My Oracle Support Banner

E-LDAP: LDAP Based Dynamic Roles Rules Can Cause SYSAUDIT Errors For SEC-08 & SEC-18 By Adding Roles To OPRIDs On PSROLEUSER Which Don't Exist On PSOPRDEFN (Doc ID 3044621.1)

Last updated on AUGUST 29, 2024

Applies to:

PeopleSoft Enterprise PT PeopleTools - Version 8.60 and later
Information in this document applies to any platform.

Symptoms

 Customer has numerous Active Directory (LDAP) based dynamic roles. They have found that when running the LDAP Role Rules the process is adding the ROLEUSER to the PSROLEUSER table without validating if the OPRID exists on the PSOPRDEFN table. This causes exceptions to appear in the  and SEC-18 in the sysaudit report, as well as having 'junk' data in PSROLEUSER table. Is this correct or should these audits be ignored?

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Symptoms
Cause
Solution
References


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.