OVD 11g ForkJoin Plug-in Executes Other Plug-ins Configured in Join View Adapter Twice for an LDAP Search with Base Scope (Doc ID 1293754.1)

Last updated on FEBRUARY 20, 2019

Applies to:

Symptoms

Configure the ForkJoin plug-in & Virtual Attribute plug-in in the JoinView
Adapter. Due to a bug in ForkJoin plug-in implementation when handling LDAP
search with base scope, ForkJoin plug-in invokes the Virtual Attribute
plug-in twice for the same Entry in case of base scope. This results in
Virtual Attribute plug-in adding the virtual attribute value twice to the
Entry.

Example: If virtualAttribute plugin is configured for orclprincipalname attribute and a search like the following is attempted, you'll see duplicate values for the orclprincipalname attribute.

$ ldapsearch -p 1389 -D"cn=orcladmin" -w xxxxx -b "uid=<UID>,ou=people,dc=<COMPANY>,dc=com" -s base "objectclass=*"
uid=<UID>,ou=people,dc=<COMPANY>,dc=com
employeenumber=<EMP #>
mail=<USER EMAIL>
objectclass=oblixorgperson
objectclass=top
objectclass=person
objectclass=organizationalPerson
objectclass=inetOrgPerson
objectclass=orclUser
objectclass=orclUserV2
orclUserPrincipalName=<USERPRINCIPAL NAME>
orclUserPrincipalName=<USERPRINCIPAL NAME>

-snipit-


However, a scope of SUB will return the proper values:
ldapsearch -p 1389 -Z -b "ou=people,dc=<COMPANY>,dc=com"
-D "cn=orcladmin" -w - uid=<UID> orcluserprincipalname
Enter bind password:
version: 1
dn: uid=<UID>,ou=people,dc=<COMPANY>,dc=com
orclUserPrincipalName: <USERPRINCIPAL NAME>

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.