OpenAM: Installation fails with LDAPException
August 24, 2011 in Unix / Linux
When installing OpenAM (formerly OpenSSO) with the configuration store pointing to an OpenDJ (formerly OpenDS) LDAP server, our installation fails with a LDAPException as follows:
Configuring system.AMSetupServlet.processRequest: errorSMSException Exception Code:3
Message:The LDAP operation failed.
————————————————–
The lower level exception message
error result
The lower level exception:
com.sun.identity.shared.ldap.LDAPException: error result (65); Entry ou=services,ou=systems,dc=include,dc=io cannot not be modified because the resulting entry would have violated the server schema: Entry ou=services,ou=systems,dc=include,dc=io violates the Directory Server schema configuration because it includes multiple conflicting structural objectclasses organizationalUnit and sunservicecomponent. Only a single structural objectclass is allowed in an entry.
…
This problem occurs because the Sun Access Manager schema is not conforming to full LDAP standards that are enforced by OpenDJ installation.
To solve this problem, you need to edit the config/config.ldif file from your current OpenDJ configuration and set the ds-cfg-single-structural-objectclass-behavior to accept.
- ds-cfg-single-structural-objectclass-behavior: deny
+ ds-cfg-single-structural-objectclass-behavior: accept
Restart the OpenDJ external directory service after changing this parameter and you are ready to deploy OpenAM as expected!
There is an open bug report about this problem at: https://bugster.forgerock.org/jira/browse/OPENAM-312. Thanks Steve Ferris for the information! :)




