OID 11g Performance Affected Due to Password Policy Refresh when Lots of User Entries Have pwdpolicysubentry Attribute (Doc ID 1512300.1)

Last updated on SEPTEMBER 14, 2016

Applies to:

Oracle Internet Directory - Version 11.1.1.2.0 to 11.1.1.6.0 [Release 11g]
Information in this document applies to any platform.

Symptoms

High number of DB password policy refresh execution when lot of user entries has pwdpolicysubentry attribute. This event will trigger OID to refresh its passwordPolicySubentry cache, which will cause a huge SQL query requests to the database if there are lots of such users, this issue is causing an intermittent ldap query delay.
  
Following is the SQL query that the oidldapd process is running every few seconds and that is causing a lot of traffic:
  
 SELECT /*+ USE_NL(store) INDEX(store EI_ATTRSTORE) FIRST_ROWS */ store.entryid,store.attrname, NVL(store.attrval,' '), NVL(store.attrstype, ' ') FROM ds_attrstore store WHERE store.entryid in (SELECT /*+ INDEX( at1 ST_pwdpolicysubentry ) */ at1.entryid FROM CT_pwdpolicysubentry at1) AND store.entryid >= :entryThreshold AND store.attrkind = 'u'

 

Changes

 

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms