Wednesday, June 26, 2013

OIM Schema Password Expiration

Version: Oracle Database 11g R2 and Oracle Identity Manager 11g
Description: By default your OIM schemas has a 90 day password expiration, and eventually you would have to change your password. The OIM managed server would fail to start if your schema password has already expired. This post demonstrates one way to change your schemas passwords when your schemas passwords have already been expired.

Here are some of my logs from the "oim_server1.out" when I tried to start the managed server with expired schemas passwords. The OIM web console will not be available to you even though the managed server is running.
oracle.mds.config.MDSConfigurationException: MDS-01330: unable to load MDS
configuration document
MDS-01329: unable to load element "persistence-config"
MDS-01370: MetadataStore configuration for metadata-store-usage 
"OWSM_TargetRepos" is invalid.
MDS-01377: Unable to get database connection from data source configured 
with JNDI name "jdbc/mds/owsm".
weblogic.common.resourcepool.ResourceDeadException: 0:weblogic.
common.ResourceException: 
Could not create pool connection. The DBMS driver exception was: 
ORA-28001: the password has expired

        at oracle.mds.config.PConfig.loadFromBean(PConfig.java:690)
        at oracle.mds.config.PConfig.(PConfig.java:499)
        at oracle.mds.config.MDSConfig.loadFromBean(MDSConfig.java:707)
        at oracle.mds.config.MDSConfig.loadFromElement(MDSConfig.java:764)
        at oracle.mds.config.MDSConfig.(MDSConfig.java:420)
...
...
oracle.wsm.policymanager.PolicyManagerException: WSM-02054 :
 Failure in looking up EJB component 
DocumentManager#oracle.wsm.policymanager.bean.ejb.IRemoteDocumentManager.
        at oracle.wsm.policymanager.BeanFactory.getJndiObj(BeanFactory.java:684)
        at oracle.wsm.policymanager.BeanFactory.lookupJndiObj(BeanFactory.java:910)
...
...

To fix this follow these steps:
Step 1: Start the Oracle DB EM console.
cd /home/oracle/db/app/oracle/product/11.2.0/dbhome_1/bin  #$ORACLE_HOME/bin
./emctl start dbconsole  #Start the EM console

Step 2: Open a browser and go to the Oracle DB EM console.
https://localhost:1158/em/console

Step 3: Enter your credentials for the SYS user. On the next page you will be required to change your passwords for the schemas passwords that have already expired.


No comments:

Post a Comment