Oracle Internet Directory , OID Troubleshooting

11.5.10.2

Unable to validate Identity management Realm for this Oracle Internet Directory. Please verify that Oracle Internet Directory, its database and listener are running, you have entered the host name and SSL port number correctly , and there is a valid Identity management Realm available.

What are you trying to achieve ?

check if OID is up by running

netstat -an | grep

netstat -an | grep

you should see LISTEN against oid port

Can you please let me know the difference between OID-Status is Stopped and OID-Status is Down?

This is my status in xml file.No such entry like data id=”host” value=”teachmeoracle.com”/.

what does it mean?im newbie to this.

Hi,
//

//

This is my status in xml file.No such entry like data id=”host” value=”teachmeoracle.com”/.

what does it mean?im newbie to this.

I am trying install OID in 2 servers with single metadata. 1st server is successful and allowing to do any operation from ldap client..
2nd OID instance installation success but configuration is failting at step “Infrastructure instance Configuration assistant” failed.. when i retry also have the same issue.. when check the server its installaed and running also.. but its running on readonly mode.. How can i change the status to write mode or how can i fix the issue while configuration..

Appreciated your help..

-Srinivas

Hi,

I am newbee here. I have recently installed Oracle Ineternet Directory without Weblogic Domain to replace the tnsnames.

Can somebody pls direct me how to configure OID to replace the tnsnames after the installation.

I am really not understanding where to start from.

Pls point me the the documentation links which i can make use of to replace tnsnames using OID without the weblogic domail (no GUI tool).

Thanks a lot in advance.

sunil.

@ Sunil,

Use Net Manager netmgr in your database to create entry for your database in OID

– Start up the Oracle Net Manager
– Expand the Directory node
– On the Directory Server Authentication dialog enter cn=orcladmin and password

For client PCS tns_admin directory

1. sqlnet.ora – NAMES.DIRECTORY_PATH= (LDAP, TNSNAMES) i.e. ldap as first entry
2. ldap.ora – location of your OID like

DEFAULT_ADMIN_CONTEXT = “”
DIRECTORY_SERVERS= (xxxxxxxxx:389:636)
DIRECTORY_SERVER_TYPE = OID

where 389 is non ssl and 636 is ssl port for OID. Change them as per your 11g OID port.

Use netca of your database : http://download.oracle.com/docs/cd/E11882_01/network.112/e10836/admintools.htm#BABHHFII

Weare installing IDM 11.1.1.2 on RHEL5 with DB 10.2.0.4. The install was going well and had no reported issues — to the screen or logfiles. We installed IDM and then started the configuration. The install appeared to go well, but when the config got to the part where is was starting oidmon, we got the “Waiting for OID Server to come up” message. This happened 10 times and then oidctl ran the delete command.

It lists error:
Error in postCreateConfig().oracle.as.config.ProvisionException: Error starting OID

Which in turn, of course, caused the error that oid1 could not start.

The database and listener are running. We have only the one instance of installed.

Any ideas?
Thank you for your assistance.

One thing I did notice is that the default schedulerDS was not created for wls_ods1. Could this be the issue? If so, what would cause that to not get created?

@ Tom,
No schedulerDS (DIP) and OID are two different issues where DIP issues is related to OID being not available (not other way).

For OID issue , check OIDMON log file at

%ORACLE_INTSANCE%\diagnostics\ logs\ OID\ oid1 \

and also ORACLE_INTSANCE%\diagnostics\ logs\ OPMN\ opmn

Check this link too

http://onlineappsdba.com/index.php/2011/05/17/error-starting-oid-11g-during-configuration-stage-of-oid-installation-on-windows-server-provisionexception-failed-to-start-the-component/

Thank you for your quick response.

I looked at the links you listed. The one discussed checking the sqlnet.log but since I am using linux that doesn’t exist, but it did mention checking the oidldap log — it had the following:

[2011-05-31T23:31:46-04:00] [OID] [NOTIFICATION:16] [] [OIDLDAPD] [host: irsam-id.dchc.smil.mil] [pid: 30453] [tid: 0] Main:: sgslun6NewSock: Unable to create communication endpoint, OS error=97

[2011-05-31T23:31:46-04:00] [OID] [NOTIFICATION:16] [] [OIDLDAPD] [host: irsam-id.dchc.smil.mil] [pid: 30453] [tid: 0] Main:: sgslun6lBind : Memory allocation failed

[2011-05-31T23:31:46-04:00] [OID] [NOTIFICATION:16] [] [OIDLDAPD] [host: irsam-id.dchc.smil.mil] [pid: 30453] [tid: 0] Main:: sgslunlListen: Bind failed (port=389), OS error=(13)

I also checked the OPMN log and since oid is not getting created it is not listed in the opmn log when we try to start it.

@ Tom,
oidldapd logs are useful , check following

1. What is entry in /etc/hosts ?
2. Can you resolve to irsam-id.dchc.smil.mil ?
3. Did you change OID port to start on 389 ? (default in OID 11g is 3060)
4. Is there any things already listening on 389 ? (netstat -an | grep 389 | grep -i listen )

1) Without including IP addresses:

127.0.0.1 localhost.localdomain localhost
::1 localhost6.localdomain6 localhost6
irsam-id.dchc.smil.mil irsam-id

2) Yes
3) Yes
4) No netstat -an | grep LISTEN | grep 389 returns nothing.

Also… after the oid entry is deleted in oidmon log, the following is written over 10,000 times:

Log file (/opt/oracle/product/fmw/idminst///diagnostics/logs/OID//oid1//oidmon-0000.log) creation falied.
OS error=2

This may not help, but just the shear volume of entries in the logfile made it seem important.

@ Tom,
Change /etc/hosts like

irsam-id.dchc.smil.mil irsam-id
127.0.0.1 localhost.localdomain localhost

replace with IP of this machine (also remove IPV6 entry from /etc/hosts

Reconfigure OID again

That did not work either. Changed /etc/hosts to:

ip-address irsam-id.dchc.smil.mil irsam-id

127.0.0.1 localhost.localdomain localhost

This error is something I would think has happened before when “waiting for OID Server to come up” does not complete successfully.

@ Tom,

Update entry in /etc/hosts

Did you clear failed installation ?

Remove instance & domain directory and ODS schema from database (or create database again) and then try again.

If issue still persists then check log files again from oid1 directory as mentioned above and paste here

Uninstalled the idm instance and then removed user_projects folder to remove IDMDomain. I did not remove the ODS schema… not real sure how and didn’t know that would be necessary.

I have recreated the host (VM) and restarted from the very beginning installing database, rcu, etc with the same results.

@Tom,

Q: I did not remove the ODS schema… not real sure how and didn’t know that would be necessary.

A: During OID configuration stage, OID creates user orcladmin and then reset password to value entered during installation. If installation fails after creating user and before updating password then it will fail again in next attempt (as account is now in lock state) – This is based on my personal experience.

– What error mesaaage do you see, is it still same (Update log again and entry in /etc/hosts)

– Check logs in oraInventory/logs too

I did a complete reinstall of IDM. Everything installed without error: dbs 10.2.0.1, upgrade to 10.2.0.4, rcu, wls, and IDM.

As part of the install process we opened the necessary ports (not really necessary since this is the 1st host to be created), set ip address, unchecked IPV6, added an 8G swapfile (only need 4G), and like you had mentioned above we setup the /etc/hosts file.

The only information for the “Waiting for OID to come up” issue has been the if using the Standard edition to move to the Enterprise. We have always used the Enterprise version.

We received no errors in the logfiles for these. When config.sh was run this is the 1st issue:

[2011-06-02T11:47:56.198-04:00] [as] [NOTIFICATION] [] [oracle.as.config] [tid: 13] [ecid: 0000J1H0YrIDScWFLzATOA1DtuuV000004,0] Start OID
[2011-06-02T11:47:56.199-04:00] [as] [NOTIFICATION] [] [oracle.as.config] [tid: 13] [ecid: 0000J1H0YrIDScWFLzATOA1DtuuV000004,0] Starting oidmon
[2011-06-02T11:47:56.199-04:00] [as] [NOTIFICATION] [] [oracle.as.config] [tid: 13] [ecid: 0000J1H0YrIDScWFLzATOA1DtuuV000004,0] Cmd: /opt/oracle/product/fmw/i dm//bin/oidmon connect=OIDDB start
[2011-06-02T11:48:26.485-04:00] [as] [NOTIFICATION] [] [oracle.as.config] [tid: 13] [ecid: 0000J1H0YrIDScWFLzATOA1DtuuV000004,0] Waiting for OID Server to come up
[2011-06-02T11:48:41.510-04:00] [as] [NOTIFICATION] [] [oracle.as.config] [tid: 13] [ecid: 0000J1H0YrIDScWFLzATOA1DtuuV000004,0] Waiting for OID Server to come up
[2011-06-02T11:48:56.518-04:00] [as] [NOTIFICATION] [] [oracle.as.config] [tid: 13] [ecid: 0000J1H0YrIDScWFLzATOA1DtuuV000004,0] Waiting for OID Server to come up
[2011-06-02T11:49:11.530-04:00] [as] [NOTIFICATION] [] [oracle.as.config] [tid: 13] [ecid: 0000J1H0YrIDScWFLzATOA1DtuuV000004,0] Waiting for OID Server to come up
[2011-06-02T11:49:26.539-04:00] [as] [NOTIFICATION] [] [oracle.as.config] [tid: 13] [ecid: 0000J1H0YrIDScWFLzATOA1DtuuV000004,0] Waiting for OID Server to come up
[2011-06-02T11:49:41.550-04:00] [as] [NOTIFICATION] [] [oracle.as.config] [tid: 13] [ecid: 0000J1H0YrIDScWFLzATOA1DtuuV000004,0] Waiting for OID Server to come up
[2011-06-02T11:49:56.560-04:00] [as] [NOTIFICATION] [] [oracle.as.config] [tid: 13] [ecid: 0000J1H0YrIDScWFLzATOA1DtuuV000004,0] Waiting for OID Server to come up
[2011-06-02T11:50:11.568-04:00] [as] [NOTIFICATION] [] [oracle.as.config] [tid: 13] [ecid: 0000J1H0YrIDScWFLzATOA1DtuuV000004,0] Waiting for OID Server to come up
[2011-06-02T11:50:26.580-04:00] [as] [NOTIFICATION] [] [oracle.as.config] [tid: 13] [ecid: 0000J1H0YrIDScWFLzATOA1DtuuV000004,0] Waiting for OID Server to come up
[2011-06-02T11:50:41.586-04:00] [as] [NOTIFICATION] [] [oracle.as.config] [tid: 13] [ecid: 0000J1H0YrIDScWFLzATOA1DtuuV000004,0] Waiting for OID Server to come up
[2011-06-02T11:50:56.868-04:00] [as] [NOTIFICATION] [] [oracle.as.config] [tid: 13] [ecid: 0000J1H0YrIDScWFLzATOA1DtuuV000004,0] Cmd: /opt/oracle/product/fmw/i dm//bin/oidctl connect=OIDDB server=OIDLDAPD inst=1 delete
[2011-06-02T11:50:56.924-04:00] [as] [NOTIFICATION] [] [oracle.as.config] [tid: 13] [ecid: 0000J1H0YrIDScWFLzATOA1DtuuV000004,0] Error Stream: NLS_LANG not set in environment
[2011-06-02T11:50:56.925-04:00] [as] [NOTIFICATION] [] [oracle.as.config] [tid: 13] [ecid: 0000J1H0YrIDScWFLzATOA1DtuuV000004,0] Error Stream: Setting NLS_LANG to AMERICAN_AMERICA.AL32UTF8
[2011-06-02T11:50:59.128-04:00] [as] [NOTIFICATION] [] [oracle.as.config] [tid: 13] [ecid: 0000J1H0YrIDScWFLzATOA1DtuuV000004,0] Input Stream: oidctl:Stopped OI DLDAPD (instance=1) successfully
[2011-06-02T11:50:59.129-04:00] [as] [NOTIFICATION] [] [oracle.as.config] [tid: 13] [ecid: 0000J1H0YrIDScWFLzATOA1DtuuV000004,0] Input Stream:
[2011-06-02T11:50:59.134-04:00] [as] [NOTIFICATION] [] [oracle.as.config] [tid: 13] [ecid: 0000J1H0YrIDScWFLzATOA1DtuuV000004,0] Moving Directory /opt/oracle/pr oduct/fmw/idminst/diagnostics/logs/OID/oid1
[2011-06-02T11:50:59.139-04:00] [as] [NOTIFICATION] [] [oracle.as.config] [tid: 13] [ecid: 0000J1H0YrIDScWFLzATOA1DtuuV000004,0] Num of OIDs: 1
[2011-06-02T11:50:59.139-04:00] [as] [NOTIFICATION] [] [oracle.as.config] [tid: 13] [ecid: 0000J1H0YrIDScWFLzATOA1DtuuV000004,0] Deleting file /opt/oracle/produ ct/fmw/idminst/config/tnsnames.ora
[2011-06-02T11:50:59.139-04:00] [as] [NOTIFICATION] [] [oracle.as.config] [tid: 13] [ecid: 0000J1H0YrIDScWFLzATOA1DtuuV000004,0] Deleting file /opt/oracle/produ ct/fmw/idminst/config/tnsnames_copy.ora
[2011-06-02T11:50:59.139-04:00] [as] [NOTIFICATION] [] [oracle.as.config] [tid: 13] [ecid: 0000J1H0YrIDScWFLzATOA1DtuuV000004,0] Deleting file /opt/oracle/produ ct/fmw/idminst/OID/admin
[2011-06-02T11:51:02.014-04:00] [as] [ERROR] [] [oracle.as.config] [tid: 13] [ec id: 0000J1H0YrIDScWFLzATOA1DtuuV000004,0] Error in postCreateConfig()oracle.as.c onfig.ProvisionException: Error Starting OID

@ Tom,
Could you please update /etc/hosts again.

Also did you find anything with error in /full_path/oraInventory/logs

cd /full_path/oraInventory/logs
grep -i error *

Do you see any errors in listener.log or alert log of your database ? (Is OID request coming till database – db listener log should tell this)

What do you mean by “if using the Standard edition to move to the Enterprise” (Is this weblogic or database) ?

In the oraInventory/logs the only ERRORs that I see are:

[2011-06-03T09:02:53.991-04:00] [as] [ERROR] [] [oracle.as.install.engine.modules.validation] [tid: 11] [ecid: 0000J1LaLqvDScWFLz3V8A1DuDhu000002,0] Exception[[
oracle.as.install.engine.modules.handler.exception.HandlerLaunchException: java.lang.NoClassDefFoundError: Could not initialize class sun.awt.X11GraphicsEnvironment

The listener.log does not have any errors.

The Standard vs Enterprise edition of the DB… this is the note:

OID Fails to Start in a New Install With “Waiting for OID server to come up” Or “Failed to start component” [ID 1096085.1]

Hi Friends, When I enter ‘opmnctl status’ command OID related information ( OID entry) is not found in the results displayed.

Can somebody plz tell me how to see the status, start/stop OID in this situation.

Hola

What is needs to work with OIM?
I need, to connect or configure OID with Oracle identity manager for create user accounts?

Thanks you,

@ Odessa,
If you are on OIM 11gR1 then you can use LDAPSync http://onlineappsdba.com/index.php/2010/12/29/part-viii-optional-configure-ldap-sync-with-oim-11g-oim-11g-integration-with-ovdoid/

or OIM connector for OID .

If you are on previous version of OIM then use OID connector.

Thanks you…

Hi Atul,

We are seeing below errors in oidldapd01.log.
We have OID replicatiion in 3 servers and error is Same in other servers as well.

2012/07/25:04:05:09Oid Server Connected to DB store via oidp1.groton.pfizer.com connect string.
2012/07/25:04:05:09OiD LDAP server started.
2012/07/26:04:05:04DispatcherListener: Shutting down
2012/07/26:04:05:04SendPort: Error while writing to the other end of communication endpoint
2012/07/26:04:05:04SendPort: Error while writing to the other end of communication endpoint
2012/07/26:04:05:04SendPort: Error while writing to the other end of communication endpoint
2012/07/26:04:05:04ProcessDispatcher: shutting down
2012/07/26:04:05:09DispatcherController: OiD LDAP server exiting with status 0

Also we are getting below errors intermittently while connecting remote desktops
sgslufread: Hard error on read, OS error = 10054
sgslufread: Hard error on read, OS error = 10054

hi ,

I have tried installing oim but it fails saying ldap is not up and running eventhough it is up and running…

Thank you.

@ moulali,
What ldap server details you are giving ?
Is that port (on OID host) open across firewall from OIM server ?
What user you are provided during LDAP SYNC screen ?
Is that user created in OID ?

I just set up server chaining to AD following note Note 1495244.1
We have an oracle OAM/OIM single sign on environment that has been working for 18 months 11.1.1.5. After configuring Server Chaining, I can no longer update any OID entries nor can i authenticate. I can no longer log onto the oamconsole. I turned off server chaining by disabling
Server Chaining Authentication
Server Chaining Modification
Server Chaining Search
but it seeems like it is still active. Also I am getting an invalid credential in the oam server log when I try and log into the console but I did not change any passwords nor did any expire or get locked out. I don’t know where else to look. I opened a server request with oracle but so far nothing.