DIP Import Sync Slow Performance / Delay In User Creation Into Back-End Directory
Last updated on MARCH 08, 2017
Applies to:Oracle Internet Directory - Version 10.1.2 to 11.1.1 [Release 10gR2 to 11g]
Oracle Unified Directory - Version 188.8.131.52.0 and later
Information in this document applies to any platform.
Directory Integration Platform (DIP) with third party directory, such as Active Directory (AD).
Import synchronization slow performance in adding some new AD entries into backend directory. Multiple users are created in AD at the same time, but while some of the users are sync'd to backend directory timely, others are delayed by a day or longer before they are imported into backend directory.
For example, consider the following two users creation details in AD, obtained by searching AD for their respective whenCreated attribute values:
ldapsearch -h <AD hostname> -p 389 -D "<ADAdmin@domain>" -w <password> -s sub -b "OU=myou,DC=mycompany,DC=com" "cn=username2" | grep whenCreated
For OID 10g as backend directory, the profile audit file $ORACLE_HOME/ldap/odi/log/<profilename>.aud indeed shows those users are added to backend directory a day later, for example:
Fri Sep 23 08:54:27 EDT 2011 - Audit Log Start
82074240 : Success : ADD : cn=username1,ou=myou,cn=users,dc=mycompany,dc=com
Fri Sep 23 08:54:28 EDT 2011 - Audit Log End
Sat Sep 24 00:50:53 EDT 2011 - Audit Log Start
82467418 : Success : ADD : cn=username2,ou=myou,cn=users,dc=mycompany,dc=com
Sat Sep 24 00:50:53 EDT 2011 - Audit Log End
Sign In with your My Oracle Support account
Don't have a My Oracle Support account? Click to get started
My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms