Friday, November 7, 2014

OAMSSA-20007: Unable to connect to the User Store


OAMSSA-20007: Unable to connect to the User Store

Illegal character in path at index 3

This is the error you see in the OAM diagnostic log when you try to authenticate against your custom userstore if you create it with spaces in its name.

For example, If you create userstore with name "AD userstore", authentication wont work and you will notice the below error.

Fix:
#####
Simple. DO NOT USE ANY SPACES. :)   Make it like "ADuserstore"

This is a bug in 11gr2ps2 which has been reported to oracle (Doc ID 1645954.1). This post is for people who want to google the error than checking it in metalink.
Who would expect a space in the userstore name will break the entire thing? lol

Error:
######

oracle.security.am.engines.common.identity.provider.exceptions.IdentityProviderException: OAMSSA-20007: Unable to connect to the User Store. User Store OID userstore with initParams {GROUP_SEARCH_BASE=cn=Groups, dc=example,dc=com, GroupCacheEnabled=false, USER_SCHEMA=none, NATIVE=false, USER_SEARCH_BASE=cn=Users, dc=example,dc=com, ENABLE_PASSWORD_POLICY=true, MAX_CONNECTIONS=50, GroupCacheTTL=0, SECURITY_PRINCIPAL=cn=orcladmin, Description=OID in DEV, ConnectionRetryCount=3, USER_NAME_ATTRIBUTE=uid, IsSystem=false, IsPrimary=false, ConnectionWaitTimeout=120, Name=OID userstore, SearchTimeLimit=0, MIN_CONNECTIONS=10, USER_PASSWORD_ATTRIBUTE=userPassword, LDAP_PROVIDER=OID, LDAP_URL=ldap://mdcovm04.na.ops.local:3060, ReferralPolicy=follow, GroupCacheSize=10000, UserIdentityProviderType=OracleUserRoleAPI} could not be initialized due to null.
        at oracle.security.am.engines.common.identity.provider.impl.IdentityProviderImpl.init(IdentityProviderImpl.java:319)
        at oracle.security.am.engines.common.identity.provider.impl.IdentityProviderImpl.init(IdentityProviderImpl.java:241)
        at oracle.security.am.engines.common.identity.provider.impl.IdentityProviderImpl.authenticateUserByName(IdentityProviderImpl.java:1209)
        at oracle.security.am.engines.common.identity.provider.impl.OracleUserIdentityProvider.authenticateUserByName(OracleUserIdentityProvider.java:477)
        at oracle.security.am.engine.authn.internal.executor.AuthenticationModuleExecutor.execute(AuthenticationModuleExecutor.java:226)
        ... 41 more
Caused by: oracle.security.am.engines.common.identity.provider.exceptions.IdentityProviderException
        at oracle.security.am.engines.common.identity.provider.impl.ids.IDSLDAPConfigurator.getIDSInstance(IDSLDAPConfigurator.java:484)
        at oracle.security.am.engines.common.identity.provider.impl.IdentityProviderImpl.init(IdentityProviderImpl.java:281)
Caused by: oracle.igf.ids.IDSException: Illegal character in path at index 3: OID userstore
        at oracle.igf.ids.IdentityDirectory.<init>(IdentityDirectory.java:169)
        at oracle.igf.ids.IdentityDirectoryFactory.getIdentityDirectory(IdentityDirectoryFactory.java:153)
        at oracle.security.am.engines.common.identity.provider.impl.ids.IDSLDAPConfigurator.getIDSInstance(IDSLDAPConfigurator.java:479)
        ... 46 more
Caused by: oracle.igf.ids.IDSException: Illegal character in path at index 3: OID userstore
        at oracle.igf.ids.arisid.ArisIdServiceManager.initialize(ArisIdServiceManager.java:1014)
        at oracle.igf.ids.arisid.ArisIdServiceManager.<init>(ArisIdServiceManager.java:308)
        at oracle.igf.ids.IdentityDirectory.<init>(IdentityDirectory.java:161)
        ... 48 more
Caused by: java.net.URISyntaxException: Illegal character in path at index 3: OID userstore
        at java.net.URI$Parser.fail(URI.java:2810)
        at java.net.URI$Parser.checkChars(URI.java:2983)
        at java.net.URI$Parser.parseHierarchical(URI.java:3067)
        at java.net.URI$Parser.parse(URI.java:3025)
        at java.net.URI.<init>(URI.java:577)
        at oracle.igf.ids.arisid.ArisIdServiceManager.initialize(ArisIdServiceManager.java:474)
        ... 50 more

No comments:

Post a Comment

Other Posts