OBIEE 12c Idap connection failed

Question

Hi So trying to find out if anyone out there had experienced ldap connection issues in OBIEE 12c. We are getting the "LDAP Error 52 : ldaps.************:636; socket closed" error when trying to connect in OBIEE, see below. We still can still log into the console and EM, but not the ldap. This is a singer server environment (non-clustering). The SSL is configured and the SSL pages are loading fine. We have confirmed all the security certificates are correctly placed in the cacert (Java Standard Trust Keystore), in the AnalyticsIdentity.jks (custom Identity keystore), and in the adaptor.jks. The Identity store configuration is also set to virtualize = true. bi_server1-diagnostic.log: by: oracle.igf.ids.IDSException: Operations error: entity= op=search mesg= AdditionalInfo: LDAP Error 52 : ldaps.************:636; socket closed at oracle.igf.ids.arisid.ArisIdServiceManager.searchEntities(ArisIdServiceManager.java:2975) at oracle.igf.ids.UserManager.searchUsers(UserManager.java:312) at oracle.bi.security.centaurus.IDSIdentityStoreProvider.collectUsersForSearch(IDSIdentityStoreProvider.java:317) ... 63 more Caused by: oracle.igf.ids.arisid.ArisIdConnectionException: Operations error: entity= op=search mesg= AdditionalInfo: LDAP Error 52 : ldaps.************:636; socket closed at com.oracle.ovd.arisid.OvdIdsStackProvider.mapResultCode(OvdIdsStackProvider.java:776) at com.oracle.ovd.arisid.OvdIdsStackProvider.doSearch(OvdIdsStackProvider.java:1997) at com.oracle.ovd.arisid.ArisIdStackProvider.doSearch(ArisIdStackProvider.java:278) at org.openliberty.arisid.Interaction.doSearch(Interaction.java:1453) at oracle.igf.ids.arisid.ArisIdServiceManager.searchEntities(ArisIdServiceManager.java:2896) ... 65 more Caused by: oracle.ods.virtualization.service.VirtualizationException: oracle.ods.virtualization.engine.util.DirectoryException: LDAP Error 52 : ldaps.************:636; socket closed at oracle.ods.virtualization.operation.SearchOperation.process(SearchOperation.java:209) at oracle.ods.virtualization.operation.SearchOperation.process(SearchOperation.java:47) at oracle.ods.virtualization.service.DefaultVirtualizationSession.processOperation(DefaultVirtualizationSession.java:403) at oracle.ods.virtualization.service.DefaultVirtualizationSession.search(DefaultVirtualizationSession.java:190) at com.oracle.ovd.arisid.OvdIdsStackProvider.doSearch(OvdIdsStackProvider.java:1989) ... 68 more Caused by: oracle.ods.virtualization.engine.util.DirectoryException: LDAP Error 52 : ldaps.************:636; socket closed at oracle.ods.virtualization.engine.backend.jndi.BackendJNDI.getLDAPContext(BackendJNDI.java:1164) at oracle.ods.virtualization.engine.backend.jndi.BackendJNDI.getConnection(BackendJNDI.java:1027) at oracle.ods.virtualization.engine.backend.jndi.ConnectionHandle.getHolder(ConnectionHandle.java:470) at oracle.ods.virtualization.engine.backend.jndi.ConnectionHandle.search(ConnectionHandle.java:276) at oracle.ods.virtualization.engine.backend.jndi.JNDIEntrySet.initialize(JNDIEntrySet.java:223) at oracle.ods.virtualization.engine.backend.jndi.BackendJNDI.get(BackendJNDI.java:811) at oracle.ods.virtualization.engine.chain.Chain.nextGet(Chain.java:303) at oracle.ods.virtualization.engine.chain.BasePlugin.get(BasePlugin.java:89) at oracle.ods.virtualization.engine.chain.plugins.hide.HideEntriesByFilter.get(HideEntriesByFilter.java:352) at oracle.ods.virtualization.engine.chain.Chain.nextGet(Chain.java:314) at oracle.ods.virtualization.engine.chain.BasePlugin.get(BasePlugin.java:89) at oracle.ods.virtualization.engine.chain.plugins.virtualattr.VirtualAttributePlugin.get(VirtualAttributePlugin.java:221) at oracle.ods.virtualization.engine.chain.Chain.nextGet(Chain.java:314) at oracle.ods.virtualization.engine.chain.BasePlugin.get(BasePlugin.java:89) at oracle.ods.virtualization.engine.chain.plugins.usermanagement.UserManagement.get(UserManagement.java:919) at oracle.ods.virtualization.engine.chain.Chain.nextGet(Chain.java:314) at oracle.ods.virtualization.engine.chain.plugins.groupmembership.NestedGroupMembership.get(NestedGroupMembership.java:155) at oracle.ods.virtualization.engine.chain.Chain.nextGet(Chain.java:314) at oracle.ods.virtualization.engine.chain.plugins.DMSMetrics.MonitorPerformance.get(MonitorPerformance.java:225) at oracle.ods.virtualization.engine.chain.Chain.nextGet(Chain.java:314) at oracle.ods.virtualization.engine.chain.PluginChain.runGet(PluginChain.java:208) at oracle.ods.virtualization.engine.chain.PluginManager.runGet(PluginManager.java:353) at oracle.ods.virtualization.engine.chain.PluginManager.runGet(PluginManager.java:318) at oracle.ods.virtualization.engine.backend.AdapterServiceInterface.getByAdapter(AdapterServiceInterface.java:596) at oracle.ods.virtualization.engine.backend.AdapterServiceInterface.get(AdapterServiceInterface.java:467) at oracle.ods.virtualization.engine.backend.BackendHandler.get(BackendHandler.java:432) at oracle.ods.virtualization.engine.chain.Chain.nextGet(Chain.java:295) at oracle.ods.virtualization.engine.chain.BasePlugin.get(BasePlugin.java:89) at oracle.ods.virtualization.engine.chain.plugins.uniqueentry.UniqueEntryPlugin.get(UniqueEntryPlugin.java:141) at oracle.ods.virtualization.engine.chain.Chain.nextGet(Chain.java:314) at oracle.ods.virtualization.engine.chain.BasePlugin.get(BasePlugin.java:89) at oracle.ods.virtualization.engine.chain.plugins.mlsfilter.MlsFilter.get(MlsFilter.java:125) at oracle.ods.virtualization.engine.chain.Chain.nextGet(Chain.java:314) at oracle.ods.virtualization.engine.chain.plugins.genericmapping.GenericMapper.get(GenericMapper.java:337) at oracle.ods.virtualization.engine.chain.Chain.nextGet(Chain.java:314) at oracle.ods.virtualization.engine.chain.plugins.DMSMetrics.MonitorPerformance.get(MonitorPerformance.java:225) at oracle.ods.virtualization.engine.chain.Chain.nextGet(Chain.java:314) at oracle.ods.virtualization.engine.chain.PluginChain.runGet(PluginChain.java:208) at oracle.ods.virtualization.engine.chain.PluginManager.runGet(PluginManager.java:353) at oracle.ods.virtualization.engine.chain.PluginManager.runGet(PluginManager.java:318) at oracle.ods.virtualization.engine.chain.GlobalServicesInterface.runGet(GlobalServicesInterface.java:135) at oracle.ods.virtualization.operation.SearchOperation.process(SearchOperation.java:203) ... 72 more Caused by: javax.naming.ServiceUnavailableException: ldaps.************:636; socket closed at com.sun.jndi.ldap.Connection.readReply(Connection.java:454) at com.sun.jndi.ldap.LdapClient.ldapBind(LdapClient.java:365) at com.sun.jndi.ldap.LdapClient.authenticate(LdapClient.java:214) at com.sun.jndi.ldap.LdapCtx.connect(LdapCtx.java:2791) at com.sun.jndi.ldap.LdapCtx.(LdapCtx.java:319) at com.sun.jndi.ldap.LdapCtxFactory.getUsingURL(LdapCtxFactory.java:192) at com.sun.jndi.ldap.LdapCtxFactory.getUsingURLs(LdapCtxFactory.java:210) at com.sun.jndi.ldap.LdapCtxFactory.getLdapCtxInstance(LdapCtxFactory.java:153) at com.sun.jndi.ldap.LdapCtxFactory.getInitialContext(LdapCtxFactory.java:83) at javax.naming.spi.NamingManager.getInitialContext(NamingManager.java:684) at javax.naming.InitialContext.getDefaultInitCtx(InitialContext.java:313) at javax.naming.InitialContext.init(InitialContext.java:244) at javax.naming.ldap.InitialLdapContext.(InitialLdapContext.java:154) at oracle.ods.virtualization.engine.backend.jndi.JNDIConnectionPool.createCtx(JNDIConnectionPool.java:648) at oracle.ods.virtualization.engine.backend.jndi.JNDIConnectionPool.create(JNDIConnectionPool.java:680) at oracle.ods.virtualization.engine.backend.jndi.JNDIConnectionPool.(JNDIConnectionPool.java:216) at oracle.ods.virtualization.engine.backend.jndi.RemoteServer.getJNDIConnectionPool(RemoteServer.java:182) at oracle.ods.virtualization.engine.backend.jndi.BackendJNDI.getLDAPContext(BackendJNDI.java:1085) ... 113 more

2982628 · Answer

problem solved, ended up reinstalling and re configuring SSL. Unfortunately not sure what exactly happened, but is working fine now...

handat · Answer

You should enable SSL debugging on your server to get more details about the SSL handshake, which is probably what is failing and thus you get disconnected, ie socket closed error which in turn leads to LDAP error 52.

2982628 · Answer

So in our current 11g environment is using the exact connectivity parameter, credentials and setting and is running without issue.

Also, in this current 12c environment, we were able to connect to the ldap (Novell Authentication provider) successfully previously about two month ago. There was an incident recently, so we are doing installing it from scratch again. This is a clean reinstall, deleted the original folder completely and started with a new rcu schema.