DIP DirSync Method Synchronization Spins When Synchronizing Active Directory Group With All Members Removed (Doc ID 1267097.1)

Last updated on AUGUST 30, 2023

Applies to:

Symptoms

DIP DirSync method synchronization spins when attempting to synchronize a group from Active Directory (AD) that has had all it's members removed.

The synchronization profile trace log file in $ORACLE_HOME/shows lines similar to below, repeated indefinitely until the DIP sync java process is killed.

Stopping the odisrv synchronization process using oidctl... stop does not successfully stop the DIP java process. The Java process has to be killed manually.

The problem only occurs with groups that have been previously synchronized to OID with members.

The problem does not occur with the following events:
a) New group is added in AD with no members.
b) New group with no members that is already synchronized has any attribute other than member updated e.g. Description attribute updated in AD

Changes

A synchronized group that previously had members in AD has had all members removed.

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.