Hi Guru's, I have a requirement in y project to configure microsoft active derectory with OBIEE12c for the user authentication. So, All the AD users should be able to login OBIEE analytics page. Existing microsoft active directory using port 636 ( SSL). I am getting following error after saving details under Domain Structure -- Security Realms --> Providers --> Provider Specific. [Security:090834]No LDAP connection could be established. ldaps://hostname:636 Cannot connect to the LDAP server Could you please let me know how to proceed in that. Please share some relivant document specific to configuring on SSL port ( not on 389). Best Regards, Ritesh

Dear All, We have got the correct certificate from the AD team and applied step to create keystore for default authentication. Now AD users able to visible in weblogic and able to authenticate into OBIEE analytics. Thanks for all your support. Best Regards, Ritesh

I believe you need to setup the keystores for both servers as well so that communication is possible. Please share logs if you have them

Dear Michael, Thanks. I have got the correct certificate from LDAP AD team and import into correct location in the server. Post import the certificates using keytool command , i have re-enter the AD administrator credentials in provider specific and save it. After saving i did not get any issue. I have activate the changes. Restarted the services. Now i can see the all the AD users in Security realm -->ADProvider --> User and Group. However, none of the AD users including weblogic user are able to login into Analytics page ( Username & Password incorrect error). I will share the logs as well. I have set the vertualize opetion is True in EM conole as well but same issue persists. However, I have not set the keystore options in Admin server or Manage Server level. Could you please guide me on the error. Our development activity is completely stuck because of weblogic user is not able to login analytics page. Best Regards, Ritesh

nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Oracle Communities

Oracle Analytics and AI

Child Item

Microsoft Active Directory Integration issue with OBIEE12c on Secure Port (Port# 636)

3614436

Hi Guru's,

I have a requirement in y project to configure microsoft active derectory with OBIEE12c for the user authentication. So, All the AD users should be able to login OBIEE analytics page.

Existing microsoft active directory using port 636 ( SSL).

I am getting following error after saving details under Domain Structure --< Domain name --> Security Realms --> Providers --> Provider Specific.

[Security:090834]No LDAP connection could be established. ldaps://hostname:636 Cannot connect to the LDAP server

Could you please let me know how to proceed in that. Please share some relivant document specific to configuring on SSL port ( not on 389).

Best Regards,

Ritesh

Find more posts tagged with

Accepted answers

All comments

GermanA-Oracle

If you are *really* using "hostname:636" then change hostname by the name of your AD.

To connect using the SSL port make sure to follow the instructions on the Security Guide, Configuring SSL when Using Multiple Authenticators.

3614436

Thanks a lot.

As per security policy I can not share the hostname.

I am using the corret host name which got from AD team. Thanks for sharing the link.

I will go through and update you shortly.

3614436

Hi,

Can anyone help in that? We are suppose to go for UAT in this week.

Needed help from the people who has already worked in such scenario.

Michael Verzijl

What error are you seeing in the domain log file on the server? General SSLEngine problem?

3614436

Thanks

3614436

Thanks for your time.

Following error I can see in Domain log :

Michael Verzijl

Did you follow these steps from the documentation?

https://docs.oracle.com/middleware/1221/wls/SECMG/ldap_atn.htm#SECMG539

3614436

Did the same today morning but not able to view the AD users under user and group tab.

Michael Verzijl

Ok. You did reboot the weblogic services after you applied these? The General SSLEngine problem clearly states something is wrong with your certificates.

3614436

Yes, i have bounce the server. Admin server went fine but did not see the AD users. However, I have observed after server bounce managed server( bi_server1) and other services was in UNKNOWN status with General SSLengine issue.

I have reverted back to demo one. and bounce the services again and all services started successfully.

Best Regards,