.bpel.services.workflow.verification.impl.VerificationService.createWorkflowContext(VerificationService.java:1322)
at oracle.bpel.services.workflow.verification.impl.VerificationService.getWorkflowContext(VerificationService.java:1259)
at oracle.bpel.services.workflow.verification.impl.VerificationService.getWorkflowContext(VerificationService.java:1217)
at sun.reflect.GeneratedMethodAccessor1408.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:498)
...
Caused By: java.lang.reflect.InvocationTargetException
at sun.reflect.GeneratedMethodAccessor1403.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:498)
...
Caused By: oracle.security.jps.service.idstore.IdentityStoreException: JPS-02597: You configured a custom Authentication Provider or WLS generic LDAPAuthenticator, which the libOvd can not recognize. Supply the idstore.type property in jps-config.xml file, or use a specific WLS LDAP Authentication provider that matches your LDAP server instead of a generic one.
at oracle.security.jps.internal.idstore.util.LibOvdUtil$IDSConfigProvider.getIgfLdapProperties(LibOvdUtil.java:1039)
at oracle.security.jps.internal.idstore.util.LibOvdUtil.getIgfLdapProperties(LibOvdUtil.java:217)
at oracle.security.jps.internal.idstore.util.LibOvdUtil.getIdStoreLdapPropertiesInternal(LibOvdUtil.java:281)
at oracle.security.jps.internal.api.identitystore.IdentityStoreConfigurationUtil.getIdStoreLdapProperties(IdentityStoreConfigurationUtil.java:186)
at sun.reflect.GeneratedMethodAccessor1403.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:498)
...

Issue 2

In OIM environments, Issue 1 causes the following error to be thrown during startup of the OIM managed server.  This error is only seen during startup and does not otherwise impact the startup.

Issue 4

When opening a request from the Track Requests page, an error is shown with:

JBO-29000: Unexpected exception caught:oracle.bpel.services.workflow.WorkflowException, msg=exception.code: 30501 exception.type: ERROR exception.severity: 2 exception.name: Error in authenticating user. exception.description: Error in authenticating and creating a workflow context for user jazn.com/weblogic. exception.fix: Verify that the user credentials and identity service configurations are correct.

Issue 5

Requests for approval fail with error:

IAM-2050126 : Invalid outcome com.oracle.bpel.client.BPELFault: faultName:{{http://schemas.oracle.com/bpel/extension}bindingFault} messageType: {{http://schemas.oracle.com/bpel/extension}RuntimeFaultMessage} parts: {{summary=oracle.fabric.common.FabricInvocationException: oracle.bpel.services.workflow.client.WorkflowServiceClientException: java.rmi.RemoteException: EJB Exception: ; nested exception is: BPEL-10555 Identity Service Configuration error. Identity Service Configuration has error. Please refer to the identity service configuration guidelines and correct the Identity Service configurations., code=null, detail=JPS-02597: You configured a custom Authentication Provider or WLS generic LDAPAuthenticator, which the libOvd can not recognize. Supply the idstore.type property in jps-config.xml file, or use a specific WLS LDAP Authentication provider that matches your LDAP server instead of a generic one.} received from SOA for the request id <REQUEST_ID>.

Changes

Patches have recently been applied.

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.