Issues and Solutions – SSO

Single Sign on

Here are the common errors and their solutions encountered when maintaining OID/OAM for Single Sign on environments

1> Java Heap Size error on Oracle Internet directory

Make the below changes on On Oracle Internet directory – 11.1.1.7
cd $MW_HOME/user_projects/domains/IDMDomain/bin

vi setDomainEnv.sh

Old value

< EXTRA_JAVA_PROPERTIES=”${EXTRA_JAVA_PROPERTIES} -Didm.oracle.home=${IDM_ORACLE_HOME} -Xms512m -Xmx1024m -Xss512K -Djava.protocol.handler.pkgs=oracle.mds.net.protocol -Dweblogic.management.discover=false”

New value

> EXTRA_JAVA_PROPERTIES=”${EXTRA_JAVA_PROPERTIES} -Didm.oracle.home=${IDM_ORACLE_HOME} -Xms3072m -Xmx3072m -Xss2048K -Djava.protocol.handler.pkgs=oracle.mds.net.protocol -Dweblogic.management.discover=false”

2> Once in 6 months the sync from ODSM to Oracle eBS stops, follow below note

How to check/change the eBiz AppsDN user password in AS10g OID [ID 437697.1]

3> Apply below patch on Oracle Internet Directory

p13977226_111170_Generic.zip

13977226: WLS_ODS1 OUTOFMEMORY (OOM) CONDITION FOR THE MANAGED SERVER

4> For the below error –

URL validation failed, the error could have been caused through the use of the browser navigation buttons

Please check guid in Oracle OID and Oracle EBS and update accordingly

5> Error in WebLogic Clustering : socket MaxMessage Size Exceeded Exception

Servers ->[server_name]-> Protocols -> General -> Max Message Size
•Add Maximum Message Size to value higher than one mentioned in error message (10000080) for WebLogic Server
WebLogic Console -> Servers ->[server_name]-> Configuration -> Server Start -> Arguments

-Dweblogic.MaxMessageSize = 10000080

•Add below parameter -Dweblogic.MaxMessageSize in environment variable file $DOMAIN_HOME/bin/setDomainEnv.sh or setSOADomainEnv.sh (for SOA application)
EXTRA_JAVA_PROPERTIES=”${EXTRA_JAVA_PROPERTIES} -Dweblogic.MaxMessageSize=10000080“

6> DIP Synchronization Is Failing With [Ldap: Error Code 68 – Entry Already Exists] When User Is Moved In Active Directory (Doc ID 1266944.1)

7> orcladmin account lock in oracle 11g

oidpasswd connect=oraprd unlock_su_acct=true – did not work

For 11g

cd $ORACLE_HOME/bin
oidpasswd connect=OIDDB unlock_su_acc=true

oidpasswd connect=oraprd unlock_su_acct=true
OID DB user password:
[gsdsiConnect] Error Creating OCI Environment :-1
ERROR * gsldpuUnlockSuAccount * ORA-0: encountered
OID super user account unlocked successfully.

ldapbind -p 3061 -D “cn=orcladmin” -w “passwd”

References :

How to Troubleshoot OID(Doc ID 329808.1)
How To Troubleshoot OID DIP Sync Mapping Problems(Doc ID 1060014.1)
Troubleshooting Oracle Application Server 10g SSO and OID with Oracle E-Business Suite Release 12(Doc ID 380487.1)
Troubleshooting the E-Business Suite Integration with Oracle Internet Directory (OID) and Oracle Access Manager (OAM) – Part 1 OID(Doc ID 1450231.1)
Troubleshooting the E-Business Suite Integration with Oracle Internet Directory (OID) and Oracle Access Manager (OAM) – Part 2 OAM(Doc ID 1466171.1)
Troubleshooting Start / Stop of Oracle Internet Directory(Doc ID 155790.1)
Troubleshooting Database Link (DBLINK) When Oracle Internet Directory (OID) Is Used For Name Resolution.(Doc ID 359068.1)
Information Center: Troubleshooting Oracle Internet Directory 11g and later(Doc ID 1347487.2)

Regards
Admin
http://www.appsdba.info