My Oracle Support Banner

Troubleshooting LDAP Issues Support Pattern (Doc ID 1077534.1)

Last updated on JULY 20, 2020

Applies to:

Oracle WebLogic Server - Version 6.1 and later
Information in this document applies to any platform.




Purpose

This document is a support pattern describing how to troubleshoot and resolve WebLogic Server issues related to LDAP, role mapping, or client authentication.

Problem Description

The following are six common symptoms:

  1. Authentication provider not able to connect to LDAP.
  2. User cannot authenticate.
  3. User can authenticate but the authentication provider cannot find to which group this user belongs.
  4. User can authenticate but does not have the required role.
  5. Server cannot start due to Embedded LDAP locking problems.
  6. Client authentication to LDAP is slow.

Problem Troubleshooting

Please note that not all of the following items would need to be done. Some issues can be solved by only following a few of the items.

Troubleshooting Steps

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Purpose
 Problem Description
 Problem Troubleshooting
Troubleshooting Steps
 What is LDAP and How is it Used by WLS?
 Common LDAP Servers Used in WLS
 Troubleshoot Connection Problems
 Troubleshoot User Authentication Failure
 Troubleshoot Group Membership Problems
 Troubleshoot Role Mapping Failure
 What is the Control Flag in an Authentication Provider?
 Performance Issues
 GroupMembershipSearching
 MaxGroupMembershipSearchLevel
 Embedded LDAP Issues
 Debug Flags
 Tools
 LDAP Browser
 Other LDAP Tools
 ldapsearch Command
 Examples of Authentication Providers
 IPlanet Authenticator Example
 Active Directory Authenticator Example
 OpenLDAP Authenticator Example
 Need further help?

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.