Tuning Considerations for ISW Connector and 'pswsync' Plugin in a Complex AD Environment. (Doc ID 1433489.1)

Last updated on NOVEMBER 18, 2022

Applies to:

Symptoms

As you troubleshoot issues with password synchronization or issues with attribute synchronization to Active Directory failing, or being delayed; consider that there are tunables to change the behavior of the plugin as well as how long the connector will wait for a response to complete from AD.

You can observe these directly by attempting ldapsearches from your ISW server or DS server running the plugin (This document uses the ODSEE provided ldapsearch for this test activity).

AD can produce a situation where an LDAP client does not complete its search until it completes a number of domain referrals for the user entry.  In a worst case scenario, those references can be circular which will make the activity appear hung at the DS plugin as a volume of attempts builds from the ISW server.

Changes

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.