Unlock the super User cn=orcladmin in OID

Unlock Super User cn=orcladmin in OID 

If you are not able to login with the user cn=orcladmin and you are getting the following error in the OID logs, then the issue is the account cn=orcladmin  is locked is in locked state. 

ERROR : cn=orcladmin : Your account is locked. Contact your OID administrator.]

In order to fix this issue, we need to unlock the account. For this follow the below steps,

1.       Login to OID Server 

2.       Set the required path variables ORACLE_HOME and ORACLE_INSTANCE  as given below,

eg:

Export  ORACLE_HOME=/u10/app/product/Middleware/Oracle_IDM1

Export  ORACLE_INSTANCE=/u10/app/product/Middleware/asinst_1

3.       Navigate to ORACLE_HOME/ldap/bin

4.       Execute the following command   ./oidpasswd connect=OIDDB unlock_su_acct=true

This will unlock the super user orcladmin.

Steps to change the ODS password to new value

If you want to change the ODS password to a new value, follow the below steps. 

1.    Set ORACLE_HOME to OID_ORACLE_HOME

2.    Set ORACLE_INSTANCE to asinst_home

4.      Shutdown OID using opmnctl stopall

5.    Login to OID database with sys or system account and change password
SQL> alter user ODS identified by New_PASSWORD;

6.    $ORACLE_HOME/ldap/bin/oidpasswd connect=OIDDB change_oiddb_pwd=true .  This command will update password in database and also in wallet

7.    If you have multiple OID , then copy wallet files to all other OID instances $ORACLE_INSTANCE/OID/admin/oidpwdXXXX

Steps to reset ODS account Password

1.1   Stop the OID services on both oid hosts ( for clustered env)

1.2    Connect to OID database as sys user and reset the ODS user account password to new value .

 $ sqlplus / as sysdba

SQL*Plus: Release 11.2.0.1.0 Production on Fri Jun 25 10:21:25 2010

Copyright (c) 1982, 2009, Oracle. All rights reserved.


Connected to:
Oracle Database 11g Enterprise Edition Release 11.2.0.1.0 - Production
With the Partitioning, OLAP, Data Mining and Real Application Testing options

SQL> alter user ODS identified by welcome1;

1.3  Login to OID node 1

1.4   Rename the existing wallet files of this OID node 1.

It will be under ORACLE_INSTANCE\admin folder

D:\u01\app\oracle\admin\oid_inst1\OID\admin\oidpwdXXXXXX

D:\u01\app\oracle\admin\oid_inst1\OID\admin\oidpwdrSID

 

1.5   Set the necessary environment variable ex : ORACLE_HOME, ORACLE_INSTANCE, TNS_ADMIN & PATH variable.

1.6   Run the OIDPASSWD utility for creation of new wallet files for OID DB ODS schema.

Syntax : oidpasswd  connect=oiddb create_wallet=true

enter the new password configured for the ODS account in database. 

[oracle@oracle]$ oidpasswd connect=oiddb create_wallet=true
 password:
confirm password:
password set

1.7   Please make sure that new wallet files has been created.

Eg: 

D:\u01\app\oracle\admin\oid_inst1\OID\admin\oidpwdXXXXXX

D:\u01\app\oracle\admin\oid_inst1\OID\admin\oidpwdrSID

  

1.8  Rename the existing wallet files on node 2 and then copy wallet files from node 1 to node 2.

1.9  Start OID services on Node1  and Node2 .

Steps to retrieve ODSSM Password

Steps to retrive the Password for ODSSM user

Please follow the below steps to retrieve the password for the ODSSM user

1. Make sure that the weblogic Admin Server is running state.

2. Navigate to $ORACLE_HOME/common/bin and execute wlst.cmd

The following message will be displayed.

Initializing WebLogic Scripting Tool (WLST) ...

Jython scans all the jar files it can find at first startup. Depending on the system, this process may take a few minutes to complete, and WLST may not return a prompt right away.

Welcome to WebLogic Server Administration Scripting Shell

Type help() for help on available commands

wls:/offline>

3. Enter connect(‘<Weblogic_username>’,’<password>’,’<Weblogic_admin_sever url>’)

Where weblogic_admin_server url in this format : t3://<adminserver-host-name:adminserver-port>

Example :

wls:/offline> connect('weblogic','welcome1','t3://localhost:7001') 

Connecting to t3://localhost:7001 with userid weblogic ...
Successfully connected to Admin Server 'AdminServer' that belongs to domain 'IDMDomain'.

Warning: An insecure protocol was used to connect to the
server. To ensure on-the-wire security, the SSL port or
Admin port should be used instead.

wls:/IDMDomain/serverConfig>

4. Enter the listCred command to retrieve the ODSSM password.  As shown below,

wls:/IDMDomain/serverConfig> listCred(map='odssm',key='ODSSM_oidinst_1')
Location changed to domainRuntime tree. This is a read-only tree with DomainMBean as the root.
For more help, use help(domainRuntime)

[Name : ODSSM, Description : null, expiry Date : null]
PASSWORD:welcome1

This will display the password as shown above.