Tuning Considerations for ISW Connector and 'pswsync' Plugin in a Complex AD Environment. (Doc ID 1433489.1)

Last updated on OCTOBER 11, 2016

Applies to:

Oracle Directory Server Enterprise Edition - Version: 11.1.1.5.0 and later   [Release: 11gR1 and later ]
Information in this document applies to any platform.

Symptoms

As you troubleshoot issues with password synchronization or issues with attribute synchronization to Active Directory failing, or being delayed; consider that there are tunables to change the behavior of the plugin as well as how long the connector will wait for a response to complete from AD.

You can observe these directly by attempting ldapsearches from your ISW server or DS server running the plugin (This document uses the ODSEE provided ldapsearch for this test activity).

AD can produce a situation where an LDAP client does not complete its search until it completes a number of domain referrals for the user entry.  In a worst case scenario, those references can be circular which will make the activity appear hung at the DS plugin as a volume of attempts builds from the ISW server.


Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms