My Oracle Support Banner

Unable to Access OID after Loading Large LDIF file "Unable To Contact LDAP Server" (Doc ID 1114662.1)

Last updated on AUGUST 30, 2023

Applies to:

Oracle Internet Directory - Version 10.1.2 and later
Information in this document applies to any platform.

Symptoms

Unable to access OID after loading large LDIF file.

Ldapbind -h <OID_HOSTNAME> -p <PORT>  returns error:  Unable To Contact LDAP Server


Changes

In an effort to limit users access to Resource Access Descriptors a 3rd party vendor had created a script to create a RAD under cn=Extended Propertis,cn=OracleContext,,<REALM> with the following ACIs.

dn: orclownerguid=<GUID>,cn=Extended Properties,cn=OracleContext,dc=<COMPANY>,dc=com
objectclass: top
objectclass: orclReferenceObject
orclaci: access to entry by group="cn=OracleResourceAccessGroup,cn=Groups,cn=OracleContext,dc=<COMPANY>,dc=com"
(browse,noadd,nodelete, noproxy) by group="cn=oraclemanageextendedpreferences,cn=Groups,cn=OracleContext,dc=<COMPANY>,dc=com"
(browse,add,delete, noproxy) by * (none)
orclaci: access to attr=(*) by group="cn=OracleResourceAccessGroup,cn=Groups,cn=OracleContext,dc=<COMPANY>,dc=com"
(search,read,nowrite,nocompare) by group="cn=oraclemanageextendedpreferences,cn=Groups,cn=OracleContext,dc=<COMPANY>,dc=com"
(search,read,write,compare) by * (none)
orclownerguid: <GUID>

dn: cn=Resource Access Descriptor, orclownerguid=<GUID>,cn=Extended Properties,cn=OracleContext,dc=<COMPANY>,dc=com
orclownerguid: <GUID>
objectclass: top
objectclass: orclcontainer
objectclass: orclauxiliaryguid
cn: Resource Access Descriptor

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Symptoms
Changes
Cause
Solution
References


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.