My Oracle Support Banner

OAM Generated Query To Deactive User Workflow [Includes (!(obwfinstanceid=<STRING>)) Filter] Taking Excessive Time To Execute In OID 10g (Doc ID 1080545.1)

Last updated on OCTOBER 18, 2019

Applies to:

Oracle Internet Directory - Version 10.1.2 to 10.1.4 [Release 10gR2 to 10gR3]
Information in this document applies to any platform.


Oracle Access Manager (OAM) integrated with Oracle Internet Directory (OID) 10g, i.e.,, or 11g.

OID has been well tuned as per Document 458703.1 and Document 558040.1 in memory filters have been applied.

Experiencing performance / slowness problems with OAM generated searches to deactive user workflow.

Upon further examination of OID debugged logs, searches including a filter of (!(obwfinstanceid=<STRING>)) are excessively slow.

The problem can be reproduce from command line ldapsearch.  For example, the following search:

ldapsearch -h <OID_HOSTNAME> -p <OID_PORT> -D "cn=orcladmin" -w <PASSWORD> -b "obcontainerId=workflowInstances,o=Oblix,dc=<COMPANY>,dc=com" -s one
"(&(objectclass=OblixWorkflowInstance)(&(|(obwfstatus=2)(obwfstatus=3)(obwfstatus=4)(obwfstatus=5)(obwfstatus=6)(obwfstatus=7)(obwfstatus=10)(obwfstatus=9))(obtargetdn=*cn=<WORK_FLOW_ID>@<DOMAIN>.com,cn=users,dc=<COMPANY>,dc=com)(!(obwfinstanceid=<STRING>))))" dn

Results in the following OID debugged log (level 2097153) excerpt:

2010/02/22:15:00:10 * ServerWorker (REG):8
ConnID:276 * mesgID:2 * OpID:1 * OpName:search
ConnIP:<IP_ADDRESS> ConnDN: cn=orcladmin
Orig Filter=(&(objectclass=oblixworkflowinstance)(&(|(obwfstatus=2)(obwfstatus=3)(obwfstatus=4)(obwfstatus=5)(obwfstatus=6)(obwfstatus=7)(obwfstatus=10)(obwfstatus=9))(obtargetdn=*cn=<WORK_FLOW_ID>@<DOMAIN>.com,cn=users,dc=<COMPANY>,dc=com)(!(obwfinstanceid=<STRING>))))
New filter=(&(|(obwfstatus=2)(obwfstatus=3)(obwfstatus=4)(obwfstatus=5)(obwfstatus=6)(obwfstatus=7)(obwfstatus=10)(obwfstatus=9))(obtargetdn=*cn=<WORK_FLOW_ID>@<DOMAIN>.com,cn=users,dc=<COMPANY>,dc=com)(!(obwfinstanceid=<STRING>)))
15:00:15 *
BASEDN = "obcontainerId=workflowInstances,o=Oblix,dc=<COMPANY>,"
SCOPE = "1"
FILTER = "(&(objectclass=oblixworkflowinstance)(&(|(obwfstatus=2)(obwfstatus=3)(obwfstatus=4)(obwfstatus=5)(o"
#ATTRS = "1"

15:00:15 * EVENT "PRVGRP CLS" time : 15 micro sec
15:00:15 * EVENT "ACPGRP CLS" time : 11 micro sec
15:00:15 * EVENT "DB Fetch " time : 5635616 micro sec                  ---> ~5.6 secs
15:00:15 * EVENT "Ber flush " time : 45 micro sec
15:00:15 * TOTAL "Operation" time : 5637990 micro sec
15:00:15 * INFO : gsleswrASndResult2 RESULT = 0 nentries=0

The same query without !(obwfinstanceid=<STRING>) filter runs without delays.

For the above search, adding (!(obwfinstanceid=<STRING>)) as an in memory filter in OID resolves the problem, but that is not an option because this query is internally generated by OAM for each deactivate user request, hence obwfinstanceid value is different for each request.


To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!

In this Document

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.