My Oracle Support Banner

Users with an Expired Password are Able to Login to the WebLogic Admin Console that is Configured with FreeIPA as an External LDAP Provider (Doc ID 2662949.1)

Last updated on DECEMBER 21, 2022

Applies to:

Oracle WebLogic Server - Version 10.3.6 to 12.2.1.4.0
Information in this document applies to any platform.

Symptoms

A new LDAP Authentication group has been created in Oracle WebLogic Server with FreeIPA as an external LDAP provider.
FreeIPA: FreeIPA is a free and open source identity management system.
Ideally, the users belonging to this particular LDAP group shall not be able to login to the Oracle WebLogic Admin Console once their freeIPA credentials have been expired. However, in this case, the users are able to login to the console even with an expired password.

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!

In this Document
Symptoms
Cause
Solution


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.