It should be the embedded ldap..
WebLogic Server includes an embedded LDAP server that acts as the default security provider data store for the Default Authention. That weblogic user which is used while managing the WLS services in EBS should be stored in that embedded ldap and probably that's why you encountered that problem.. Good for you, as you solved it.
Here is a reference for COBRA ->
https://docs.oracle.com/cd/E18727_01/doc.121/e13540/T237048T593174.htm