Oracle WebLogic Admin Server startup failed with oracle.security.jps. JpsRuntimeException

 This post covers WebLogic Server Start-Up issue which you could face, if you have migrated Policy Store to LDAP (OID) Server. Policy Store is repository for application roles with default store as XML file in Oracle Fusion Middleware. Policy & Credential Store is also covered in my  OIM/OAM 11g Book (now available at Amazon) .

 

If you try to start WebLogic Admin Server and if it fails with error like below

________

<Dec 15, 2011 4:24:19 AM CST> <Notice> <Log Management> <BEA-170019> <The server log file /u02/oracle/111/user_projects/domains/ basedomain/servers/ AdminServer/logs/ AdminServer.log is opened. All server side log events will be written to this file.>

oracle.security.jps.JpsRuntimeException

at oracle.security.jps.internal.common. ldap.connection.pool. AbstractConnectionPool. isPassingSanityConnectionTest (AbstractConnectionPool. java:143)

at oracle.security.jps.internal. common.ldap.connection.pool. JpsJNDIConnectionPool.getInstance (JpsJNDIConnectionPool.java:68)

.
.
.
at com.sun.jndi.ldap.LdapClient.authenticate(LdapClient.java:139)
at com.sun.jndi.ldap.LdapCtx.connect(LdapCtx.java:2694)
at com.sun.jndi.ldap.LdapCtx.<init>(LdapCtx.java:293)
at com.sun.jndi.ldap.LdapCtxFactory.getUsingURL(LdapCtxFactory.java:175)
at com.sun.jndi.ldap.LdapCtxFactory.getUsingURLs(LdapCtxFactory.java:193)

________

Notice oracle.security.jps & com.sun.jndi.ldap in error message which suggests that Java Policy Store configured for Fusion Middleware is not reachable.

Fix: Start OID server that is registered as policy store for Fusion Middleware (WebLogic Server).

 .

How to find OID server details used by Fusion Middleware as Java Policy Store (JPS) ?

Open file $DOMAIN_HOME/config/fmwconfig/jps-config.xml and search for OID.  If your Fusion Middleware JPS is migrated to OID then you will see entry like below
____

<serviceInstance provider=”policystore.provider” name=”policystore.ldap”>
<property value=”OID” name=”policystore.type”/>
<property value=”bootstrap_ko12PPE253aJ1yE7WEiU9ahvu3k=” name=”bootstrap.security.principal.key”/>
<property value=”cn=basedomain” name=”oracle.security.jps.farm.name”/>
<property value=” cn=jpsroot” name=”oracle.security.jps.ldap.root.name”/>
<property value=”ldap://innowave12.com:3060″ name=”ldap.url”/>
</serviceInstance>

______

Note: value of property name ldap.url signifies LDAP server URL.

 

 

 

About the Author Atul Kumar

Oracle ACE, Author, Speaker and Founder of K21 Technologies & K21 Academy : Specialising in Design, Implement, and Trainings.

follow me on:

Leave a Comment:

10 comments
chusendra says December 26, 2011

need questions on single node PATCHING

Reply
Atul Kumar says December 27, 2011

@ chusendra ,
Is this apps patch (adpatch), database patch (opatch) or weblogic patch (bsu) ?

Reply
Saurabh says February 23, 2014

Hi Atul,

After running policy store reassociation, i tried restarting admin server, but it failed with below error:

SEVERE: Cannot read the default policy store.

There was no error during reassociation

Reply
Atul Kumar says February 23, 2014

@ Saurabh Gairola,
Where was policy store pointed to DB or OID ?

Can weblogic server connect to this policy store – DB or OID ?

Reply
Saurabh says February 23, 2014

Hi Atul,

Thanks for responding.

My Default Security Store is DB which was configured as default after OIM, OAM domain Creation and before OIM configuration. (as per oracle docs).

On the other hand my OID setup is all ready i have already ran idmtool to create Identity Store and Policy store which i can see through ODSM.

Now i want to configure my OIM, OAM domain with OID configure store. I tried doing it by running reassociation which showed success message. But when i went to restart my admin server it failed with above error.

This reassociation i tried through EM as well, But every time the admin server startup is failing. It is still trying to look for DB security store. But jps-config.xml has no entry of DB,. Infact LDAP became as default policy store.

Please help me with this.

Reply
Saurabh says February 23, 2014

The process i followed. I have 2 VMs one for OIM, OAM, SOA and other one for OID, OVD, OHS and ODSM.

1. Installed OIM, OAM 11.1.2.0 and SOA 11.1.16
2. Created a Domain and Configure Db security Store as a mandatory step before restarting Admin and before starting OIM Configuration.
3. Installed OID, OVD, ODSM 11.1.1.6 in other vm.
4. Ran idmtools for Policy store and Identity Store creation which seeded different users and groups required by OIM and OAM with mode all
5. OIM Configuration with LDAP Sync.
6. Ran reassociation for my OID LDAP security store from OIM, OAM domain.
7. Admin Restart – Failed – ERROR JPS 04001 – Error reading default policy store. ERROR Cannot find DB policy store in mixed mode.

And here I am stuck right now… 🙁

Reply
Atul Kumar says February 23, 2014

@Saurabh,
For IAM 11gR2 , policy store must be DB under OPSS schema (and not to OID) , Restore from backup and don’t migrate PolicyStore to OID.

Which doc you are following which says to use reAssociate tool ?

Reply
Saurabh says February 23, 2014

oh, Actually i wanted to integrate my IAM with OID.

So you mean to say i cannot integrate my IAM 11gr2 with OID???

Or you mean to say that only for policy store i cannot integrate to my OID, rest indentity store, user store i can go with OID??

My objective is to test the complete integration functionality for IAM (OIM, OAM) with OID, Webgate.

Please suggest what approach should i take? or should i lower down my version and then test with OID, if so please propose which version shud i follow for all these components.

Actually i didn’t know that 11gR2 cannot be integrate with OID for policy store.

Reply
Atul Kumar says February 23, 2014

@Saurabh,

Or you mean to say that only for policy store i cannot integrate to my OID, rest indentity store, user store i can go with OID??

AK: Yes, for IAM 11gR2 leave polciy store pointing to DB . For Identity Store you can point to OID/OVD .\

Reply
Saurabh says February 23, 2014

Great Brother 🙂 That is such a relief . Let me proceed, i’ll get back to you with further doubts.

You are doing a great job with this blog. Appreciate !!

Reply
Add Your Reply

Not found