Search From an Application Against OVD 11g Fails And Does Not Return Certain LDAP Controls
(Doc ID 1333000.1)
Last updated on MAY 31, 2024
Applies to:
Oracle Virtual Directory - Version 11.1.1.1.0 to 11.1.1.9.0 [Release 11g]Information in this document applies to any platform.
Symptoms
Oracle Virtual Directory (OVD) 11g, i.e, 11.1.1.3, integrated with Oracle Internet Directory (OID).
An application, e.g. CISCO UM, connects to OID via OVD to search users and pull attributes. During the search it looks for certain LDAP controls. When pointing the application to OVD connecting to OID via OID adapter template, the search fails as it does not find those LDAP controls.
Executing the search against the OVD Join Adapter always fails.
Executing the search against the OID Adapter does not work either.
Executing the search directly against OID and bypassing OVD always works.
Following are the ldap controls that the application is looking for:
Control=2.16.840.1.113730.3.4.2
Control=2.16.840.1.113894.1.8.1
Control=2.16.840.1.113894.1.8.2
Control=2.16.840.1.113894.1.8.3
Control=2.16.840.1.113894.1.8.4
Control=2.16.840.1.113894.1.8.5
Control=2.16.840.1.113894.1.8.6
Control=2.16.840.1.113894.1.8.7
Control=1.2.840.113556.1.4.473
Control=1.2.840.113556.1.4.319
Control=2.16.840.1.113894.1.8.14
Control=2.16.840.1.113894.1.8.16
Control=2.16.840.1.113894.1.8.23
Control=2.16.840.1.113894.1.8.29
The application's log shows an exception, for example:
2011-06-02 12:53:46,782 DEBUG [DSLDAPSyncImpl(<string>)] ldapplugable.DSLDAPSyncImpl (DSLDAPSyncImpl.java:877) - LDAPSync(<string>)[makeConnection] Successful LDAP connection to : ldap://<OVD_IPADDRESS>:<OVD_PORT>
2011-06-02 12:53:46,787 DEBUG [DSLDAPSyncImpl(<string>)] ldapplugable.DSLDAPSyncImpl (DSLDAPSyncImpl.java:705) - LDAPSync(<string>)[checkLDAP] Getting supportedcontrol from ctx
2011-06-02 12:53:46,788 ERROR [DSLDAPSyncImpl(<string>)] ldapplugable.DSLDAPSyncImpl (DSLDAPSyncImpl.java:801) - LDAPSync(<string>)[checkLDAP] Failed to check LDAP - java.lang.NullPointerException
2011-06-02 12:53:46,788 ERROR [DSLDAPSyncImpl(<string>)] ldapplugable.DSLDAPSyncImpl (DSLDAPSyncImpl.java:802) - LDAPSync(<string>)[checkLDAP] java.lang.NullPointerException
MESSAGE null
...<snip>...
The OVD diagnostic.log may show:
[2011-06-02T12:53:46.410-04:00] [octetstring] [TRACE:32] [] [com.octetstring.vde.router.RoutingRule] [tid: <TID>] [ecid: <ECID>] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: dump] Rule[OID1] checking binding for adapter#<OID_ADAPTER_NAME>
[2011-06-02T12:53:46.410-04:00] [octetstring] [TRACE] [] [com.octetstring.vde.router.RoutingRule] [tid: <TID>] [ecid: <ECID>] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: debug] Rule[<OID_ADAPTER_NAME>] dn: cn=<USERNAME>,cn=Users,dc=<COMPANY>,dc=com MAPPED TO: cn=<USERNAME>,cn=Users,dc=<COMPANY>,dc=com
[2011-06-02T12:53:46.415-04:00] [octetstring] [TRACE] [] [com.octetstring.vde.operation.BindOperation] [tid: <TID>] [ecid: <ECID>] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: debug] BIND: Success [cn=<USERNAME>,cn=Users,dc=<COMPANY>,dc=com/<IP_ADDRESS>]
[2011-06-02T12:53:46.417-04:00] [octetstring] [TRACE] [] [com.octetstring.vde.MessageHandler] [tid: <TID>] [ecid: <ECID>] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: debug] Request Dump: { messageID 2, protocolOp searchRequest: { baseObject ''H, scope 0, derefAliases 3, sizeLimit 0, timeLimit 0, typesOnly FALSE, filter present: '6F626A656374436C617373'H, attributes { '737570706F72746564636F6E74726F6C'H, '68696768657374436F6D6D697474656455534E'H, '6473536572766963654E616D65'H, '6368616E67654C6F67'H } } }
[2011-06-02T12:53:46.418-04:00] [octetstring] [TRACE] [OVD-00028] [com.octetstring.vde.operation.SearchOperation] [tid: <TID>] [ecid: <ECID>] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: debug] [arg: supportedcontrol] Value : "supportedcontrol"
[2011-06-02T12:53:46.418-04:00] [octetstring] [TRACE] [OVD-00028] [com.octetstring.vde.operation.SearchOperation] [tid: <TID>] [ecid: <ECID>] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: debug] [arg: highestCommittedUSN] Value : "highestCommittedUSN"
[2011-06-02T12:53:46.418-04:00] [octetstring] [TRACE] [OVD-00028] [com.octetstring.vde.operation.SearchOperation] [tid: <TID>] [ecid: <ECID>] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: debug] [arg: dsServiceName] Value : "dsServiceName"
[2011-06-02T12:53:46.418-04:00] [octetstring] [TRACE] [OVD-00028] [com.octetstring.vde.operation.SearchOperation] [tid: <TID>] [ecid: <ECID>] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: debug] [arg: changeLog] Value : "changeLog"
[2011-06-02T12:53:46.418-04:00] [octetstring] [TRACE] [] [com.octetstring.vde.chain.PluginManager] [tid: <TID>] [ecid: <ECID>] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: debug] runGet has all attribs : false
[2011-06-02T12:53:46.419-04:00] [octetstring] [TRACE] [OVD-00900] [com.octetstring.vde.view.ViewHandler] [tid: <TID>] [ecid: <ECID>] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: debug] [arg: <IP_ADDRESS>] [arg: cn=<USERNAME>,cn=Users,dc=<COMPANY>,dc=com] Selected Default View for IP/DN: <IP_ADDRESS>/cn=<USERNAME>,cn=Users,dc=<COMPANY>,dc=com.
[2011-06-02T12:53:46.419-04:00] [octetstring] [TRACE] [] [com.octetstring.vde.router.RoutingHandler] [tid: <TID>] [ecid: <ECID>] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: debug] REQUEST dn= suffix=dc=<DOMAIN>,dc=org
[2011-06-02T12:53:46.419-04:00] [octetstring] [TRACE] [] [com.octetstring.vde.router.RoutingHandler] [tid: <TID>] [ecid: <ECID>] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: debug] REQUEST dn= suffix=dc=<DOMAIN1>,dc=com
[2011-06-02T12:53:46.419-04:00] [octetstring] [TRACE] [] [com.octetstring.vde.router.RoutingHandler] [tid: <TID>] [ecid: <ECID>] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: debug] REQUEST dn= suffix=dc=<DOMAIN2>,dc=ad
[2011-06-02T12:53:46.420-04:00] [octetstring] [TRACE] [] [com.octetstring.vde.router.RoutingHandler] [tid: <TID>] [ecid: <ECID>] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: debug] REQUEST dn= suffix=dc=<DOMAIN3>,dc=join
[2011-06-02T12:53:46.420-04:00] [octetstring] [TRACE] [] [com.octetstring.vde.router.RoutingHandler] [tid: <TID>] [ecid: <ECID>] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: debug] REQUEST dn= suffix=
[2011-06-02T12:53:46.420-04:00] [octetstring] [TRACE] [] [com.octetstring.vde.router.RoutingHandler] [tid: <TID>] [ecid: <ECID>] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: debug] SELECT dn= suffix=
[2011-06-02T12:53:46.420-04:00] [octetstring] [TRACE] [] [com.octetstring.vde.router.RoutingHandler] [tid: <TID>] [ecid: <ECID>] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: debug] Selected backend for:(Adapter#<ROOT_ADAPTER>)
[2011-06-02T12:53:46.420-04:00] [octetstring] [TRACE] [] [com.octetstring.vde.router.RoutingHandler] [tid: <TID>] [ecid: <ECID>] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: debug] REQUEST dn= suffix=cn=Schema
[2011-06-02T12:53:46.421-04:00] [octetstring] [TRACE] [] [com.octetstring.vde.router.RoutingHandler] [tid: <TID>] [ecid: <ECID>] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: debug] Routing selected by filter for: Adapter#<ROOT_ADAPTER>
[2011-06-02T12:53:46.421-04:00] [octetstring] [TRACE] [] [com.octetstring.vde.chain.ChainVector] [tid: <TID>] [ecid: <ECID>] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: debug] setting backend com.octetstring.vde.backend.BackendRoot@2321b59a
[2011-06-02T12:53:46.421-04:00] [octetstring] [TRACE] [] [com.octetstring.vde.chain.PluginManager] [tid: <TID>] [ecid: <ECID>] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: debug] runGet has all attribs : false
[2011-06-02T12:53:46.421-04:00] [octetstring] [TRACE] [] [com.octetstring.vde.acl.ACLChecker] [tid: <TID>] [ecid: <ECID>] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: debug] allow-b-null--cn=<USERNAME>,cn=Users,dc=<COMPANY>,dc=com-
[2011-06-02T12:53:46.421-04:00] [octetstring] [TRACE] [] [com.octetstring.vde.acl.ACLChecker] [tid: <TID>] [ecid: <ECID>] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: debug] allow-t-null--cn=<USERNAME>,cn=Users,dc=<COMPANY>,dc=com-
[2011-06-02T12:53:46.422-04:00] [octetstring] [TRACE] [] [com.octetstring.vde.acl.ACLChecker] [tid: <TID>] [ecid: <ECID>] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: debug] allow-s-objectClass--cn=<USERNAME>,cn=Users,dc=<COMPANY>,dc=com-
[2011-06-02T12:53:46.425-04:00] [octetstring] [TRACE] [OVD-00900] [com.octetstring.vde.view.ViewHandler] [tid: <TID>] [ecid: <ECID>] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: debug] [arg: <IP_ADDRSS>] [arg: cn=<USERNAME>,cn=Users,dc=<COMPANY>,dc=com] Selected Default View for IP/DN: <IP_ADDRESS>/cn=<USERNAME>,cn=Users,dc=<COMPANY>,dc=com.
[2011-06-02T12:53:46.426-04:00] [octetstring] [TRACE] [OVD-00008] [com.octetstring.vde.router.RoutingHandler] [tid: <TID>] [ecid: <ECID>] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: debug] [arg: OID1] [arg: 50] [arg: dc=<DOMAIN1>,dc=com] Bind: Selected (Adapter#<OID_ADAPTER_NAME> [Priority : 50]) backend for: dc=my-dc2,dc=com.
[2011-06-02T12:53:46.427-04:00] [octetstring] [TRACE] [] [com.octetstring.vde.DoSManager] [tid: <TID>] [ecid: <ECID>] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: debug] UnBind: cn=<USERNAME>,cn=Users,dc=<COMPANY>,dc=com/<IP_ADDRESS>.
[2011-06-02T12:53:50.266-04:00] [octetstring] [TRACE] [OVD-00900] [com.octetstring.vde.view.ViewHandler] [tid: <TID>] [ecid: <ECID>] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: debug] [arg: <IP_ADDRESS>] [arg: ] Selected Default View for IP/DN: <IP_ADDRESS>/.
[2011-06-02T12:53:50.267-04:00] [octetstring] [TRACE] [OVD-00008] [com.octetstring.vde.router.RoutingHandler] [tid: <TID>] [ecid: <ECID>] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: debug] [arg: _OCTETSTRING_ROOT] [arg: 0] [arg: ] Bind: Selected (Adapter#<ROOT_ADAPTER> [Priority : 0]) backend for: .
[2011-06-02T12:53:50.268-04:00] [octetstring] [TRACE] [] [com.octetstring.vde.DoSManager] [tid: <TID>] [ecid: <ECID>] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: debug] UnBind: /<IP_ADDRESS>.
...<snip>...
Cause
To view full details, sign in with your My Oracle Support account. |
|
Don't have a My Oracle Support account? Click to get started! |
In this Document
Symptoms |
Cause |
Solution |