Acessando o ForgeRockAM pelo Administrator Authentication Configuration service

 Para acessar o AM usando o modo administrativo basta usar o seguinte service

https://meu.iam.com.br:8443/am/XUI/?authIndexType=service&authIndexValue=adminconsoleservice

Anteriormente bastava especificar "service=adminconsoleservice" e o openam já resolvia a url, contudo nas últimas versões ele somente está disponível utilizando os dois query parameters authIndexType e authIndexValue

Códigos de Autenticação do OpenAM

Authentication Codes

Id	Log Level	Description	Data	Triggers	Actions
AUTHENTICATION-100	INFO	Authentication is Successful	message	User authenticated with valid credentials
AUTHENTICATION-101	INFO	User based authentication is successful	message authentication type user name	User authenticated with valid credentials
AUTHENTICATION-102	INFO	Role based authentication is successful	message authentication type role name	User belonging to role authenticated with valid credentials
AUTHENTICATION-103	INFO	Service based authentication is successful	message authentication type service name	User authenticated with valid credentials to a configured service under realm
AUTHENTICATION-104	INFO	Authentication level based authentication is successful	message authentication type authentication level value	User authenticated with valid credentials to one or more authentication modules having authentication level value greater than or equal to specified authentication level
AUTHENTICATION-105	INFO	Module based authentication is successful	message authentication type module name	User authenticated with valid credentials to authentication module under realm
AUTHENTICATION-200	INFO	Authentication Failed	error message	Incorrect/invalid credentials presented User locked out/not active	Enter correct/valid credentials to required authentication module
AUTHENTICATION-201	INFO	Authentication Failed	error message	Invalid credentials entered.	Enter the correct password.
AUTHENTICATION-202	INFO	Authentication Failed	error message	Named Configuration (Auth Chain) does not exist.	Create and configure a named config for this org.
AUTHENTICATION-203	INFO	Authentication Failed	error message	No user profile found for this user.	User does not exist in the datastore plugin configured and hence configure the datastore plugin for this realm/org correctly.
AUTHENTICATION-204	INFO	Authentication Failed	error message	This user is not active.	Activate the user.
AUTHENTICATION-205	INFO	Authentication Failed	error message	Max number of failure attempts exceeded. User is Locked out.	Contact system administrator.
AUTHENTICATION-206	INFO	Authentication Failed	error message	User account has expired.	Contact system administrator.
AUTHENTICATION-207	INFO	Authentication Failed	error message	Login timed out.	Try to login again.
AUTHENTICATION-208	INFO	Authentication Failed	error message	Authentication module is denied.	Configure this module or use some other module.
AUTHENTICATION-209	INFO	Authentication Failed	error message	Limit for maximum number of allowed session has been reached.	Logout of a session or increase the limit.
AUTHENTICATION-210	INFO	Authentication Failed	error message	Org/Realm does not exists.	Use a valid Org/Realm.
AUTHENTICATION-211	INFO	Authentication Failed	error message	Org/Realm is not active.	Activate the Org/Realm.
AUTHENTICATION-212	INFO	Authentication Failed	error message	Cannot create a session.	Ensure that session service is configured and maxsession is not reached.
AUTHENTICATION-213	INFO	User based authentication failed	error message authentication type user name	No authentication configuration (chain of one or more authentication modules) configured for user Incorrect/invalid credentials presented User locked out/not active	Configure authentication configuration (chain of one or more authentication modules) for user Enter correct/valid credentials to required authentication module
AUTHENTICATION-214	INFO	Authentication Failed	error message authentication type user name	User based Auth. Invalid credentials entered.	Enter the correct password.
AUTHENTICATION-215	INFO	Authentication Failed	error message authentication type user name	Named Configuration (Auth Chain) does not exist for this user	Create and configure a named config for this user
AUTHENTICATION-216	INFO	Authentication Failed	error message authentication type user name	User based Auth. No user profile found for this user.	User does not exist in the datastore plugin configured and hence configure the datastore plugin for this realm/org correctly.
AUTHENTICATION-217	INFO	Authentication Failed	error message authentication type user name	User based Auth. This user is not active.	Activate the user.
AUTHENTICATION-218	INFO	Authentication Failed	error message authentication type user name	User based Auth. Max number of failure attempts exceeded. User is Locked out.	Contact system administrator.
AUTHENTICATION-219	INFO	Authentication Failed	error message authentication type user name	User based Auth. User account has expired.	Contact system administrator.
AUTHENTICATION-220	INFO	Authentication Failed	error message authentication type user name	User based Auth. Login timed out.	Try to login again.
AUTHENTICATION-221	INFO	Authentication Failed	error message authentication type user name	User based Auth. Authentication module is denied.	Configure this module or use some other module.
AUTHENTICATION-222	INFO	Authentication Failed	error message authentication type user name	User based auth. Limit for maximum number of allowed session has been reached.	Logout of a session or increase the limit.
AUTHENTICATION-223	INFO	Authentication Failed	error message authentication type user name	User based auth. Org/Realm does not exists.	Use a valid Org/Realm.
AUTHENTICATION-224	INFO	Authentication Failed	error message authentication type user name	User based auth. Org/Realm is not active.	Activate the Org/Realm.
AUTHENTICATION-225	INFO	Authentication Failed	error message authentication type user name	User based auth. Cannot create a session.	Ensure that session service is configured and maxsession is not reached.
AUTHENTICATION-226	INFO	Role based authentication failed	error message authentication type role name	No authentication configuration (chain of one or more authentication modules) configured for role Incorrect/invalid credentials presented User does not belong to this role User locked out/not active	Configure authentication configuration (chain of one or more authentication modules) for role Enter correct/valid credentials to required authentication module Assign this role to the authenticating user
AUTHENTICATION-227	INFO	Authentication Failed	error message authentication type role name	Role based Auth. Invalid credentials entered.	Enter the correct password.
AUTHENTICATION-228	INFO	Authentication Failed	error message authentication type role name	Named Configuration (Auth Chain) does not exist for this role.	Create and configure a named config for this role.
AUTHENTICATION-229	INFO	Authentication Failed	error message authentication type role name	Role based Auth. No user profile found for this user.	User does not exist in the datastore plugin configured and hence configure the datastore plugin for this realm/org correctly.
AUTHENTICATION-230	INFO	Authentication Failed	error message authentication type role name	Role based Auth. This user is not active.	Activate the user.
AUTHENTICATION-231	INFO	Authentication Failed	error message authentication type role name	Role based Auth. Max number of failure attempts exceeded. User is Locked out.	Contact system administrator.
AUTHENTICATION-232	INFO	Authentication Failed	error message authentication type role name	Role based Auth. User account has expired.	Contact system administrator.
AUTHENTICATION-233	INFO	Authentication Failed	error message authentication type role name	Role based Auth. Login timed out.	Try to login again.
AUTHENTICATION-234	INFO	Authentication Failed	error message authentication type role name	Role based Auth. Authentication module is denied.	Configure this module or use some other module.
AUTHENTICATION-235	INFO	Authentication Failed	error message authentication type role name	Role based auth. Limit for maximum number of allowed session has been reached.	Logout of a session or increase the limit.
AUTHENTICATION-236	INFO	Authentication Failed	error message authentication type role name	Role based auth. Org/Realm does not exists.	Use a valid Org/Realm.
AUTHENTICATION-237	INFO	Authentication Failed	error message authentication type role name	Role based auth. Org/Realm is not active.	Activate the Org/Realm.
AUTHENTICATION-238	INFO	Authentication Failed	error message authentication type role name	Role based auth. Cannot create a session.	Ensure that session service is configured and maxsession is not reached.
AUTHENTICATION-239	INFO	Authentication Failed	error message authentication type role name	Role based auth. User does not belong to this role.	Add the user to this role.
AUTHENTICATION-240	INFO	Service based authentication failed	error message authentication type service name	No authentication configuration (chain of one or more authentication modules) configured for service Incorrect/invalid credentials presented User locked out/not active	Configure authentication configuration (chain of one or more authentication modules) for service Enter correct/valid credentials to required authentication module
AUTHENTICATION-241	INFO	Authentication Failed	error message authentication type service name	Service based Auth. Invalid credentials entered.	Enter the correct password.
AUTHENTICATION-242	INFO	Authentication Failed	error message authentication type service name	Named Configuration (Auth Chain) does not exist with this service name.	Create and configure a named config.
AUTHENTICATION-243	INFO	Authentication Failed	error message authentication type service name	Service based Auth. No user profile found for this user.	User does not exist in the datastore plugin configured and hence configure the datastore plugin for this realm/org correctly.
AUTHENTICATION-244	INFO	Authentication Failed	error message authentication type service name	Service based Auth. This user is not active.	Activate the user.
AUTHENTICATION-245	INFO	Authentication Failed	error message authentication type service name	Service based Auth. Max number of failure attempts exceeded. User is Locked out.	Contact system administrator.
AUTHENTICATION-246	INFO	Authentication Failed	error message authentication type service name	Service based Auth. User account has expired.	Contact system administrator.
AUTHENTICATION-247	INFO	Authentication Failed	error message authentication type service name	Service based Auth. Login timed out.	Try to login again.
AUTHENTICATION-248	INFO	Authentication Failed	error message authentication type service name	Service based Auth. Authentication module is denied.	Configure this module or use some other module.
AUTHENTICATION-249	INFO	Authentication Failed	error message authentication type service name	Service based Auth. Service does not exist.	Please use only valid Service.
AUTHENTICATION-250	INFO	Authentication Failed	error message authentication type service name	Service based auth. Limit for maximum number of allowed session has been reached.	Logout of a session or increase the limit.
AUTHENTICATION-251	INFO	Authentication Failed	error message authentication type service name	Service based auth. Org/Realm does not exists.	Use a valid Org/Realm.
AUTHENTICATION-252	INFO	Authentication Failed	error message authentication type service name	Service based auth. Org/Realm is not active.	Activate the Org/Realm.
AUTHENTICATION-253	INFO	Authentication Failed	error message authentication type service name	Service based auth. Cannot create a session.	Ensure that session service is configured and maxsession is not reached.
AUTHENTICATION-254	INFO	Authentication level based authentication failed	error message authentication type authentication level value	There are no authentication module(s) having authentication level value greater than or equal to specified authentication level Incorrect/invalid credentials presented to one or more authentication modules having authentication level greater than or equal to specified authentication level User locked out/not active	Configure one or more authentication modules having authentication level value greater than or equal to required authentication level Enter correct/valid credentials to one or more authentication modules having authentication level greater than or equal to specified authentication level
AUTHENTICATION-255	INFO	Authentication Failed	error message authentication type authentication level value	Level based Auth. Invalid credentials entered.	Enter the correct password.
AUTHENTICATION-256	INFO	Authentication Failed	error message authentication type authentication level value	Level based Auth. No Auth Configuration available.	Create an auth configuration.
AUTHENTICATION-257	INFO	Authentication Failed	error message authentication type authentication level value	Level based Auth. No user profile found for this user.	User does not exist in the datastore plugin configured and hence configure the datastore plugin for this realm/org correctly.
AUTHENTICATION-258	INFO	Authentication Failed	error message authentication type authentication level value	Level based Auth. This user is not active.	Activate the user.
AUTHENTICATION-259	INFO	Authentication Failed	error message authentication type authentication level value	Level based Auth. Max number of failure attempts exceeded. User is Locked out.	Contact system administrator.
AUTHENTICATION-260	INFO	Authentication Failed	error message authentication type authentication level value	Level based Auth. User account has expired.	Contact system administrator.
AUTHENTICATION-261	INFO	Authentication Failed	error message authentication type authentication level value	Level based Auth. Login timed out.	Try to login again.
AUTHENTICATION-262	INFO	Authentication Failed	error message authentication type authentication level value	Level based Auth. Authentication module is denied.	Configure this module or use some other module.
AUTHENTICATION-263	INFO	Authentication Failed	error message authentication type authentication level value	Level based Auth. Invalid Authg Level.	Please specify valid auth level.
AUTHENTICATION-264	INFO	Authentication Failed	error message authentication type authentication level value	Level based auth. Limit for maximum number of allowed session has been reached.	Logout of a session or increase the limit.
AUTHENTICATION-265	INFO	Authentication Failed	error message authentication type authentication level value	Level based auth. Org/Realm does not exists.	Use a valid Org/Realm.
AUTHENTICATION-266	INFO	Authentication Failed	error message authentication type authentication level value	Level based auth. Org/Realm is not active.	Activate the Org/Realm.
AUTHENTICATION-267	INFO	Authentication Failed	error message authentication type authentication level value	Level based auth. Cannot create a session.	Ensure that session service is configured and maxsession is not reached.
AUTHENTICATION-268	INFO	Module based authentication failed	error message authentication type module name	Module is not registered/configured under realm Incorrect/invalid credentials presented User locked out/not active	Register/configure authentication module under realm Enter correct/valid credentials to authentication module
AUTHENTICATION-269	INFO	Authentication Failed	error message authentication type module name	Module based Auth. Invalid credentials entered.	Enter the correct password.
AUTHENTICATION-270	INFO	Authentication Failed	error message authentication type module name	Module based Auth. No user profile found for this user.	User does not exist in the datastore plugin configured and hence configure the datastore plugin for this realm/org correctly.
AUTHENTICATION-271	INFO	Authentication Failed	error message authentication type module name	Module based Auth. This user is not active.	Activate the user.
AUTHENTICATION-272	INFO	Authentication Failed	error message authentication type module name	Module based Auth. Max number of failure attempts exceeded. User is Locked out.	Contact system administrator.
AUTHENTICATION-273	INFO	Authentication Failed	error message authentication type module name	Module based Auth. User account has expired.	Contact system administrator.
AUTHENTICATION-274	INFO	Authentication Failed	error message authentication type module name	Module based Auth. Login timed out.	Try to login again.
AUTHENTICATION-275	INFO	Authentication Failed	error message authentication type module name	Module based Auth. Authentication module is denied.	Configure this module or use some other module.
AUTHENTICATION-276	INFO	Authentication Failed	error message authentication type module name	Module based auth. Limit for maximum number of allowed session has been reached.	Logout of a session or increase the limit.
AUTHENTICATION-277	INFO	Authentication Failed	error message authentication type module name	Module based auth. Org/Realm does not exists.	Use a valid Org/Realm.
AUTHENTICATION-278	INFO	Authentication Failed	error message authentication type module name	Module based auth. Org/Realm is not active.	Activate the Org/Realm.
AUTHENTICATION-279	INFO	Authentication Failed	error message authentication type module name	Module based auth. Cannot create a session.	Ensure that session service is configured and maxsession is not reached.
AUTHENTICATION-300	INFO	User logout is Successful	message	User logged out
AUTHENTICATION-301	INFO	User logout is successful from user based authentication	message authentication type user name	User logged out
AUTHENTICATION-302	INFO	User logout is successful from role based authentication	message authentication type role name	User belonging to this role logged out
AUTHENTICATION-303	INFO	User logout is successful from service based authentication	message authentication type service name	User logged out of a configured service under realm
AUTHENTICATION-304	INFO	User logout is successful from authentication level based authentication	message authentication type authentication level value	User logged out of one or more authentication modules having authentication level value greater than or equal to specified authentication level
AUTHENTICATION-305	INFO	User logout is successful from module based authentication	message authentication type module name	User logged out of authentication module under realm

Fonte: https://docs.oracle.com/cd/E19575-01/820-3886/gdhxz/index.html
            https://backstage.forgerock.com/#!/docs/openam/13.5/reference#log-messages

Codigos de erro do LDAP

Dec value	Value	Hex value	Brief description	Detailed description
00	LDAP_SUCCESS	00	Success	The request was successful.
01	LDAP_OPERATIONS ERROR	01	Operations error	An operations error occurred.
02	LDAP_PROTOCOL ERROR	02	Protocol error	A protocol violation was detected.
03	LDAP_TIMELIMIT EXCEEDED	03	Time limit exceeded	An LDAP time limit was exceeded.
04	LDAP_SIZELIMIT EXCEEDED	04	Size limit exceeded	An LDAP size limit was exceeded.
05	LDAP_COMPARE FALSE	05	Compare false	A compare operation returned false.
06	LDAP_COMPARE TRUE	06	Compare true	A compare operation returned true.
07	LDAP STRONG AUTH NOT SUPPORTED	07	Strong authentication not supported	The LDAP server does not support strong authentication.
08	LDAP STRONG AUTH REQUIRED	08	Strong authentication required	Strong authentication is required for the operation.
09	LDAP_PARTIAL RESULTS	09	Partial results and referral received	Partial results only returned.
10	LDAP_REFERRAL	0A	Referral returned	Referral returned.
11	LDAP_ADMIN_LIMIT EXCEEDED	0B	Administration limit exceeded	Administration limit exceeded.
12	LDAP UNAVAILABLE CRITICAL EXTENSION	0C	Critical extension not supported	Critical extension is not supported.
13	LDAP CONFIDENTIALITY REQUIRED	0D	Confidentiality is required	Confidentiality is required.
14	LDAP_SASLBIND_IN PROGRESS	0E	SASL bind in progress	An SASL bind is in progress.
16	LDAP_NO_SUCH ATTRIBUTE	10	No such attribute	The attribute type specified does not exist in the entry.
17	LDAP_UNDEFINED_TYPE	11	Undefined attribute type	The attribute type specified is not valid.
18	LDAP INAPPROPRIATE MATCHING	12	Inappropriate matching	Filter type not supported for the specified attribute.
19	LDAP_CONSTRAINT VIOLATION	13	Constraint violation	An attribute value specified violates some constraint (for example, a postal address has too many lines, or a line that is too long).
20	LDAP_TYPE_OR_VALUE EXISTS	14	Type or value exists	An attribute type or attribute value specified already exists in the entry.
21	LDAP_INVALID_SYNTAX	15	Invalid syntax	An attribute value that is not valid was specified.
32	LDAP_NO_SUCH_OBJECT	20	No such object	The specified object does not exist in the directory.
33	LDAP_ALIAS_PROBLEM	21	Alias problem	An alias in the directory points to a nonexistent entry.
34	LDAP_INVALID_DN SYNTAX	22	Invalid DN syntax	A DN that is syntactically not valid was specified.
35	LDAP_IS_LEAF	23	Object is a leaf	The object specified is a leaf.
36	LDAP_ALIAS_DEREF PROBLEM	24	Alias dereferencing problem	A problem was encountered when dereferencing an alias.
48	LDAP_INAPPROPRIATE AUTH	30	Inappropriate authentication	Inappropriate authentication was specified (for example, LDAP_AUTH_SIMPLE was specified and the entry does not have a userPassword attribute).
49	LDAP_INVALID CREDENTIALS	31	Invalid credentials	Invalid credentials were presented (for example, the wrong password).
50	LDAP_INSUFFICIENT ACCESS	32	Insufficient access	The user has insufficient access to perform the operation.
51	LDAP_BUSY	33	DSA is busy	The DSA is busy.
52	LDAP_UNAVAILABLE	34	DSA is unavailable	The DSA is unavailable.
53	LDAP UNWILLING TO PERFORM	35	DSA is unwilling to perform	The DSA is unwilling to perform the operation.
54	LDAP_LOOP_DETECT	36	Loop detected	A loop was detected.
64	LDAP_NAMING VIOLATION	40	Naming violation	A naming violation occurred.
65	LDAP OBJECT CLASS VIOLATION	41	Object class violation	An object class violation occurred (for example, a "required" attribute was missing from the entry).
66	LDAP NOT ALLOWED ON NONLEAF	42	Operation not allowed on nonleaf	The operation is not allowed on a nonleaf object.
67	LDAP_NOT_ALLOWED ON RDN	43	Operation not allowed on RDN	The operation is not allowed on an RDN.
68	LDAP_ALREADY EXISTS	44	Already exists	The entry already exists.
69	LDAP NO OBJECT CLASS MODS	45	Cannot modify object class	Object class modifications are not allowed.
70	LDAP_RESULTS_TOO LARGE	46	Results too large	Results too large.
71	LDAP AFFECTS MULTIPLE DSAS	47	Affects multiple DSAs	Affects multiple DSAs.
80	LDAP_OTHER	50	Unknown error	An unknown error occurred.
81	LDAP_SERVER_DOWN	51	Can't contact LDAP server	The LDAP library cannot contact the LDAP server.
82	LDAP_LOCAL ERROR	52	Local error	Some local error occurred. This is usually a failed memory allocation.
83	LDAP_ENCODING ERROR	53	Encoding error	An error was encountered encoding parameters to send to the LDAP server.
84	LDAP_DECODING ERROR	54	Decoding error	An error was encountered decoding a result from the LDAP server.
85	LDAP_TIMEOUT	55	Timed out	A time limit was exceeded while waiting for a result.
86	LDAP_AUTH UNKNOWN	56	Unknown authentication method	The authentication method specified on a bind operation is not known.
87	LDAP_FILTER ERROR	57	Bad search filter	An invalid filter was supplied to ldap_search (for example, unbalanced parentheses).
88	LDAP_USER CANCELLED	58	User cancelled operation	The user cancelled the operation.
89	LDAP_PARAM ERROR	59	Bad parameter to an LDAP routine	An LDAP routine was called with a bad parameter (for example, a NULL ld pointer, etc.).
90	LDAP_NO_MEMORY	5A	Out of memory	A memory allocation (for example malloc) call failed in an LDAP library routine.
91	LDAP_CONNECT ERROR	5B	Connection error	Connection error.
92	LDAP_NOT SUPPORTED	5C	Not supported	Not supported.
93	LDAP_CONTROL NOT FOUND	5D	Control not found	Control not found.
94	LDAP_NO_RESULTS RETURNED	5E	No results returned	No results returned.
95	LDAP MORE RESULTS TO RETURN	5F	More results to return	More results to return.
96	LDAP_URL_ERR NOTLDAP	60	URL doesn't begin with ldap://	The URL does not begin with ldap://.
97	LDAP_URL_ERR_NODN	61	URL has no DN (required)	The URL does not have a DN (required).
98	LDAP_URL_ERR BADSCOPE	62	URL scope string is invalid	The URL scope string is not valid.
99	LDAP_URL_ERR_MEM	63	Can't allocate memory space	Cannot allocate memory space.
100	LDAP_CLIENT_LOOP	64	Client loop	Client loop.
101	LDAP REFERRAL LIMIT EXCEEDED	65	Referral limit exceeded	Referral limit exceeded.
112	LDAP SSL ALREADY INITIALIZED	70	ldap_ssl_client_init successfully called previously in this process	The ldap_ssl_client_init was successfully called previously in this process.
113	LDAP_SSL_INITIALIZE FAILED	71	Initialization call failed	SSL Initialization call failed. Note: GSKit must be installed and the GSKit libraries must be present.
114	LDAP SSL CLIENT INIT NOT CALLED	72	Must call ldap_ssl_client_init before attempting to use SSL connection	Must call ldap_ssl_client_init before attempting to use SSL connection.
115	LDAP_SSL_PARAM ERROR	73	Invalid SSL parameter previously specified	An SSL parameter that was not valid was previously specified.
116	LDAP_SSL_HANDSHAKE FAILED	74	Failed to connect to SSL server	Failed to connect to SSL server.
117	LDAP SSL_GET_CIPHER FAILED	75	Not used	Deprecated.
118	LDAP_SSL_NOT AVAILABLE	76	SSL library cannot be located	Ensure that GSKit has been installed.
	LDAP SSL KEYRING NOT FOUND	77
	LDAP SSL PASSWORD NOT SPECIFIED	78
128	LDAP_NO_EXPLICIT OWNER	80	No explicit owner found	No explicit owner was found.
129	LDAP_NO_LOCK	81	Could not obtain lock	Client library was not able to lock a required resource.

In addition, the following DNS-related error codes are defined in the ldap.h file:

Table 24. DNS-related return codes

Dec value	Value	Hex value	Detailed description
133	LDAP_DNS_NO_SERVERS	85	No LDAP servers found
134	LDAP_DNS_TRUNCATED	86	Warning: truncated DNS results
135	LDAP_DNS_INVALID_DATA	87	Invalid DNS Data
136	LDAP_DNS_RESOLVE_ERROR	88	Can't resolve system domain or nameserver
137	LDAP_DNS_CONF_FILE_ERROR	89	DNS Configuration file error

The following UTF8-related error codes are defined in the ldap.h file:

Table 25. UTF8-related return codes

Dec value	Value	Hex value	Detailed description
160	LDAP_XLATE_E2BIG	A0	Output buffer overflow
161	LDAP_XLATE_EINVAL	A1	Input buffer truncated
162	LDAP_XLATE_EILSEQ	A2	Unusable input character
163	LDAP_XLATE_NO_ENTRY	A3	No codeset point to map to
	LDAP_REG_FILE_NOT_FOUND	B0
	LDAP_REG_CANNOT_OPEN	B1
	LDAP_REG_ENTRY_NOT_FOUND	B2
	LDAP_CONF_FILE_NOT_OPENED	C0
	LDAP_PLUGIN_NOT_LOADED	C1
	LDAP_PLUGIN_FUNCTION_ NOT_RESOLVED	C2
	LDAP_PLUGIN_NOT_INITIALIZED	C3
	LDAP_PLUGIN_COULD_NOT_BIND	C4
	LDAP_SASL_GSS_NO_SEC_CONTEXT	D0

---

Fonte:http://www-01.ibm.com/support/knowledgecenter/SSVJJU_6.2.0/com.ibm.IBMDS.doc_6.2/admin_gd32.htm%23error1

Ajustes do openam para deploy no jboss

Caso queira instalar o OpenAm no Jboss AS 5.1, existem duas coisas que necessitam de atenção especial:

• Jboss As 5.x usa o Tomcat 6.0.16 e isso afeta a manipulação de cookies.
• Se você instalar o OpenAm no JBss 5.x usando metodo tradicional, "somente o arquivo" e apagar o arquivo openam.war do diretório de deploy, então o Jboss irá fazer o redeploy das aplicações em diferentes diretórios temporários toda vez que reiniciar o servidor e será necessário refazer todas as configurações
• Problemas com o CLassloader

Para resolver o primeiro problema, modifique o run.con (ou run.conf.bat no Windows) passando para oa JVM a opção -Dcom.iplanet.am.cookie.encode=true

Exemplo:

... # Specify options to pass to the Java VM. # if [ "x$JAVA_OPTS" = "x" ]; then    JAVA_OPTS="-Xms128m -Xmx1024m -XX:MaxPermSize=256m -Dorg.jboss.resolver.warning=true -Dsun.rmi.dgc.client.gcInterval=3600000 -Dsun.rmi.dgc.server.gcInterval=3600000 -Dcom.iplanet.am.cookie.encode=true" fi ...

Para o segundo problema, caso você use o metodo tradicional de deploy "arquivo compactado" será necessário fazer o seguinte:

1. Expanda o opwnam.war em um diretório temporário (use o comando jar com as opções xvf), Exemplo, no Linux: 
   Assuma que você tem o openam.war dentro do diretorio /home/teste/deployable-war 
   

   # cd /home/teste # mkdir exploded-openam # cd exploded-openam # jar  xvf /home/teste/deployable-war/openam.war # .... exploding files here ....

2. Então edite o seguinte arquivo: WEB-INF/classes/bootstrap.properties Decomentando a linha "configuration.dir=" e modificando este ponto com o diretório onde você planeja guardas as suasconfigurações, por exemplo, vamos assumir que nos queremos colocar as configurações no diretório /home/teste/openamJboss.
   

   configuration.dir=/home/teste/openamJboss

3. Salve o arquivo e gere o novo arquivo war:

   # jar cvf ../openam.war *

4. Use este arquivo openam.war para  instalar no diretorio do seu JBoss 5.x

Uma segunda opção para resolver o segundo problema, você pode extrair o openam.war em um diretório de deploy depois configurar o OpenAM

1. Va para o diretório de deploy da instancia do JBoss e crie um novo diretório chamado openam.war:

   # mkdir /shared/jboss-5.1.0.GA/server/default/deploy/openam.war

2. Extraia o opemam.war dentro do diretorio

   # cd /shared/jboss-5.1.0.GA/server/default/deploy/openam.war # jar xvf /home/victor/deployable-war/openam.war

3. Configure o OpenAM normalmente, veja o Deploy OpenAM para mais informações de como configurar o OpenAM

UCL Classloader issue

Crie o arquivo WEB-INF/jboss-web.xml  caso a aplição entre em conflitos com os demais jars durante o inicialização do servidor

<!DOCTYPE jboss-web PUBLIC "-//JBoss//DTD Web Application 5.0//EN" "http://www.jboss.org/j2ee/dtd/jboss-web_5_0.dtd"> <jboss-web>   <class-loading java2ClassLoadingCompliance='true'>     <loader-repository>     jbia.loader:loader=opensso     <loader-repository-config>java2ParentDelegaton=true</loader-repository-config>     </loader-repository>   </class-loading> </jboss-web>

Fonte: https://wikis.forgerock.org/confluence/display/openam/Considerations+when+deploying+on+JBoss+AS+5.1