ORA-20001 The LDAP APPS DN ldap password has expired when creating oracle accounts in EBS.

Tip of the week
Issue: ora-20001 The LDAP APPS DN ldap wrapper error message when trying to create oracle accounts in EBS R12.1.3 integrated with IDM 11g.

Solution: you can reset the password using the following command. But you need to get the DN and APPS_DN password.

1. To get DN, run the following from the apps user in EBS node

SQL> select fnd_preference.get(‘#INTERNAL’, ‘LDAP_SYNCH’,’USERNAME’) Apps_Instance_OID_Account from dual;
APPS_INSTANCE_OID_ACCOUNT
——————————————————————————–
orclApplicationCommonName=”Instance”,cn=”EBusiness”,cn=Products,cn=OracleContext,dc=company,dc=com

2. Get current password for appsDN user:

SQL> select fnd_preference.eget(‘#INTERNAL’, ‘LDAP_SYNCH’,’EPWD’,’LDAP_PWD’) Apps_Password from dual;
APPS_PASSWORD
——————————————————————————–
current_password

3. Run the following command.

$ORACLE_HOME/bin/ldapmodify -h <oid_host> -p <oid_port> -D cn=orcladmin -w <passwd> -v <<EOF
dn: orclapplicationcommonname=prd1, cn=ebusiness,cn=products,cn=oraclecontext,cn=ddi,cn=net
changetype: modify
replace: userpassword
userpassword: <existing_APPS_DN_password>
EOF
4. Redo the “ldapbind” test and ensure that it is successful.
PS: You can do this while all the services are up and running.
Reference docs: How To Change AppsDN Password For E-Business Suite In OID 11g (Doc ID 1902514.1)