OVD 11g Ldapbind Times Out When Using Samaccountname With The UPNBind Plugin: LDAP Error 1 : LDAP response read timed out (Doc ID 1317970.1)

Last updated on MARCH 08, 2017

Applies to:

Oracle Virtual Directory - Version 11.1.1.4.0 and later
Information in this document applies to any platform.

Symptoms

Oracle Virtual Directory (OVD) 11g, e.g., Patchset 3 (PS3) 11.1.1.4.

Ldapbind times out when using the samaccountname, uid, or userprincipalname for username with the UPNBind Plug-in:

ldap_bind: additional info: LDAP Error 1 : LDAP response read timed out, timeout used:15000ms.


Ldapbind works when using the DN, but it is very slow returning a successful response when the plugin is active.


The parent domain is in AD servers, for example, AD3 and AD4, where the users reside. DC1 and DC2 AD servers are not where the users reside; those have child domains only.

The ldapbinds directly to AD3 or 4 with both the username formats (domain\username and username@domain) work fine, e.g.:

ldapbind -h AD3 -p 389 -D mydomain\myuser -q
Please enter bind password:
bind successful

ldapbind -h AD3 -p 389 -D myuser@mydomain.com -q
Please enter bind password:
bind successful


And to OVD using the DN works, but it takes significantly longer to return a response:

ldapbind -h ovdhost -p 6501 -D "cn=myuser,ou=myou,dc=mydomain,dc=com" -q
Please enter bind password:
bind successful




Tried removing the userprincipalname attribute from the plug-in (to account for any suffixes that lightweight AD, i.e. ADAM, may allow whereas regular AD does not), but the same behavior continues.

Tried adding the plugin parameter AdapterName and set its value to the Domain that points to the same working AD servers above, but same behavior continues.

If adding namespace DC=mydomain,DC=com to the UPNBind plug in, the response changes to Invalid Credentials.




Diagnostic.log shows:

[2011-03-31T12:40:25.391-04:00] [octetstring] [WARNING] [OVD-40066] [com.octetstring.vde.backend.jndi.ConnectionHandle] [tid: 46] [ecid: 0000IwCmK6FD^aOayhvX6G1D^ugR00007g,0] Remote Server Failure:DC1.mydomain.com:389.[[
javax.naming.NamingException: LDAP response read timed out, timeout used:15000ms.; remaining name 'DC=mydomain,DC=com'
at com.sun.jndi.ldap.Connection.readReply(Connection.java:448)
at com.sun.jndi.ldap.LdapClient.getSearchReply(LdapClient.java:611)
at com.sun.jndi.ldap.LdapClient.search(LdapClient.java:534)
at com.sun.jndi.ldap.LdapCtx.doSearch(LdapCtx.java:1962)
at com.sun.jndi.ldap.LdapCtx.searchAux(LdapCtx.java:1824)
at com.sun.jndi.ldap.LdapCtx.c_search(LdapCtx.java:1749)
at com.sun.jndi.toolkit.ctx.ComponentDirContext.p_search(ComponentDirContext.java:368)
at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(PartialCompositeDirContext.java:338)
at javax.naming.directory.InitialDirContext.search(InitialDirContext.java:257)
at com.octetstring.vde.backend.jndi.ConnectionHandle.search(ConnectionHandle.java:271)
at com.octetstring.vde.backend.jndi.JNDIEntrySet.initialize(JNDIEntrySet.java:221)
at com.octetstring.vde.backend.jndi.BackendJNDI.get(BackendJNDI.java:726)
at com.octetstring.vde.chain.Chain.nextGet(Chain.java:297)
at com.octetstring.vde.chain.plugins.performance.MonitorPerformance.monitorSearch(MonitorPerformance.java:503)
at com.octetstring.vde.chain.plugins.performance.MonitorPerformance.get(MonitorPerformance.java:418)
at com.octetstring.vde.chain.Chain.nextGet(Chain.java:308)
at com.octetstring.vde.chain.PluginChain.runGet(PluginChain.java:234)
at com.octetstring.vde.chain.PluginManager.runGet(PluginManager.java:489)
at com.octetstring.vde.chain.PluginManager.runGet(PluginManager.java:427)
at com.octetstring.vde.backend.AdapterServiceInterface.getByAdapter(AdapterServiceInterface.java:672)
at com.octetstring.vde.backend.AdapterServiceInterface.get(AdapterServiceInterface.java:533)
at com.octetstring.vde.chain.plugins.upnbind.UPNBindPlugin.handleNonDNBind(UPNBindPlugin.java:189)
at com.octetstring.vde.chain.plugins.upnbind.UPNBindPlugin.bind(UPNBindPlugin.java:160)
at com.octetstring.vde.chain.Chain.nextBind(Chain.java:233)
at com.octetstring.vde.chain.plugins.performance.MonitorPerformance.bind(MonitorPerformance.java:333)
at com.octetstring.vde.chain.Chain.nextBind(Chain.java:233)
at com.octetstring.vde.chain.plugins.AclCheckerPlugin.bind(AclCheckerPlugin.java:239)
at com.octetstring.vde.chain.Chain.nextBind(Chain.java:233)
at com.octetstring.vde.chain.PluginChain.runBind(PluginChain.java:201)
at com.octetstring.vde.chain.PluginManager.runBind(PluginManager.java:376)
at com.octetstring.vde.chain.PluginManager.runBind(PluginManager.java:341)
at com.octetstring.vde.chain.GlobalServicesInterface.runBind(GlobalServicesInterface.java:188)
at com.octetstring.vde.operation.BindOperation.run(BindOperation.java:232)
at com.octetstring.vde.operation.AbstractOperation.perform(AbstractOperation.java:122)
at com.octetstring.vde.MessageHandler.doBind(MessageHandler.java:345)
at com.octetstring.vde.MessageHandler.answerRequest(MessageHandler.java:185)
at com.octetstring.vde.OperationHandler.run(OperationHandler.java:118)

]]
[2011-03-31T12:40:25.392-04:00] [octetstring] [ERROR] [OVD-60060] [com.octetstring.vde.operation.BindOperation] [tid: 46] [ecid: 0000IwCmK6FD^aOayhvX6G1D^ugR00007g,0] An error occurred.[[
com.octetstring.vde.util.DirectoryException: LDAP Error 1 : LDAP response read timed out, timeout used:15000ms.

at com.octetstring.vde.backend.jndi.ConnectionHandle.handleError(ConnectionHandle.java:449)
at com.octetstring.vde.backend.jndi.ConnectionHandle.search(ConnectionHandle.java:290)
at com.octetstring.vde.backend.jndi.JNDIEntrySet.initialize(JNDIEntrySet.java:221)
at com.octetstring.vde.backend.jndi.BackendJNDI.get(BackendJNDI.java:726)
at com.octetstring.vde.chain.Chain.nextGet(Chain.java:297)
at com.octetstring.vde.chain.plugins.performance.MonitorPerformance.monitorSearch(MonitorPerformance.java:503)
at com.octetstring.vde.chain.plugins.performance.MonitorPerformance.get(MonitorPerformance.java:418)
at com.octetstring.vde.chain.Chain.nextGet(Chain.java:308)
at com.octetstring.vde.chain.PluginChain.runGet(PluginChain.java:234)
at com.octetstring.vde.chain.PluginManager.runGet(PluginManager.java:489)
at com.octetstring.vde.chain.PluginManager.runGet(PluginManager.java:427)
at com.octetstring.vde.backend.AdapterServiceInterface.getByAdapter(AdapterServiceInterface.java:672)
at com.octetstring.vde.backend.AdapterServiceInterface.get(AdapterServiceInterface.java:533)
at com.octetstring.vde.chain.plugins.upnbind.UPNBindPlugin.handleNonDNBind(UPNBindPlugin.java:189)
at com.octetstring.vde.chain.plugins.upnbind.UPNBindPlugin.bind(UPNBindPlugin.java:160)
at com.octetstring.vde.chain.Chain.nextBind(Chain.java:233)
at com.octetstring.vde.chain.plugins.performance.MonitorPerformance.bind(MonitorPerformance.java:333)
at com.octetstring.vde.chain.Chain.nextBind(Chain.java:233)
at com.octetstring.vde.chain.plugins.AclCheckerPlugin.bind(AclCheckerPlugin.java:239)
at com.octetstring.vde.chain.Chain.nextBind(Chain.java:233)
at com.octetstring.vde.chain.PluginChain.runBind(PluginChain.java:201)
at com.octetstring.vde.chain.PluginManager.runBind(PluginManager.java:376)
at com.octetstring.vde.chain.PluginManager.runBind(PluginManager.java:341)
at com.octetstring.vde.chain.GlobalServicesInterface.runBind(GlobalServicesInterface.java:188)
at com.octetstring.vde.operation.BindOperation.run(BindOperation.java:232)
at com.octetstring.vde.operation.AbstractOperation.perform(AbstractOperation.java:122)
at com.octetstring.vde.MessageHandler.doBind(MessageHandler.java:345)
at com.octetstring.vde.MessageHandler.answerRequest(MessageHandler.java:185)
at com.octetstring.vde.OperationHandler.run(OperationHandler.java:118)
Caused by: javax.naming.NamingException: LDAP response read timed out, timeout used:15000ms.; remaining name 'DC=mydomain,DC=com'
at com.sun.jndi.ldap.Connection.readReply(Connection.java:448)
at com.sun.jndi.ldap.LdapClient.getSearchReply(LdapClient.java:611)
at com.sun.jndi.ldap.LdapClient.search(LdapClient.java:534)
at com.sun.jndi.ldap.LdapCtx.doSearch(LdapCtx.java:1962)
at com.sun.jndi.ldap.LdapCtx.searchAux(LdapCtx.java:1824)
at com.sun.jndi.ldap.LdapCtx.c_search(LdapCtx.java:1749)
at com.sun.jndi.toolkit.ctx.ComponentDirContext.p_search(ComponentDirContext.java:368)
at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(PartialCompositeDirContext.java:338)
at javax.naming.directory.InitialDirContext.search(InitialDirContext.java:257)
at com.octetstring.vde.backend.jndi.ConnectionHandle.search(ConnectionHandle.java:271)
... 27 more

]]

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms