Ora-# Errors For Kerberos-Authenticated Enterprise Users - Oracle Database B10772-01 Administrator's Manual

ORA-28275: Multiple mappings for user login name to LDAP distinguished
ORA-28277: LDAP search, while authenticating global user with passwords,
ORA-28278: No domain policy registered for password-based GLOBAL users
ORA-28862: SSL handshake failed

ORA-# Errors for Kerberos-Authenticated Enterprise Users

If you receive an ORA-# error while using Kerberos-authenticated Enterprise User
Security, then locate the error in the following section and take the recommended
action.
ORA-1017: Invalid username/password; login denied
ORA-28030: Problem accessing LDAP directory service
Use Enterprise Security Manager to check that the user search base
3.
containing this user is listed in the user search base attribute of the realm
that you are using.
Use Enterprise Security Manager to check that the enterprise domain is in
4.
the password accessible domains group.
Check that the ACL on the user search base attribute allows read and search
5.
access to the orclpassword attributes by the verifierServices group.
This is set properly by default, but may have been altered.
name exist
Cause: There are multiple user DNs in the directory within the user search base
whose login name for the user matches what was provided during the database
connection.
Action: Use Enterprise Security Manager Console to make the login name
value unique (no two users share the same login name) within all user search
bases associated with the realm Oracle Context.
failed
Action: Check that the relevant directory instance is up and running.
Cause: The database cannot read the enterprise domain information that it
needs.
Action: See "DOMAIN-READ-ERROR Checklist"
Action: Check that you are using a non-SSL connect string.
Action: See "USER-SCHEMA ERROR Checklist"
Enterprise User Security Configuration Tasks and Troubleshooting 12-29
Troubleshooting Enterprise User Security
on page 12-35
on page 12-34