AuthenticateOnBehalfOf Service Operation Fails If Credential Is Not In Top-most LDAP Provider (Doc ID 2948577.1)

Last updated on MAY 16, 2023

Applies to:

Symptoms

AuthenticateOnBehalfOf service operation fails if credential is not in top-most LDAP provider after upgrading to 12c. In 11g this functionality was working fine.

AD search was binding to single provider :

[2023-04-05T10:39:40.883+08:00] [WLS_SOA1] [NOTIFICATION] [LIBOVD-20023] [oracle.ods.virtualization] [tid: [ACTIVE].ExecuteThread: '22' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: <anonymous>] [ecid: 529fe1d0-1486-4ff0-bfb9-7277eb3d6f3c-0000022b,0:3] [APP: soa-infra] [partition-name: DOMAIN] [tenant-name: GLOBAL] [J2EE_APP.name: soa-infra] [J2EE_MODULE.name: integration/services/TaskQueryService] [WEBSERVICE.name: TaskQueryService] [WEBSERVICE_PORT.name: TaskQueryServicePort] Attempted BIND has multiple target adapters (selecting#<AD_PROVIDER_NAME>):

And throwing below error for user :

[2023-04-17T12:09:04.451+08:00] [WLS_SOA1] [ERROR] [] [oracle.soa.services.identity] [tid: [ACTIVE].ExecuteThread: '42' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: <anonymous>] [ecid: bcc6e33e-ee34-4bf8-a3a2-fca2f91ffe99-0000033a,0:26] [APP: soa-infra] [partition-name: DOMAIN] [tenant-name: GLOBAL] [J2EE_APP.name: soa-infra] [J2EE_MODULE.name: integration/services/TaskQueryService] [WEBSERVICE.name: TaskQueryService] [WEBSERVICE_PORT.name: TaskQueryServicePort] <.> Identity Service Authentication failure.[[

Identity Service Authentication failure.

Either the user name or password is incorrect. Check the error stack and fix the cause of the error.

ORABPEL-10528

Identity Service Authentication failure.

Changes

 Customer recently upgraded to 12c version. 

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.