OID - Issues With Large Search Filters (Doc ID 1074280.1)

Last updated on SEPTEMBER 14, 2016

Applies to:

Oracle Internet Directory - Version 10.1.2 and later
Information in this document applies to any platform.

Symptoms

Issue 1:
LDAP Error 53 - Function not implemented is received while searching LDAP, if the search has more than 256 Attribute Value Assertion elements (AVAs) in the search filter.
eg.
$ORACLE_HOME/bin/ldapsearch -D cn=orcladmin q -s sub -b "cn=users,dc=au,dc=oracle,dc=com" "(| (uid=001) (uid=002)......(uid=257))"

ldap_search: DSA is unwilling to perform
ldap_search: additional info: Function Not Implemented

Issue 2:
There is also a potential issue with the size of the filter string (> 12k) rather than the number of AVA elements.
See: <Note 739641.1> OIDLDAPD Server Process Repeatedly Crashing
In this case OID is crashing as reported in the above reference.

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms