Setup BPEL Process Manager with OID

Question

I followed all the instructions provided by the Content Services Custom BPEL workflow to setup BPEL with OID but I have The error "Identity Service cannot find user" while log in to http://fr101sv0226.corp.tpnet.intra:9700/integration/worklistapp/Login
I have configured :
1)
[oracle@fr101sv0226 orabpel]$ more ./system/services/config/is_config.xml
<BPMIdentityServiceConfig xmlns="http://www.oracle.com/pcbpel/identityservice/isconfig">
<provider providerType="JAZN" name="oid">
<connection url="ldap://fr101sv0226.corp.tpnet.intra:389" binddn="cn=orcladmin" password="CLxKPM04EzA=" encrypted="true">
<pool initsize="2" maxsize="25" prefsize="10" timeout="300000"/>
</connection>
</provider>
</BPMIdentityServiceConfig>
2)[oracle@fr101sv0226 orabpel]$ more ./system/appserver/oc4j/j2ee/home/config/jazn.xml
<?xml version = '1.0' encoding = 'UTF-8' standalone = 'yes'?>
<!DOCTYPE jazn PUBLIC "JAZN Config" "http://xmlns.oracle.com/ias/dtds/jazn-9_04.dtd">
<jazn provider="LDAP" location="ldap://fr101sv0226.corp.tpnet.intra:389">
<property name="ldap.cache.session.enable" value="false"/>
<property name="ldap.cache.realm.enable" value="false"/>
<property name="ldap.user" value="cn=orcladmin"/>
<property name="ldap.password" value="{903}q/BL01wZ0UsS9H+PIN25ih4tlPcSWaLm"/>
<property name="ldap.cache.policy.enable" value="false"/>
</jazn>
(password value was "!password"
3)oracle@fr101sv0226 orabpel]$ more ./system/appserver/oc4j/j2ee/home/application-deployments/hw_services/orion-application.xml
<?xml version="1.0"?>
<!DOCTYPE orion-application PUBLIC "-//ORACLE//DTD OC4J Application runtime 9.04//EN" "http://xmlns.oracle.com/ias/dtds/orion-application
-9_04.dtd">
<orion-application deployment-version="10.1.2.0.0" default-data-source="jdbc/OracleDS" treat-zero-as-null="true">
<ejb-module remote="false" path="hw_services.war" />
<web-module id="testconnection" path="testconnection.war" />
<web-module id="deploy" path="deploy.war" />
<web-module id="worklistxpress" path="worklistxpress.war" />
<web-module id="hw_services" path="hw_services.war" />
<persistence path="persistence" />
<principals path="principals.xml" />
<!--jazn provider="XML" location="jazn-data.xml" /-->
<jazn provider="LDAP" location="ldap://fr101sv0226.corp.tpnet.intra:389" >
<property name="ldap.cache.session.enable" value="false" />
<property name="ldap.cache.realm.enable" value="false" />
<property name="ldap.user" value="cn=orcladmin" />
<property name="ldap.password" value="!sv0226" />
<property name="ldap.cache.policy.enable" value="false" />
</jazn>
(the password has not beend encrypted for this file???)
Please Help....
Thanks
JO

Answer 1

Hi JO,
Can you confirm the following:
That the 10.1.2.0.0 Application Server instance to which you installed BPEL was configured with the same Oracle Internet Directory that is used by Content Services (you would have had an option during AS install to specify OID integration - aka Identity Management access).
Note - that the OID Server must also be running on both SSL and non SSL Ports.
The bpel integration documentation has been revised since the 10.1.1 release.
As per the OC4J J2EE Security Guide, one should not need to specify full OID jazn provider information should the IAS instance be associated with Identity Management.
Thus, you should now be able to set the following revised values in the various configuration files:
$ORACLE_HOME/j2ee/OC4J_BPEL/config/jazn.xml
<jazn provider="LDAP" />
$ORACLE_HOME/integration/orabpel/system/appserver/oc4j/j2ee/home/config/jazn.xml
<jazn provider="LDAP" />
Also, the orion-application.xml file should not need to be changed at all, as it should inherit the jazn information from the container’s default JAZN configuration specified in $ORACLE_HOME/j2ee/OC4J_BPEL/config/jazn.xml
To summarize:
1) $ORACLE_HOME/j2ee/OC4J_BPEL/application/deployments/hw_services/orion-application.xml should not need to be modified.
2) $ORACLE_HOME/j2ee/OC4J_BPEL/config/jazn.xml and $ORACLE_HOME/integration/orabpel/system/appserver/oc4j/j2ee/home/config/jazn.xml should contain a jazn entry <jazn provider=”LDAP”/>
The steps for configuring Identity Service Provider (is_config.xml) are correct. However it should not noted that due to limitations with BPEL’s OIDIdentityService and OIDProvider classes, there is no way of setting up ssl connectivity in is_config.xml – this however has no effect on the workflows.
thanks,
Matt