Creating OID 10g Custom Password Policy for a Container fails with LDAP: error code 53 - "Password Policy Error: 9017" (Doc ID 443561.1)

Last updated on AUGUST 26, 2022

Applies to:

Symptoms

1. )
Following Oracle Internet Directory Administrator's Guide
10g (10.1.4.0.1) > 19.2.1.3 Creating Password Policies by Using Oracle Directory Manager to create a Custom password policy for a container can fail with LDAP: error code 53

for example:

1.a.)
Open Oracle Directory Manager, login as cn=orcladmin
On the left side, expand
    -Oracle Internet Directory Servers
        -orcladmin@<OID_HOSTNAME>:<PORT>
            - Password Policy Management
Click "cn=pwdPolicies,cn=Common,cn=Products,cn=OracleContext,dc=<COMPANY>,dc=com" 

1.b.)
On the right side, click "Password Policy for Realm dc=<COMPANY>,dc=com"
Right click on it and choose "Create like". A dialog box is opened.
In General tab, check "Enable OID Password Policy"
In the "Display Name" field, enter "Password Policy for test" or something else such as to
personalize this.
Enter other settings in related tabs: "Account Lockout" "IP Lockout" "Password Syntax"
On the Effective Subtree tab, click ADD and in the second dialog box that is opened, use the Browse button to choose the container for which we intend to define the password policy.
For example, for "Root of Subtree: " choose "cn=<ENTRY>,cn=Users,dc=<COMPANY>,dc=com"
Click OK
This will fail with the following error:

Click OK to close this.

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.