My Oracle Support Banner

Tuning Considerations for ISW Connector and 'pswsync' Plugin in a Complex AD Environment. (Doc ID 1433489.1)

Last updated on NOVEMBER 18, 2022

Applies to:

Oracle Directory Server Enterprise Edition - Version and later
Information in this document applies to any platform.


As you troubleshoot issues with password synchronization or issues with attribute synchronization to Active Directory failing, or being delayed; consider that there are tunables to change the behavior of the plugin as well as how long the connector will wait for a response to complete from AD.

You can observe these directly by attempting ldapsearches from your ISW server or DS server running the plugin (This document uses the ODSEE provided ldapsearch for this test activity).

AD can produce a situation where an LDAP client does not complete its search until it completes a number of domain referrals for the user entry.  In a worst case scenario, those references can be circular which will make the activity appear hung at the DS plugin as a volume of attempts builds from the ISW server.




To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!

In this Document
 2 separate items to consider, first the plugin settings
 The second area of consideration is tuning the Client Timeout Setting (from the upcoming ISW release notes update)

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.