After Applying the Microsoft Patch, The Error 'The user account is locked or disabled. Please contact the System Administrator' Shows Up With The Error Logs 'KrbException: AES256 CTS mode with HMAC SHA1-96 encryption type not in permitted_enctypes list' (Doc ID 2920101.1)

Last updated on JULY 15, 2024

Applies to:

Oracle Access Manager - Version 11.1.2.2.0 and later
Information in this document applies to any platform.

The error 'The user account is locked or disabled. Please contact the System Administrator' comes up when user try to login.

Oracle Access Manager (OAM)
Windows Native Authentication (WNA)
Using the OAM with Windows Native Authentication (WNA) + Kerberos in order to connect with AD
Applied patch on the Active Directory (AD) side.
There were no changed on OAM side.
The following logs are recorded in the OAM diagnostics logs :

Applied patch on the Active Directory (AD) side.

	To view full details, sign in with your My Oracle Support account.
	Don't have a My Oracle Support account? Click to get started!

In this Document

Symptoms

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.