My Oracle Support Banner

Incorrect Error Message For Disabled User in LibOVD for Novel eDirectory Backend (Doc ID 2604901.1)

Last updated on MAY 09, 2021

Applies to:

Oracle Virtual Directory - Version 11.1.2.0 and later
Information in this document applies to any platform.

Symptoms

WebCenter portal application integrated with OAM and OVD for SSO. OVD Backends are OUD, Active Directory and Novell Directory to store the users.
Correct error message is returned from LibOVD for disabled users from OUD and Active Directory but not for Novell.

Error message for disabled user in Novell eDirectory is not being parsed correctly. Below is the error received in OAM from OVD Server:

-------------------------------------------------------------------
eDirectory:

<Dec 2, 2018 10:09:17 PM PST> <Error> <oracle.oam.user.identity.provider> <OAMSSA-20023> <Authentication Failure for user : <User name>, for idstore OVD with exception oracle.igf.ids.AuthenticationException: Authentication failed for user <User DN>. AdditionalInfo: LDAP Error 53 : [LDAP: error code 53 - LDAP Error 53 : [LDAP: error code 53 - NDS error: log account expired (-220)]] with primary error message LDAP Error 53 : [LDAP: error code 53 - LDAP Error 53 : [LDAP: error code 53 - NDS error: log account expired (-220)]]>

AD:

<Dec 2, 2018 10:12:14 PM PST> <Error> <oracle.oam.user.identity.provider> <OAMSSA-20023> <Authentication Failure for user : <User name>, for idstore OVD with exception oracle.igf.ids.AuthenticationException: Authentication failed for user <User DN>. AdditionalInfo: LDAP Error 49 : [LDAP: error code 49 - LDAP Error 49 : [LDAP: error code 49 - 80090308: LdapErr: DSID-0C09042F, comment: AcceptSecurityContext error, data 533, v2580]] with primary error message LDAP Error 49 : [LDAP: error code 49 - LDAP Error 49 : [LDAP: error code 49 - 80090308: LdapErr: DSID-0C09042F, comment: AcceptSecurityContext error, data 533, v2580]]>

OUD:

<Dec 3, 2018 6:18:12 AM GMT> <Error> <oracle.oam.user.identity.provider> <OAMSSA-20023> <Authentication Failure for user : <User name>, for idstore ovd with exception oracle.igf.ids.AuthenticationException: Authentication failed for user <User DN>. AdditionalInfo: LDAP Error 53 : [LDAP: error code 53 - Account Policy Error :9050: GSL_ACCTDISABLED_EXCP: Your Account has been disabled. Please contact the administrator] with primary error message LDAP Error 53 : [LDAP: error code 53 - Account Policy Error :9050: GSL_ACCTDISABLED_EXCP: Your Account has been disabled. Please contact the administrator]>
-------------------------------------------------------------------

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Symptoms
Cause
Solution
References


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.