Oim Strting errror- Error XELLERATE.ACCOUNTMANAGEMENT

Question

Hi ,
I am getting the following error when I am starting the OIM server.
<Error> <XELLERATE.ACCOUNTMANAGEMENT> <BEA-000000> <Class/Method: tcDefaultDBEncryptionImpl/decrypt encounter some problems: Input length must be multiple of 16 when decrypting with padded cipher
javax.crypto.IllegalBlockSizeException: Input length must be multiple of 16 when decrypting with padded cipher
at com.sun.crypto.provider.SunJCE_f.b(DashoA13*..)
at com.sun.crypto.provider.SunJCE_f.b(DashoA13*..)
at com.sun.crypto.provider.AESCipher.engineDoFinal(DashoA13*..)
at javax.crypto.Cipher.doFinal(DashoA13*..)
at com.thortech.xl.crypto.tcDefaultDBEncryptionImpl.decrypt(tcDefaultDBEncryptionImpl.java:219)
at com.thortech.xl.crypto.tcCryptoUtil.decrypt(tcCryptoUtil.java:122)
at com.thortech.xl.crypto.tcCryptoUtil.decrypt(tcCryptoUtil.java:200)
at com.thortech.xl.dataobj.tcDataSet.decryptDataSet(tcDataSet.java:1431)
at com.thortech.xl.dataaccess.tcDataBase.readPartialPreparedStatement(tcDataBase.java:1365)
at com.thortech.xl.dataaccess.tcDataBase.readPreparedStatement(tcDataBase.java:1158)
at com.thortech.xl.dataobj.PreparedStatementUtil.execute(PreparedStatementUtil.java:60)
at oracle.iam.ldapsync.impl.eventhandlers.LDAPAddMissingObjectClasses.initialize(LDAPAddMissingObjectClasses.java:177)
at oracle.iam.platform.kernel.impl.OrchConfig.getinitializedEventHandler(OrchConfig.java:205)
at oracle.iam.platform.kernel.impl.OrchConfig.<init>(OrchConfig.java:123)
at oracle.iam.platform.kernel.impl.KernelObjFactory.<init>(KernelObjFactory.java:54)
at oracle.iam.platform.kernel.impl.KernelObjFactory.<clinit>(KernelObjFactory.java:48)
at oracle.iam.platform.kernel.impl.OrchestrationEngineImpl.<init>(OrchestrationEngineImpl.java:71)
at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:39)
at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:27)
at java.lang.reflect.Constructor.newInstance(Constructor.java:513)
at org.springframework.beans.BeanUtils.instantiateClass(BeanUtils.java:100)
at org.springframework.beans.factory.support.SimpleInstantiationStrategy.instantiate(SimpleInstantiationStrategy.java:61)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.instantiateBean(AbstractAutowireCapableBeanFactory.java:877)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBeanInstance(AbstractAutowireCapableBeanFactory.java:839)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.doCreateBean(AbstractAutowireCapableBeanFactory.java:440)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory$1.run(AbstractAutowireCapableBeanFactory.java:409)
at java.security.AccessController.doPrivileged(Native Method)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:380)
at org.springframework.beans.factory.support.AbstractBeanFactory$1.getObject(AbstractBeanFactory.java:264)
at org.springframework.beans.factory.support.DefaultSingletonBeanRegistry.getSingleton(DefaultSingletonBeanRegistry.java:222)
at org.springframework.beans.factory.support.AbstractBeanFactory.doGetBean(AbstractBeanFactory.java:261)
But OIM started and I can able to view the OIM Admin consle.
I need to know why this error came and How to resolve it?
Please try to help me.
Thanks & Regards,
Karthick

Answer 1

Looks like you are using LDAPSync post OIM installation and the encryption on the IT resource was not setup correctly. Follow the steps from MOS Article: 1307549.1 for the solution.
_Cause:_
Encryption of the Directory Server IT Resource data in SVP table was not accomplished.
The fields that are plain text are:
Server URL
Use SSL
Admin Login
Admin Password
Search Base
User Reservation Container
_Solution_
1. Use the following query to find fields with "plain text" values:
select svr.svr_name, spd.spd_field_name, svp.svp_key, svp_field_value
from svp
inner join spd on spd.spd_key = svp.spd_key
inner join svr on svr.svr_key = svp.svr_key
2. Set these plain text values to null after making backup of table.
3. Edit the Directory Server to re-set values.
Expected error at this stage:
-- no "System Error call admin...", but that makes sense since the values in question pertained directly to the Directory Server --
4. Re-entered the values for the IT Resource.
5. Saving the changes and verify that SVP values are now all encrypted.
With correct values and encryption, then users are able to be created.-Bikash