Search From an Application Against OVD 11g Fails And Does Not Return Certain LDAP Controls (Doc ID 1333000.1)

Last updated on MARCH 08, 2017

Applies to:

Oracle Virtual Directory - Version 11.1.1.1.0 and later
Information in this document applies to any platform.

Symptoms

Oracle Virtual Directory (OVD) 11g, i.e, 11.1.1.3, integrated with Oracle Internet Directory (OID).

An application, e.g. CISCO UM, connects to OID via OVD to search users and pull attributes.  During the search it looks for certain LDAP controls.  When pointing the application to OVD connecting to OID via OID adapter template, the search fails as it does not find those LDAP controls.

Executing the search against the OVD Join Adapter always fails.

Executing the search against the OID Adapter does not work either.

Executing the search directly against OID and bypassing OVD always works.

Following are the ldap controls that the application is looking for:

Control=2.16.840.1.113730.3.4.2              
Control=2.16.840.1.113894.1.8.1              
Control=2.16.840.1.113894.1.8.2              
Control=2.16.840.1.113894.1.8.3              
Control=2.16.840.1.113894.1.8.4              
Control=2.16.840.1.113894.1.8.5              
Control=2.16.840.1.113894.1.8.6              
Control=2.16.840.1.113894.1.8.7              
Control=1.2.840.113556.1.4.473              
Control=1.2.840.113556.1.4.319              
Control=2.16.840.1.113894.1.8.14            
Control=2.16.840.1.113894.1.8.16            
Control=2.16.840.1.113894.1.8.23            
Control=2.16.840.1.113894.1.8.29


The application's log shows an exception, for example:

...<snip>...

2011-06-02 12:53:46,782 DEBUG [DSLDAPSyncImpl(c3c426bf-93c1-fa6c-cd34-467401ba8513)] ldapplugable.DSLDAPSyncImpl (DSLDAPSyncImpl.java:877) - LDAPSync(c3c426bf-93c1-fa6c-cd34-467401ba8513)[makeConnection] Successful LDAP connection to : ldap://<OVD IPaddress>:6501

2011-06-02 12:53:46,787 DEBUG [DSLDAPSyncImpl(c3c426bf-93c1-fa6c-cd34-467401ba8513)] ldapplugable.DSLDAPSyncImpl (DSLDAPSyncImpl.java:705) - LDAPSync(c3c426bf-93c1-fa6c-cd34-467401ba8513)[checkLDAP] Getting supportedcontrol from ctx

2011-06-02 12:53:46,788 ERROR [DSLDAPSyncImpl(c3c426bf-93c1-fa6c-cd34-467401ba8513)] ldapplugable.DSLDAPSyncImpl (DSLDAPSyncImpl.java:801) - LDAPSync(c3c426bf-93c1-fa6c-cd34-467401ba8513)[checkLDAP] Failed to check LDAP - java.lang.NullPointerException

2011-06-02 12:53:46,788 ERROR [DSLDAPSyncImpl(c3c426bf-93c1-fa6c-cd34-467401ba8513)] ldapplugable.DSLDAPSyncImpl (DSLDAPSyncImpl.java:802) - LDAPSync(c3c426bf-93c1-fa6c-cd34-467401ba8513)[checkLDAP] java.lang.NullPointerException

MESSAGE null

com.cisco.ccm.dir.dirsync.ldapplugable.DSLDAPSyncImpl.checkLDAP(DSLDAPSyncImpl.java:708)

com.cisco.ccm.dir.dirsync.ldapplugable.DSLDAPSyncImpl.run(DSLDAPSyncImpl.java:304)

...<snip>...



The OVD diagnostic.log may show:

...<snip>....

[2011-06-02T12:53:46.410-04:00] [octetstring] [TRACE:32] [] [com.octetstring.vde.router.RoutingRule] [tid: 12631] [ecid: 0000J1HHaScC^qHpIsx0if1DtMmR00001T,0] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: dump] Rule[OID1] checking binding for adapter#OID1
[2011-06-02T12:53:46.410-04:00] [octetstring] [TRACE] [] [com.octetstring.vde.router.RoutingRule] [tid: 12631] [ecid: 0000J1HHaScC^qHpIsx0if1DtMmR00001T,0] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: debug] Rule[OID1] dn: cn=myuser,cn=Users,dc=mycompany,dc=com MAPPED TO: cn=myuser,cn=Users,dc=mycompany,dc=com
[2011-06-02T12:53:46.415-04:00] [octetstring] [TRACE] [] [com.octetstring.vde.operation.BindOperation] [tid: 12631] [ecid: 0000J1HHaScC^qHpIsx0if1DtMmR00001T,0] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: debug] BIND: Success [cn=myuser,cn=Users,dc=mycompany,dc=com/<IP Address>]
[2011-06-02T12:53:46.417-04:00] [octetstring] [TRACE] [] [com.octetstring.vde.MessageHandler] [tid: 12632] [ecid: 0000J1HHaSlC^qHpIsx0if1DtMmR00001U,0] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: debug] Request Dump: { messageID 2, protocolOp searchRequest: { baseObject ''H, scope 0, derefAliases 3, sizeLimit 0, timeLimit 0, typesOnly FALSE, filter present: '6F626A656374436C617373'H, attributes { '737570706F72746564636F6E74726F6C'H, '68696768657374436F6D6D697474656455534E'H, '6473536572766963654E616D65'H, '6368616E67654C6F67'H } } }
[2011-06-02T12:53:46.418-04:00] [octetstring] [TRACE] [OVD-00028] [com.octetstring.vde.operation.SearchOperation] [tid: 12632] [ecid: 0000J1HHaSlC^qHpIsx0if1DtMmR00001U,0] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: debug] [arg: supportedcontrol] Value : "supportedcontrol"
[2011-06-02T12:53:46.418-04:00] [octetstring] [TRACE] [OVD-00028] [com.octetstring.vde.operation.SearchOperation] [tid: 12632] [ecid: 0000J1HHaSlC^qHpIsx0if1DtMmR00001U,0] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: debug] [arg: highestCommittedUSN] Value : "highestCommittedUSN"
[2011-06-02T12:53:46.418-04:00] [octetstring] [TRACE] [OVD-00028] [com.octetstring.vde.operation.SearchOperation] [tid: 12632] [ecid: 0000J1HHaSlC^qHpIsx0if1DtMmR00001U,0] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: debug] [arg: dsServiceName] Value : "dsServiceName"
[2011-06-02T12:53:46.418-04:00] [octetstring] [TRACE] [OVD-00028] [com.octetstring.vde.operation.SearchOperation] [tid: 12632] [ecid: 0000J1HHaSlC^qHpIsx0if1DtMmR00001U,0] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: debug] [arg: changeLog] Value : "changeLog"
[2011-06-02T12:53:46.418-04:00] [octetstring] [TRACE] [] [com.octetstring.vde.chain.PluginManager] [tid: 12632] [ecid: 0000J1HHaSlC^qHpIsx0if1DtMmR00001U,0] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: debug] runGet has all attribs : false
[2011-06-02T12:53:46.419-04:00] [octetstring] [TRACE] [OVD-00900] [com.octetstring.vde.view.ViewHandler] [tid: 12632] [ecid: 0000J1HHaSlC^qHpIsx0if1DtMmR00001U,0] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: debug] [arg: <IP Address>] [arg: cn=myuser,cn=Users,dc=mycompany,dc=com] Selected Default View for IP/DN: <IP Address>/cn=myuser,cn=Users,dc=mycompany,dc=com.
[2011-06-02T12:53:46.419-04:00] [octetstring] [TRACE] [] [com.octetstring.vde.router.RoutingHandler] [tid: 12632] [ecid: 0000J1HHaSlC^qHpIsx0if1DtMmR00001U,0] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: debug] REQUEST dn= suffix=dc=my-dc,dc=org
[2011-06-02T12:53:46.419-04:00] [octetstring] [TRACE] [] [com.octetstring.vde.router.RoutingHandler] [tid: 12632] [ecid: 0000J1HHaSlC^qHpIsx0if1DtMmR00001U,0] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: debug] REQUEST dn= suffix=dc=my-dc2,dc=com
[2011-06-02T12:53:46.419-04:00] [octetstring] [TRACE] [] [com.octetstring.vde.router.RoutingHandler] [tid: 12632] [ecid: 0000J1HHaSlC^qHpIsx0if1DtMmR00001U,0] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: debug] REQUEST dn= suffix=dc=cityhall,dc=ad
[2011-06-02T12:53:46.420-04:00] [octetstring] [TRACE] [] [com.octetstring.vde.router.RoutingHandler] [tid: 12632] [ecid: 0000J1HHaSlC^qHpIsx0if1DtMmR00001U,0] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: debug] REQUEST dn= suffix=dc=my-dc2,dc=join
[2011-06-02T12:53:46.420-04:00] [octetstring] [TRACE] [] [com.octetstring.vde.router.RoutingHandler] [tid: 12632] [ecid: 0000J1HHaSlC^qHpIsx0if1DtMmR00001U,0] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: debug] REQUEST dn= suffix=
[2011-06-02T12:53:46.420-04:00] [octetstring] [TRACE] [] [com.octetstring.vde.router.RoutingHandler] [tid: 12632] [ecid: 0000J1HHaSlC^qHpIsx0if1DtMmR00001U,0] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: debug] SELECT dn= suffix=
[2011-06-02T12:53:46.420-04:00] [octetstring] [TRACE] [] [com.octetstring.vde.router.RoutingHandler] [tid: 12632] [ecid: 0000J1HHaSlC^qHpIsx0if1DtMmR00001U,0] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: debug] Selected backend for:(Adapter#_OCTETSTRING_ROOT)
[2011-06-02T12:53:46.420-04:00] [octetstring] [TRACE] [] [com.octetstring.vde.router.RoutingHandler] [tid: 12632] [ecid: 0000J1HHaSlC^qHpIsx0if1DtMmR00001U,0] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: debug] REQUEST dn= suffix=cn=Schema
[2011-06-02T12:53:46.421-04:00] [octetstring] [TRACE] [] [com.octetstring.vde.router.RoutingHandler] [tid: 12632] [ecid: 0000J1HHaSlC^qHpIsx0if1DtMmR00001U,0] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: debug] Routing selected by filter for: Adapter#_OCTETSTRING_ROOT
[2011-06-02T12:53:46.421-04:00] [octetstring] [TRACE] [] [com.octetstring.vde.chain.ChainVector] [tid: 12632] [ecid: 0000J1HHaSlC^qHpIsx0if1DtMmR00001U,0] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: debug] setting backend com.octetstring.vde.backend.BackendRoot@2321b59a
[2011-06-02T12:53:46.421-04:00] [octetstring] [TRACE] [] [com.octetstring.vde.chain.PluginManager] [tid: 12632] [ecid: 0000J1HHaSlC^qHpIsx0if1DtMmR00001U,0] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: debug] runGet has all attribs : false
[2011-06-02T12:53:46.421-04:00] [octetstring] [TRACE] [] [com.octetstring.vde.acl.ACLChecker] [tid: 12632] [ecid: 0000J1HHaSlC^qHpIsx0if1DtMmR00001U,0] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: debug] allow-b-null--cn=myuser,cn=Users,dc=mycompany,dc=com-
[2011-06-02T12:53:46.421-04:00] [octetstring] [TRACE] [] [com.octetstring.vde.acl.ACLChecker] [tid: 12632] [ecid: 0000J1HHaSlC^qHpIsx0if1DtMmR00001U,0] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: debug] allow-t-null--cn=myuser,cn=Users,dc=mycompany,dc=com-
[2011-06-02T12:53:46.422-04:00] [octetstring] [TRACE] [] [com.octetstring.vde.acl.ACLChecker] [tid: 12632] [ecid: 0000J1HHaSlC^qHpIsx0if1DtMmR00001U,0] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: debug] allow-s-objectClass--cn=myuser,cn=Users,dc=mycompany,dc=com-
[2011-06-02T12:53:46.425-04:00] [octetstring] [TRACE] [OVD-00900] [com.octetstring.vde.view.ViewHandler] [tid: 29925] [ecid: 0000J1H63emC^qHpIsx0if1DtMmR00000m,0] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: debug] [arg: <IP Address>] [arg: cn=myuser,cn=Users,dc=mycompany,dc=com] Selected Default View for IP/DN: <IP Address>/cn=myuser,cn=Users,dc=mycompany,dc=com.
[2011-06-02T12:53:46.426-04:00] [octetstring] [TRACE] [OVD-00008] [com.octetstring.vde.router.RoutingHandler] [tid: 29925] [ecid: 0000J1H63emC^qHpIsx0if1DtMmR00000m,0] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: debug] [arg: OID1] [arg: 50] [arg: dc=my-dc2,dc=com] Bind: Selected (Adapter#OID1 [Priority : 50]) backend for: dc=my-dc2,dc=com.
[2011-06-02T12:53:46.427-04:00] [octetstring] [TRACE] [] [com.octetstring.vde.DoSManager] [tid: 29925] [ecid: 0000J1H63emC^qHpIsx0if1DtMmR00000m,0] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: debug] UnBind: cn=myuser,cn=Users,dc=mycompany,dc=com/<IP Address>.
[2011-06-02T12:53:50.266-04:00] [octetstring] [TRACE] [OVD-00900] [com.octetstring.vde.view.ViewHandler] [tid: 29925] [ecid: 0000J1H63emC^qHpIsx0if1DtMmR00000m,0] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: debug] [arg: <IP Address>] [arg: ] Selected Default View for IP/DN: <IP Address>/.
[2011-06-02T12:53:50.267-04:00] [octetstring] [TRACE] [OVD-00008] [com.octetstring.vde.router.RoutingHandler] [tid: 29925] [ecid: 0000J1H63emC^qHpIsx0if1DtMmR00000m,0] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: debug] [arg: _OCTETSTRING_ROOT] [arg: 0] [arg: ] Bind: Selected (Adapter#_OCTETSTRING_ROOT [Priority : 0]) backend for: .
[2011-06-02T12:53:50.268-04:00] [octetstring] [TRACE] [] [com.octetstring.vde.DoSManager] [tid: 29925] [ecid: 0000J1H63emC^qHpIsx0if1DtMmR00000m,0] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: debug] UnBind: /<IP Address>.

...<snip>...

Changes

 

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms