Current environment:
FMW 12.2.1.4 Forms & Reports
Oracle Access Manager 12.2.1.4
Oracle Internet Directory 12.2.1.4
Oracle Forms with SSO:
We use the schema OPSS in the repository database to store the RAD. Users are authenticated by OAM against Active Directory.
SSO works with the Forms application.
Oracle Reports with SSO
We have stored the same RAD also in OID under cn=Extended Properties , cn=oraclecontext, dc=xxxx, dc=de.
When I run a report using a secured reports server I get:
rwserver-diagnostig.log
REP-50125 : oracle.ldap.util.NoSuchUserException: User does not exist - SIMPLE NAME = xxxxx [[
oracle.ldap.util.NoSuchUserException: User does not exist - SIMPLE NAME = xxxxx
at oracle.ldap.util.User.resolve(User.java:1034)
at oracle.ldap.util.User.getExtendedProperties(User.java:409)
at oracle.reports.server.OIDReader$Resource.getResourceAttributes(OIDReader.java:272)
The strange thing is that although there is an error with the reports server the job is forwarded to the engine.
rwEng-0_diagnostic.log
[2020-03-24T14:02:05.098+01:00] [reports] [ERROR] [] [oracle.reports.engine] [tid: 11] [ecid: 02e888e3-7526-4c06-9469-15273acf77c6-00000003,0] [EngineName: rwEng-0] C Engine Job ID = 1232773297 ERR REP-0501: Eine Verbindung zur angegebenen Datenbank kann nicht hergestellt werden.[[
ORA-12545: CONNECT nicht erfolgreich, da Ziel-Host oder -Objekt nicht vorhanden
]]
[2020-03-24T14:02:05.106+01:00] [reports] [INCIDENT_ERROR] [REP-501] [oracle.reports.engine] [tid: 11] [ecid: 02e888e3-7526-4c06-9469-15273acf77c6-00000003,0] [EngineName: rwEng-0] REP-501 : Eine Verbindung zur angegebenen Datenbank kann nicht hergestellt werden. [[
For me it looks like that the RAD cannot be used because the user is not known to OID.
But the user (xxxxx) is already authenticated by OAM and also known to the reports server (command showenv).
When we add the user xxxxx to the branch in OID the report runs succesfully.
My questions are:
- Do we have to store also the users in OID to run the reports?
- Is there a way to access the RAD when we run a report without adding all users to OID ?
- Is there a way to get the user identity for reports from Active Directory ?
Thanks
Juergen