Ldapsearch Against OVD 11g Changelog Does Not Return Records As A User. Same Search Works As Orcladmin. (Doc ID 1388329.1)

Last updated on OCTOBER 30, 2019

Applies to:

Symptoms

Oracle Virtual Directory (OVD) 11g, i.e., 11.1.1.5.

An ldapsearch as <OIM_ADMIN_USER> user against OVD changelog does not return any data, i.e.:

ldapsearch -h <OVD_HOSTNAME> -p <OVD_PORT> -D "cn=<OIM_ADMIN_USER>,cn=<COMPANY>,dc=com" -w <password> -v -s one -b "cn=changelog" "(&(changenumber>=<a change number>)(changetype=ADD))"

The same search as cn=orcladmin against OVD changelog returns records ok.

Also, searches as either <OIM_ADMIN_USER> or orcladmin against backend (OID) changelog also returns entries ok.

Tried adding the aci's as per <Note:1373421.1>, and also tried both of its options A and B, but the same symptom continues.

A debugged OVD log does not record any failures for the searches.

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.