11gR2PS3 version IDM Suite, the mobile cannot be used as usr login

Oct 9, 2016 6:07AM

Hi,

I have an IDM Suite environment,version 11gR2PS3.

The OIM and OAM were intergrated.

In the oamconsole ,I create an custom Authentication Modules,see the screenshoot1.jpg.

The KEY_LDAP_FILTER value is (|(mobile={KEY_USERNAME})(mail={KEY_USERNAME})(uid={KEY_USERNAME})).

If I set the KEY_LDAP_FILTER value to (|(mail={KEY_USERNAME})(uid={KEY_USERNAME})),I can use both mail and uid to login sso.

But when I use the mobile to login sso,it refused,the log have error:

<2016-10-9 下午05时46分08秒 CST> <Warning> <oracle.ods.virtualization.engine.backend.jndi.adapter1> <LIBOVD-40066> <远程服务器失败: idmtestapp:1389。

javax.naming.NoPermissionException: [LDAP: error code 50 - 您没有足够的权限来执行未编入索引的搜索]; remaining name 'cn=users,dc=jxsl,dc=gov,dc=cn'

Identity Management (MOSC)