After upgrading Access Manager on a Windows setup, you cannot perform the following tasks:
Registering a client application
Deleting an existing client application
Creating a Resource Server
Deleting an existing resource server
Using any of the configured Access Manager Resource Servers after updating nidsOAuthGrant attribute
These issues occur because the syntax of nidsOAuth2CFGXML is set to string or octet instead of stream.
To change the syntax to stream, perform the following steps on Administration Console:
Back up nidsOAuth2CFGXML
On the dashboard, click <user name> at the top right of the page and thenclick Manage Directory Objects.
Navigate to novell > accessManagerContainer > nids > cluster > SCCxxxxxx > OACxxxxxx > OATxxxxxx.
In the content frame, click the Edit icon next to OATxxxxxx.
Under Valued Attributes select nidsOAuth2CFGXML and then click Edit.
On the Edit Attribute page, click the Edit icon.
Copy the content under Unicode Values and then save it as an xml file in any local folder.
Delete nidsOAuth2CFGXML
On the dashboard, click <user name> at the top right of the page and thenclick Manage Directory Objects.
Navigate to novell > accessManagerContainer > nids > cluster > SCCxxxxxx > OACxxxxxx > OATxxxxxx.
In the content frame, click the Edit icon next to OATxxxxxx.
Under Valued Attributes select nidsOAuth2CFGXML.
Click Delete > > OK > Apply > OK.
Log in to NDS iMonitor (eDirectory’s Management Utility) to update the attributes
Open a browser and enter the following URL:
https://<Admin console ip>:8030/nds/trace
Log in using the FQDN credentials.
For example, User FDN: admin.novell and Password: novell
Under DS Trace Options select the following options:
Backlinker
Janitor
Purge
These options are required along with the options that are selected by default.
Click Trace On > Update.
In the navigation pane, click Agent Configuration > Agent Triggers.
Select the following options and then click Submit:
Janitor
Purger
Reference Check
Click Trace Configuration > Trace Live
A message similar to the following is displayed:
BLink: 109 Valid Attributes, 0 Invalid Attributes in the Cached attributes list
Run the LDIF file on the Administration Console server
Click here to open and then save the LDIF file.
Go to C:\Novell\NDS\.
Run the following ice command:
ice.exe -v -C -n -S LDIF -v -c -f <LDIF file path> -D LDAP -v -L C:\Novell\NDS\DIBFiles\CertServ\SSCert.der -s <IP address of Administration Console> -p <port number> -d <cn> -w <password>
For example, run ice.exe -v -C -n -S LDIF -v -c -f C:\Users\Administrator\Desktop\1102902.ldif -D LDAP -v -L C:\Novell\NDS\DIBFiles\CertServ\SSCert.der -s 164.99.184.112 -p 636 -d cn=admin,o=novell -w novell
Restart the tomcat service on Administration Console.
Restore the values from the back up file to nidsOAuth2CFGXML
On the dashboard, click <user name> at the top right of the page and thenclick Manage Directory Objects.
Navigate to novell > accessManagerContainer > nids > cluster > SCCxxxxxx > OACxxxxxx > OATxxxxxx.
In the content frame, click the Edit icon next to OATxxxxxx.
Under Unvalued Attributes select nidsOAuth2CFGXML and then use the left arrow to move it under Valued Attributes.
Click the Edit icon and then click Choose File to upload the backed up xml file.
Click Upload File > Modify > OK.
NOTE:If the value of nidsOAuth2CFGXML is not uploaded properly, you can edit the value by using LDAP admin utility with Administration Console credentials.