Cant authenticate to OUD after DIP AD > OUD password Sync error is DSA is unavailable.
We tried configuring onDemand password sync AD to OUD.
We first ran the below.
$ORACLE_HOME/bin/dipConfigurator setupPlugin -wlshost localhost -wlsport 7001 -wlsuser admin -ldaphost hostname.dom.com -ldapport 1636 -ldapuser "cn=Directory Manager" -isldapssl true -ldapadminport 4444
We then added the below mapping to our ad2oud profile.
pwdLastSet : : : user : orclODIPPwdLastSet : : top : onDemandPassword(pwdLastSet)
Now, after a user changes his/her password in AD it will successfully updated the onDemand attribute.
However, it seems like the OUD onDemand plugin is not working (which was configured with dipConfigurator setupPlugin).
We will get the error below when trying to authenticate.
ldapsearch -p 1389 -h localhost -D "uid=test_dip1,OU=test_ou1,OU=Dept1,ou=people,o=domain.com,dc=org,dc=com" -w - -b OU=test_ou1,OU=Dept1,ou=people,o=domain.com,dc=org,dc=com uid=test_dip1