Tuning Considerations for ISW Connector and 'pswsync' Plugin in a Complex AD Environment.
(Doc ID 1433489.1)
Last updated on MAY 10, 2021
Oracle Directory Server Enterprise Edition - Version 184.108.40.206.0 and later Information in this document applies to any platform.
As you troubleshoot issues with password synchronization or issues with attribute synchronization to Active Directory failing, or being delayed; consider that there are tunables to change the behavior of the plugin as well as how long the connector will wait for a response to complete from AD.
You can observe these directly by attempting ldapsearches from your ISW server or DS server running the plugin (This document uses the ODSEE provided ldapsearch for this test activity).
AD can produce a situation where an LDAP client does not complete its search until it completes a number of domain referrals for the user entry. In a worst case scenario, those references can be circular which will make the activity appear hung at the DS plugin as a volume of attempts builds from the ISW server.
To view full details, sign in with your My Oracle Support account.
Don't have a My Oracle Support account? Click to get started!