Incorrect Error Message For Disabled User in LibOVD for Novel eDirectory Backend (Doc ID 2604901.1)

Last updated on NOVEMBER 01, 2022

Applies to:

Symptoms

WebCenter portal application integrated with OAM and OVD for SSO. OVD Backends are OUD, Active Directory and Novell Directory to store the users.
Correct error message is returned from LibOVD for disabled users from OUD and Active Directory but not for Novell.

Error message for disabled user in Novell eDirectory is not being parsed correctly. Below is the error received in OAM from OVD Server:

-------------------------------------------------------------------
eDirectory:

<Dec 2, 2018 10:09:17 PM PST> <Error> <oracle.oam.user.identity.provider> <OAMSSA-20023> <Authentication Failure for user : <User name>, for idstore OVD with exception oracle.igf.ids.AuthenticationException: Authentication failed for user <User DN>. AdditionalInfo: LDAP Error 53 : [LDAP: error code 53 - LDAP Error 53 : [LDAP: error code 53 - NDS error: log account expired (-220)]] with primary error message LDAP Error 53 : [LDAP: error code 53 - LDAP Error 53 : [LDAP: error code 53 - NDS error: log account expired (-220)]]>

AD:

<Dec 2, 2018 10:12:14 PM PST> <Error> <oracle.oam.user.identity.provider> <OAMSSA-20023> <Authentication Failure for user : <User name>, for idstore OVD with exception oracle.igf.ids.AuthenticationException: Authentication failed for user <User DN>. AdditionalInfo: LDAP Error 49 : [LDAP: error code 49 - LDAP Error 49 : [LDAP: error code 49 - 80090308: LdapErr: DSID-0C09042F, comment: AcceptSecurityContext error, data 533, v2580]] with primary error message LDAP Error 49 : [LDAP: error code 49 - LDAP Error 49 : [LDAP: error code 49 - 80090308: LdapErr: DSID-0C09042F, comment: AcceptSecurityContext error, data 533, v2580]]>

OUD:

<Dec 3, 2018 6:18:12 AM GMT> <Error> <oracle.oam.user.identity.provider> <OAMSSA-20023> <Authentication Failure for user : <User name>, for idstore ovd with exception oracle.igf.ids.AuthenticationException: Authentication failed for user <User DN>. AdditionalInfo: LDAP Error 53 : [LDAP: error code 53 - Account Policy Error :9050: GSL_ACCTDISABLED_EXCP: Your Account has been disabled. Please contact the administrator] with primary error message LDAP Error 53 : [LDAP: error code 53 - Account Policy Error :9050: GSL_ACCTDISABLED_EXCP: Your Account has been disabled. Please contact the administrator]>
-------------------------------------------------------------------

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.