Weblog

Changing Password when Soasuite is integrated with an OID

Recently i experienced some problem while changing the cn=orcladmin account in a Oracle configuration setup where Soasuite is integrated with an Oracle Internet Directory. Following serveral Oracle notes on how to change passwords for ‘cn=orcladmin’ left out an important details on what to do when you have a configuration setup as descriped above.

When changing the password of superaccount ‘cn=orcladmin’ i was supprissed that after a successful password change we were not able to get the tasklist in bpel console anymore. Reason for this is a configuration file called ‘is_config.xml’ that was left out. The location of this file is $ORACLE_HOME_SOA/bpel/system/services/config/is_config.xml and should basicly look like this when you have integrated it with an OID.

Example 1:

 < ?xml version = '1.0' encoding = 'UTF-8'?>
 <isconfiguration xmlns="http://www.oracle.com/pcbpel/identityservice/isconfig">
    <configurations>
       <configuration realmName="ITEYE" displayName="ITEYE Realm">
          <provider providerType="JAZN" name="OID" service="Identity">
             <connection url="ldap://sso.it-eye.nl:389" binddn="cn=orcladmin" password="KyYv7aj6Rus2nPK5XC8H3g==" encrypted="true"/>
          </provider>
       </configuration>
    </configurations>
 </isconfiguration>

Now we need to change the OLD password HASH with the new password. To do this we have to set the correct password in plaintext and set the encrypted value to “false”.

Example 2:

 < ?xml version = '1.0' encoding = 'UTF-8'?>
 <isconfiguration xmlns="http://www.oracle.com/pcbpel/identityservice/isconfig">
    <configurations>
       <configuration realmName="ITEYE" displayName="ITEYE Realm">
          <provider providerType="JAZN" name="OID" service="Identity">
             <connection url="ldap://sso.it-eye.nl:389" binddn="cn=orcladmin" password="plainpassword" encrypted="false"/>
          </provider>
       </configuration>
    </configurations>
 </isconfiguration>

After you restart de BPEL server the password is changed into a HASH encrypted password again and the encrypted value will be changed back to “true” automatically aswell.

Your Tasklist should appear again after a successful login into the bpel console.

Share and Enjoy:
  • del.icio.us
  • Google Bookmarks
  • DZone
  • LinkedIn
  • SphereIt
  • StumbleUpon
  • Technorati

Leave a Reply