{"id":3338,"date":"2012-12-10T12:58:31","date_gmt":"2012-12-10T17:58:31","guid":{"rendered":"https:\/\/pitss.org\/us\/2012\/12\/10\/logging-into-oam-protected-application-causes-internal-server-connection-error\/"},"modified":"2017-05-15T15:19:11","modified_gmt":"2017-05-15T19:19:11","slug":"logging-into-oam-protected-application-causes-internal-server-connection-error","status":"publish","type":"post","link":"https:\/\/pitss.org\/us\/2012\/12\/10\/logging-into-oam-protected-application-causes-internal-server-connection-error\/","title":{"rendered":"Logging into OAM-protected application causes Internal Server Connection error"},"content":{"rendered":"

1\u00a0\u00a0\u00a0 In<\/span>tr<\/span>o<\/span>d<\/span>uct<\/span>ion<\/span><\/span><\/b><\/p>\n

This app<\/span>lies t<\/span>o t<\/span>h<\/span>e fo<\/span>ll<\/span>o<\/span>wing si<\/span>tuatio<\/span>n<\/span>:<\/p>\n

OID has tw<\/span>o OI<\/span>D Ad<\/span>m<\/span>in<\/span>istr<\/span>ato<\/span>r u<\/span>s<\/span>ers: (sup<\/span>er ad<\/span>m<\/span>in us<\/span>er<\/span>) \u201c<\/span>cn=<\/span>o<\/span>rclad<\/span>m<\/span>in<\/span>\u201d an<\/span>d (<\/span>l<\/span>o<\/span>cal ad<\/span>m<\/span>in<\/span>) \u201c<\/span>cn=<\/span>o<\/span>rclad<\/span>m<\/span>in<\/span>,cn=Us<\/span>ers,dc<\/span>=domain,d<\/span>c<\/span>=com\u201d<\/span>. The lo<\/span>cal ad<\/span>m<\/span>in pass<\/span>wo<\/span>rd ex<\/span>p<\/span>ir<\/span>ed<\/span>, by which t<\/span>h<\/span>e OA<\/span>M lo<\/span>g<\/span>in fo<\/span>r<\/span>m us<\/span>es th<\/span>e lo<\/span>cal ad<\/span>m<\/span>in t<\/span>o perf<\/span>o<\/span>r<\/span>m pass<\/span>wo<\/span>rd r<\/span>ese<\/span>t<\/span>ting<\/span>.<\/p>\n

To ge<\/span>t ar<\/span>o<\/span>un<\/span>d t<\/span>h<\/span>is issu<\/span>e, a wo<\/span>rk<\/span>aro<\/span>un<\/span>d was p<\/span>u<\/span>t in pla<\/span>ce t<\/span>o ens<\/span>u<\/span>re th<\/span>e lo<\/span>cal ad<\/span>m<\/span>i<\/span>n\u2019s passw<\/span>o<\/span>rd do<\/span>es n<\/span>o<\/span>t un<\/span>ex<\/span>p<\/span>ect<\/span>edl<\/span>y e<\/span>xpi<\/span>re. D<\/span>et<\/span>ail<\/span>s o<\/span>f th<\/span>is w<\/span>o<\/span>rka<\/span>ro<\/span>un<\/span>d are de<\/span>tailed in t<\/span>h<\/span>e next se<\/span>ctio<\/span>n o<\/span>f t<\/span>h<\/span>is do<\/span>cum<\/span>ent.<\/p>\n

2\u00a0\u00a0\u00a0 W<\/span>o<\/span>rkar<\/span>o<\/span>u<\/span>nd impl<\/span>eme<\/span>nt<\/span>a<\/span>t<\/span>ion<\/span><\/span><\/b><\/p>\n

2.1\u00a0\u00a0 Cre<\/span>at<\/span>e a ne<\/span>w p<\/span>ass<\/span>w<\/span>o<\/span>rd p<\/span>o<\/span>licy<\/span><\/span><\/b><\/p>\n

In OID<\/span>\u2019s OD<\/span>S<\/span>M t<\/span>o<\/span>o<\/span>l, a n<\/span>ew p<\/span>asswo<\/span>rd p<\/span>o<\/span>lic<\/span>y m<\/span>u<\/span>st b<\/span>e cr<\/span>eat<\/span>ed, b<\/span>y w<\/span>h<\/span>i<\/span>ch p<\/span>assw<\/span>o<\/span>rd<\/span>s are s<\/span>et t<\/span>o either no<\/span>t ex<\/span>p<\/span>ire o<\/span>r ex<\/span>p<\/span>ire af<\/span>te<\/span>r \u2018x\u2019 l<\/span>e<\/span>ng<\/span>th o<\/span>f t<\/span>i<\/span>m<\/span>e fo<\/span>r the \u2018p<\/span>assw<\/span>o<\/span>rd e<\/span>xpi<\/span>r<\/span>y<\/span>\u2019 v<\/span>alu<\/span>e<\/span>.<\/p>\n

The v<\/span>alu<\/span>e se<\/span>t is in se<\/span>c<\/span>o<\/span>nd<\/span>s, so the pr<\/span>o<\/span>p<\/span>er c<\/span>alcu<\/span>lati<\/span>o<\/span>n<\/span>s m<\/span>u<\/span>st b<\/span>e d<\/span>o<\/span>n<\/span>e if yo<\/span>u wish t<\/span>o se<\/span>t p<\/span>ass<\/span>wo<\/span>rd e<\/span>xpi<\/span>r<\/span>y fo<\/span>r day<\/span>s\/m<\/span>o<\/span>n<\/span>ths\/<\/span>y<\/span>ears.<\/p>\n

Af<\/span>te<\/span>r cr<\/span>eat<\/span>in<\/span>g and sa<\/span>v<\/span>in<\/span>g t<\/span>h<\/span>e n<\/span>ew pa<\/span>ssw<\/span>o<\/span>rd po<\/span>li<\/span>cy<\/span>, cop<\/span>y do<\/span>wn th<\/span>e co<\/span>m<\/span>p<\/span>le<\/span>te d<\/span>is<\/span>tingu<\/span>ish<\/span>ed na<\/span>m<\/span>e (dn<\/span>) o<\/span>f the passw<\/span>o<\/span>rd p<\/span>o<\/span>licy<\/span>. For ex<\/span>am<\/span>p<\/span>le<\/span>, \u201c<\/span>cn=o<\/span>r<\/span>clAd<\/span>m<\/span>in<\/span>P<\/span>wd<\/span>,cn=p<\/span>wdP<\/span>o<\/span>licie<\/span>s,cn=C<\/span>o<\/span>m<\/span>m<\/span>o<\/span>n<\/span>,cn=<\/span>P<\/span>ro<\/span>du<\/span>c<\/span>ts, cn=Oracle<\/span>Co<\/span>n<\/span>t<\/span>ex<\/span>t<\/span>\u201d<\/span>.<\/p>\n

2.2\u00a0 \u00a0<\/span>A<\/span>p<\/span>p<\/span>l<\/span>y pass<\/span>w<\/span>o<\/span>r<\/span>d p<\/span>o<\/span>li<\/span>c<\/span>y to lo<\/span>c<\/span>al a<\/span>d<\/span>m<\/span>in u<\/span>s<\/span>e<\/span>r <\/span><\/span><\/span><\/b><\/p>\n

In OD<\/span>SM<\/span>, nav<\/span>ig<\/span>a<\/span>te t<\/span>o the l<\/span>o<\/span>cal ad<\/span>m<\/span>in user<\/span>, (example shown here): \u201c<\/span>cn=<\/span>o<\/span>rclad<\/span>m<\/span>in<\/span>,cn=Us<\/span>ers,dc<\/span>=domain,dc=com\u201d<\/span>.<\/p>\n

Set the \u201c<\/span>p<\/span>wdp<\/span>o<\/span>lic<\/span>y<\/span>sub<\/span>entr<\/span>y<\/span>\u201d attribu<\/span>te t<\/span>o the c<\/span>om<\/span>p<\/span>l<\/span>et<\/span>e d<\/span>istingu<\/span>ish<\/span>ed na<\/span>m<\/span>e o<\/span>f t<\/span>h<\/span>e n<\/span>ew passw<\/span>o<\/span>rd p<\/span>o<\/span>licy fo<\/span>r e<\/span>xa<\/span>m<\/span>p<\/span>le<\/span>, \u201c<\/span>cn=o<\/span>rclA<\/span>d<\/span>m<\/span>i<\/span>n<\/span>P<\/span>wd<\/span>,cn=p<\/span>wdP<\/span>o<\/span>licies<\/span>,cn=C<\/span>o<\/span>mm<\/span>o<\/span>n<\/span>,cn=<\/span>P<\/span>r<\/span>o<\/span>du<\/span>cts, cn=O<\/span>racleCo<\/span>n<\/span>te<\/span>x<\/span>t<\/span>\u201d<\/span>.<\/p>\n

2.3\u00a0\u00a0 S<\/span>av<\/span>e c<\/span>h<\/span>an<\/span>ge<\/span>s<\/span><\/span><\/b><\/p>\n

Af<\/span>te<\/span>r sa<\/span>v<\/span>in<\/span>g ch<\/span>ang<\/span>es to t<\/span>h<\/span>e lo<\/span>cal ad<\/span>m<\/span>in us<\/span>er, th<\/span>e lo<\/span>cal ad<\/span>m<\/span>in acc<\/span>o<\/span>un<\/span>t sh<\/span>o<\/span>u<\/span>ld be u<\/span>n<\/span>ex<\/span>p<\/span>ired<\/span>. T<\/span>o t<\/span>est<\/span>, y<\/span>o<\/span>u can do an ld<\/span>apb<\/span>in<\/span>d again<\/span>st the acc<\/span>o<\/span>un<\/span>t to v<\/span>erif<\/span>y i<\/span>t is u<\/span>n<\/span>lo<\/span>cke<\/span>d<\/span>.<\/p>\n

For e<\/span>xam<\/span>pl<\/span>e, in c<\/span>o<\/span>m<\/span>m<\/span>an<\/span>d p<\/span>rom<\/span>p<\/span>t y<\/span>o<\/span>u can ru<\/span>n the f<\/span>o<\/span>l<\/span>lo<\/span>wing c<\/span>o<\/span>m<\/span>m<\/span>and<\/span>: C:\\<\/span>Oracle\\<\/span>M<\/span>idd<\/span>leware\\<\/span>%OID_HOME%\\b<\/span>in\\<\/span>ld<\/span>apb<\/span>in<\/span>d -h h<\/span>o<\/span>stna<\/span>m<\/span>e.do<\/span>m<\/span>ain<\/span>.c<\/span>o<\/span>m -p 3<\/span>0<\/span>6<\/span>0 –<\/span>D ” cn=o<\/span>rclAd<\/span>m<\/span>in<\/span>P<\/span>wd,<\/span>cn=p<\/span>wd<\/span>Po<\/span>li<\/span>cies,cn=C<\/span>om<\/span>mo<\/span>n<\/span>,cn<\/span>=P<\/span>r<\/span>o<\/span>d<\/span>u<\/span>cts, cn<\/span>=<\/span>Oracl<\/span>eCo<\/span>n<\/span>t<\/span>ex<\/span>t ” \u2013<\/span>w TheP<\/span>as<\/span>sw<\/span>o<\/span>rd<\/p>\n

If the c<\/span>o<\/span>m<\/span>m<\/span>an<\/span>d re<\/span>turn<\/span>s \u201c<\/span>ld<\/span>ap bin<\/span>d successfu<\/span>l<\/span>\u201d in<\/span>ste<\/span>ad o<\/span>f g<\/span>e<\/span>tt<\/span>in<\/span>g a \u2018p<\/span>a<\/span>ssw<\/span>o<\/span>rd e<\/span>xpi<\/span>ratio<\/span>n\u2019 erro<\/span>r<\/span>, t<\/span>h<\/span>en yo<\/span>u<\/span>r chang<\/span>es are succ<\/span>essfu<\/span>l!<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

1\u00a0\u00a0\u00a0 Introduction This applies to the following situation: OID has two OID Administrator users: (super admin user) \u201ccn=orcladmin\u201d and (local admin) \u201ccn=orcladmin,cn=Users,dc=domain,dc=com\u201d. The local admin password expired, by which the OAM login form uses the local admin to perform password resetting. To get around this issue, a workaround was put in place to ensure the […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"categories":[94,14],"tags":[11,47,52],"class_list":["post-3338","post","type-post","status-publish","format-standard","hentry","category-access-management","category-resolve-issues","tag-11g","tag-oam","tag-oid"],"_links":{"self":[{"href":"https:\/\/pitss.org\/us\/wp-json\/wp\/v2\/posts\/3338","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/pitss.org\/us\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/pitss.org\/us\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/pitss.org\/us\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/pitss.org\/us\/wp-json\/wp\/v2\/comments?post=3338"}],"version-history":[{"count":3,"href":"https:\/\/pitss.org\/us\/wp-json\/wp\/v2\/posts\/3338\/revisions"}],"predecessor-version":[{"id":9167,"href":"https:\/\/pitss.org\/us\/wp-json\/wp\/v2\/posts\/3338\/revisions\/9167"}],"wp:attachment":[{"href":"https:\/\/pitss.org\/us\/wp-json\/wp\/v2\/media?parent=3338"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/pitss.org\/us\/wp-json\/wp\/v2\/categories?post=3338"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/pitss.org\/us\/wp-json\/wp\/v2\/tags?post=3338"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}