Friday, February 22, 2019

LDAP: error code 49 - Password Policy Error :9000: GSL_PWDEXPIRED_EXCP

Symptoms:
You try to login to an Oracle application that has its catalog on OID (v.11), but you check the logs and see message like this:
 [LDAP: error code 49 - Password Policy Error :9000: GSL_PWDEXPIRED_EXCP :Your Password has expired. Please contact the Administrator to change your password.]

Cause:
The policy configured on OID is set to expire after X days.

Solution:
There are several solutions for this generic issue.
Lets try the first that is to check the password validity:

[oracle@sandbox01 u01]$ ldapbind -h sandbox01 -p 3060 -D "cn=sim.admin,cn=users,dc=retail,dc=com" -w sim.admin
ldap_bind: Invalid credentials
ldap_bind: additional info: Password Policy Error :9000: GSL_PWDEXPIRED_EXCP :Your Password has expired. Please contact the Administrator to change your password.

Here you have change the password, using the ODSM for example. Then you check if its ok now:

[oracle@sandbox01 u01]$ ldapbind -h sandbox01 -p 3060 -D "cn=sim.admin,cn=users,dc=retail,dc=com" -w sim.admin1
bind successful


The second method is unlocking the user on the catalog through the oidpasswd.
./oidpasswd connect=CATDB unlock_su_acct=true
OID DB user password: XXX
OID super user account unlocked successfully.

If this has not solved your problem, you might check the Oracle Support Doc ID 272248.1 that was used as a reference to solve, but also there are more options/possible solutions to fix the isse.

No comments:

Post a Comment

Configure the Oracle DB Access Control List to avoid error like ORA-24247: network access denied

Symptoms:  You try to make external connections from the Oracle Database and receive erros like ORA-24247: network access denied by access c...