I'm having the same issue as Chad in our new OAS 2025 test system. Couldn't find any custom groups in the adv principal search, but it works fine searching for custom groups in EM in our OAS 2023 prod system. So glad I found this post. I'm going to try the commands Gianni provided…. Fingers crossed it works for me!

Thanks again for your help! I am in process of building a new OAS 2025 to migrate to, but have been running into various issues configuring it ha!

Hey, so I provided the manifest output to our security team showing the file is updated, but they want to know if it's possible to rename log4j file so it is not flagged by the scanner… Do you know if that is possible, or will it break OAS?

You're right, looks like the filename is just old then? Here is the manifest: Manifest-Version: 1.0 Bundle-Description: The Apache Log4j Implementation Implementation-Title: Apache Log4j Bundle-SymbolicName: org.apache.logging.log4j Implementation-Version: 2.17.1 Archiver-Version: Plexus Archiver Built-By: Oracle…

Thanks for the fast response, I appreciate it! This is installed on windows server, but I tried the 2nd cmd you provided without grep and searched the output manually for JndiLookup this shows up: 3158 Mon Jan 10 06:17:44 EST 2022 org/apache/logging/log4j/core/lookup/JndiLookup.class Does that there is a vulnerability…