Oracle Technology‎ > ‎OID‎ > ‎OID Notes‎ > ‎

    ORA-28043: invalid bind credentials for DB-OID connection

    posted 22 Jul 2011 06:35 by Alan Nolan-Davies   [ updated 23 Dec 2011 03:43 ]
    A user just got this error when trying to login to a database using his enterprise user account...

    $ sqlplus matt/password@pcmsndt2

    ERROR:
    ORA-28043: invalid bind credentials for DB-OID connection

    using our trusty friend Google I found this page http://download.oracle.com/docs/cd/B19306_01/network.102/b14269/configur.htm 

    and then this paragraph

    ORA-28043: Invalid bind credentials for DB/OID connection
    Cause: The database directory password no longer synchronizes with the directory.
    Action: Use the Regenerate Password button in Database Configuration Assistant to generate a new directory password for the database, synchronize it with the directory, and store it in the database wallet.

    We'd recently added another Oracle Database into the existing OID host and during that process have reset the Wallet Password, so the new database connects ok, but the old one now sees the error.

    So to get the old database working again I need to reset the Wallet password so that is resyncs the Database to OID.

    on the host run up DBCA, choose the old database, the option to configure the database and then the option to Regenerate the Password

    once this was done the sqlplus connection was ok once more.

    Checking the wallet password
    =========================

    On the database host

    cd $ORACLE_HOME/bin/

    ./mkstore -wrl /u01/app/oracle/admin/<SID>/wallet -viewEntry ORACLE.SECURITY.DN
    At “Enter wallet password” type in <OID/wallet password>
    Should get response like:
    ORACLE.SECURITY.DN = cn=<SID>,cn=OracleContext,dc=pcms,dc=internal

    ./mkstore -wrl /u01/app/oracle/admin/<SID>/wallet -viewEntry ORACLE.SECURITY.PASSWORD
    At “Enter wallet password” type in <OID/wallet password>
    Should get response like:
    ORACLE.SECURITY.PASSWORD = <EncryptedPassword>

    ./ldapbind -h <OIDHost> -p <OIDPort> -D "<ORACLE.SECURITY.DN>" -w <EncryptedPassword>
    Should get response like:
    Bind Successful