OID - Issues With Large Search Filters (Doc ID 1074280.1)

Last updated on AUGUST 30, 2023

Applies to:

Symptoms

Issue 1:
LDAP Error 53 - Function not implemented is received while searching LDAP, if the search has more than 256 Attribute Value Assertion elements (AVAs) in the search filter.
eg.
$ORACLE_HOME/bin/ldapsearch -D cn=orcladmin q -s sub -b "cn=users,dc=COMPANY,dc=com" "(| (uid=001) (uid=002)......(uid=257))"

ldap_search: DSA is unwilling to perform
ldap_search: additional info: Function Not Implemented

Issue 2:
There is also a potential issue with the size of the filter string (> 12k) rather than the number of AVA elements.
See: <Note 739641.1> OIDLDAPD Server Process Repeatedly Crashing
In this case OID is crashing as reported in the above reference.

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.