OID 11g truncate the number of uniquemember attribute in a AD Dirsync Synchronization profile to 5000 (Doc ID 1475912.1)

Last updated on FEBRUARY 11, 2019

Applies to:

Symptoms

On 11.1.1.1 to 11.1.1.6 OID, Directory Integration Platform (DIP),  during the Dirsync setup AD->OID when AD group contains more than 5000 members (uniquemember attribute), the synchronized entry in OID only showed 5000 members.


The issue can be reproduced at will with the following steps:

1. Create a group in AD (Active Directory) with more than 5000 members.
2. Create a synchronization profile in OID for this group.
3. Change the type to Dirsync.
4. Bootstrap the group in OID, see that the OID group contains the 5000 members.
5. Update the last change number to 0,  and enable the synchronization profile.
6. Add or modify the group in AD. You will see that the group is not properly updated in OID

Also, it is possible to see the following error message in the DIP logs:

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.