DIP Import Sync Slow Performance / Delay In User Creation Into Back-End Directory

(Doc ID 1363528.1)

Last updated on MARCH 08, 2017

Applies to:

Oracle Internet Directory - Version 10.1.2 to 11.1.1 [Release 10gR2 to 11g]
Oracle Unified Directory - Version and later
Information in this document applies to any platform.


Directory Integration Platform (DIP) with third party directory, such as Active Directory (AD).

Import synchronization slow performance in adding some new AD entries into backend directory.  Multiple users are created in AD at the same time, but while some of the users are sync'd to backend directory timely, others are delayed by a day or longer before they are imported into backend directory.

For example, consider the following two users creation details in AD, obtained by searching AD for their respective whenCreated attribute values:

ldapsearch -h <AD hostname> -p 389 -D "<ADAdmin@domain>" -w <password> -s sub -b "OU=myou,DC=mycompany,DC=com" "cn=username1" | grep whenCreated

ldapsearch -h <AD hostname> -p 389 -D "<ADAdmin@domain>" -w <password> -s sub -b "OU=myou,DC=mycompany,DC=com" "cn=username2" | grep whenCreated

For OID 10g as backend directory, the profile audit file $ORACLE_HOME/ldap/odi/log/<profilename>.aud indeed shows those users are added to backend directory a day later, for example:


Fri Sep 23 08:54:27 EDT 2011  -  Audit Log Start
82074240 : Success : ADD : cn=username1,ou=myou,cn=users,dc=mycompany,dc=com
Fri Sep 23 08:54:28 EDT 2011  -  Audit Log End


Sat Sep 24 00:50:53 EDT 2011  -  Audit Log Start
82467418 : Success : ADD : cn=username2,ou=myou,cn=users,dc=mycompany,dc=com
Sat Sep 24 00:50:53 EDT 2011  -  Audit Log End



Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms