Monday 27 November 2017

Operation failed when PeopleSoft hrms tries to give a call to OIM to create/modify user

Issue: Operation failed when PeopleSoft hrms tries to give a call to OIM to create/modify user

PRODUCT
Oracle Identity Manager (OIM)-version 11.1.2.2
PeopleSoft HRMS

SYMPTOMS

ERROR CODE: java.lang.SecurityException: [Security:090304]Authentication Failed: User xelsysadm javax.security.auth.login.FailedLoginException: [Security:090302]Authentication Failed: User xelsysadm denied

Log Trace:
OIM logs:
[ACTIVE].ExecuteThread: '11' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: <anonymous>] [ecid: 70cd304c0a93c1f8:-74d80069:156bc012dd9:-8000-00000000000002cc,0] [APP: PeopleSoftOIMListener] Class/Method: tcUtilityFactory/tcUtilityFactory(Hashtable env, tcSignatureMessage poUserIDMessage) encounter some problems: javax.security.auth.login.LoginException: java.lang.SecurityException: [Security:090304]Authentication Failed: User xelsysadm javax.security.auth.login.FailedLoginException: [Security:090302]Authentication Failed: User xelsysadm denied[[
javax.security.auth.login.LoginException: javax.security.auth.login.LoginException: java.lang.SecurityException: [Security:090304]Authentication Failed: User xelsysadm javax.security.auth.login.FailedLoginException: [Security:090302]Authentication Failed: User xelsysadm denied

PeopleSoftOIMListener] oracle.iam.connectors.psft.common.handler.APIProvider: initializeOIMApiFactory: Unable to login into OIM. Login would be retried.
[2016-08-24T17:09:48.403+05:30] [oim_server1] [ERROR] [] [ORACLE.IAM.CONNECTORS.PSFT] [tid: [ACTIVE].ExecuteThread: '11' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: <anonymous>] [ecid: 70cd304c0a93c1f8:-74d80069:156bc012dd9:-8000-00000000000002cc,0] [APP: PeopleSoftOIMListener] oracle.iam.connectors.psft.common.handler.APIProvider: initializeOIMApiFactory: Login attempt #2 out of 2 failed.
[2016-08-24T17:09:48.404+05:30] [oim_server1] [ERROR] [] [ORACLE.IAM.CONNECTORS.PSFT] [tid: [ACTIVE].ExecuteThread: '11' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: <anonymous>] [ecid: 70cd304c0a93c1f8:-74d80069:156bc012dd9:-8000-00000000000002cc,0] [APP: PeopleSoftOIMListener] oracle.iam.connectors.psft.common.handler.APIProvider: initializeOIMApiFactory: Login would be retried after 1000 miliseconds
[2016-08-24T17:09:49.406+05:30] [oim_server1] [ERROR] [] [ORACLE.IAM.CONNECTORS.PSFT] [tid: [ACTIVE].ExecuteThread: '11' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: <anonymous>] [ecid: 70cd304c0a93c1f8:-74d80069:156bc012dd9:-8000-00000000000002cc,0] [APP: PeopleSoftOIMListener] oracle.iam.connectors.psft.common.listener.PeopleSoftOIMListener: process: Error logging into OIM
[2016-08-24T17:09:49.407+05:30] [oim_server1] [ERROR] [] [ORACLE.IAM.CONNECTORS.PSFT] [tid: [ACTIVE].ExecuteThread: '11' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: <anonymous>] [ecid: 70cd304c0a93c1f8:-74d80069:156bc012dd9:-8000-00000000000002cc,0] [APP: PeopleSoftOIMListener] oracle.iam.connectors.psft.common.listener.PeopleSoftOIMListener: process: Error occurred while processing message[[
Error logging into OIM

CAUSE:
1. PeopleSoft application tries to login to OIM application before doing any user creations/modifications with oim admin user "xelsysadm".
2. But PeopleSoft is not able to login with Xelsysadm user credentials because "OIMAuthenticationProvider" is not present under Providers in weblogic Server where OIM managed server is running.Find below screenshot from WLS.
3. Ideally "OIMAuthenticationProvider" should present like below: 


SOLUTION:

1. Create OIMAuthenticator like below in weblogic Server where OIM managed server is running:
2. Restart the domain, you should be able to resove the issue.

Thank you for referring my blog, please post your comments for any queries/suggestions..Have a nice time :)

No comments:

Post a Comment

Not able to run 'xclock' command using MobaXterm

Issue: Not able to run 'xclock' command using MobaXterm. Error: $ xclock MobaXterm X11 proxy: Authorisation not recognised Err...