Oracle Reports RAD cannot connect to database

Current environment:

FMW 12.2.1.4 Forms & Reports

Oracle Access Manager 12.2.1.4

Oracle Internet Directory 12.2.1.4

Oracle Forms with SSO:

We use the schema OPSS in the repository database to store the RAD. Users are authenticated by OAM against Active Directory.

SSO works with the Forms application.

Oracle Reports with SSO

We have stored the same RAD also in OID under  cn=Extended Properties , cn=oraclecontext, dc=xxxx, dc=de.

When I run a report using a secured reports server I get:

rwserver-diagnostig.log
REP-50125 : oracle.ldap.util.NoSuchUserException: User does not exist - SIMPLE NAME = xxxxx  [[

oracle.ldap.util.NoSuchUserException: User does not exist - SIMPLE NAME = xxxxx

         at oracle.ldap.util.User.resolve(User.java:1034)

         at oracle.ldap.util.User.getExtendedProperties(User.java:409)

         at oracle.reports.server.OIDReader$Resource.getResourceAttributes(OIDReader.java:272)

The strange thing is that although there is an error with the reports server the job is forwarded to the engine.

rwEng-0_diagnostic.log

[2020-03-24T14:02:05.098+01:00] [reports] [ERROR] [] [oracle.reports.engine] [tid: 11] [ecid: 02e888e3-7526-4c06-9469-15273acf77c6-00000003,0] [EngineName: rwEng-0] C Engine  Job ID = 1232773297  ERR REP-0501: Eine Verbindung zur angegebenen Datenbank kann nicht hergestellt werden.[[

ORA-12545: CONNECT nicht erfolgreich, da Ziel-Host oder -Objekt nicht vorhanden

]]

[2020-03-24T14:02:05.106+01:00] [reports] [INCIDENT_ERROR] [REP-501] [oracle.reports.engine] [tid: 11] [ecid: 02e888e3-7526-4c06-9469-15273acf77c6-00000003,0] [EngineName: rwEng-0] REP-501 : Eine Verbindung zur angegebenen Datenbank kann nicht hergestellt werden.  [[

For me it looks like that the RAD cannot be used because the user is not known to OID.

But the user (xxxxx) is already authenticated by OAM and also known to the reports server (command showenv).

When we add the user xxxxx to the branch in OID the report runs succesfully.

My questions are:

- Do we have to store also the users in OID to run the reports?

- Is there a way to access the RAD when we run a report without adding all users to OID ?

- Is there a way to get the user identity for reports from Active Directory ?

Thanks
Juergen