Oracle Database Advanced Security 10g Release 1, Administrator'S Manual

Page: 341 / 518

Troubleshooting Enterprise User Security
Enterprise User Security Configuration Tasks and Troubleshooting 12-29
3.
Use Enterprise Security Manager to check that the user search base
containing this user is listed in the user search base attribute of the realm
that you are using.
4.
Use Enterprise Security Manager to check that the enterprise domain is in
the password accessible domains group.
5.
Check that the ACL on the user search base attribute allows read and search
access to the
orclpassword
attributes by the
verifierServices
group.
This is set properly by default, but may have been altered.
ORA-28275: Multiple mappings for user login name to LDAP distinguished
name exist
Cause:
There are multiple user DNs in the directory within the user search base
whose login name for the user matches what was provided during the database
connection.
Action: Use Enterprise Security Manager Console to make the login name
value unique (no two users share the same login name) within all user search
bases associated with the realm Oracle Context.
ORA-28277: LDAP search, while authenticating global user with passwords,
failed
Action:
Check that the relevant directory instance is up and running.
ORA-28278: No domain policy registered for password-based GLOBAL users
Cause: The database cannot read the enterprise domain information that it
needs.
Action: See "DOMAIN-READ-ERROR Checklist" on page 12-35
ORA-28862: SSL handshake failed
Action: Check that you are using a non-SSL connect string.
ORA-# Errors for Kerberos-Authenticated Enterprise Users
If you receive an ORA-# error while using Kerberos-authenticated Enterprise User
Security, then locate the error in the following section and take the recommended
action.
ORA-1017: Invalid username/password; login denied
Action: See "USER-SCHEMA ERROR Checklist" on page 12-34
ORA-28030: Problem accessing LDAP directory service