OID 11g Performance Affected Due to Password Policy Refresh when Lots of User Entries Have pwdpolicysubentry Attribute
Last updated on SEPTEMBER 14, 2016
Applies to:Oracle Internet Directory - Version 188.8.131.52.0 to 184.108.40.206.0 [Release 11g]
Information in this document applies to any platform.
High number of DB password policy refresh execution when lot of user entries has pwdpolicysubentry attribute. This event will trigger OID to refresh its passwordPolicySubentry cache, which will cause a huge SQL query requests to the database if there are lots of such users, this issue is causing an intermittent ldap query delay.
Following is the SQL query that the oidldapd process is running every few seconds and that is causing a lot of traffic:
SELECT /*+ USE_NL(store) INDEX(store EI_ATTRSTORE) FIRST_ROWS */ store.entryid,store.attrname, NVL(store.attrval,' '), NVL(store.attrstype, ' ') FROM ds_attrstore store WHERE store.entryid in (SELECT /*+ INDEX( at1 ST_pwdpolicysubentry ) */ at1.entryid FROM CT_pwdpolicysubentry at1) AND store.entryid >= :entryThreshold AND store.attrkind = 'u'
Sign In with your My Oracle Support account
Don't have a My Oracle Support account? Click to get started
My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms