OVD 11g VirtualMemberof Plugin Pointing To A Database Adapter Fails With Log Error: LDAP: error code 1 - 000020D6: SvcErr: DSID-031007DB, problem 5012 (DIR_ERROR), Or: LDAP: error code 32 - 0000208D: NameErr: DSID-0310020A, problem 2001 (NO_OBJECT), data (Doc ID 1534106.1)

Last updated on SEPTEMBER 05, 2017

Applies to:

Oracle Virtual Directory - Version 11.1.1.2.0 and later
Information in this document applies to any platform.

Symptoms

Oracle Virtual Directory (OVD) 11g with an LDAP-Adapter pointing to an Active Directory (AD) and plug-in created to add a memberOf entry.  The Base DN in the plugin is the DN for a database adapter containing groups.  The groups membership is mantained in a database table, accessed through the DN 'cn=groups,dc=myad,o=myorg'.

When accessing a user through the LDAP adapter, the following exception is returned:

[LDAP: error code 1 - 000020D6: SvcErr: DSID-031007DB, problem 5012 (DIR_ERROR), remaining name 'cn=groups,dc=myad,o=myorg'] Remote-Serverausfall:myadhost.net:389.
at com.octetstring.vde.backend.jndi.ConnectionHandle.handleError(ConnectionHandle.java:403)

After turning on trace 32 level debug, the diagnostic log may show:

[2012-12-12T08:04:03.255+01:00] [octetstring] [WARNING] [OVD-40066] [com.octetstring.vde.backend.jndi.CV_AD.ConnectionHandle] [tid: 24] [ecid: 0000JiDvMEfBDCO5yjc9yW1Gm2l200000C,0] [arg: myadhost.net:389] [arg: javax.naming.NameNotFoundException: [LDAP: error code 32 - 0000208D: NameErr: DSID-0310020A, problem 2001 (NO_OBJECT), data 0, best match of:\n 'DC=mydc,DC=net'\n
remaining name 'cn=test,DC=mydc,DC=net'] Remote-Serverausfall:myadhost.net:389.
[2012-12-12T08:04:03.256+01:00] [octetstring] [TRACE:32] [] [com.octetstring.vde.chain.plugins.DumpTransactions.DumpTransactions] [tid: 24] [ecid: 0000JiDvMEfBDCO5yjc9yW1Gm2l200000C,0] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: log] !SEARCH Results: (Transaction#CV_AD.doDumpTransactions.1) NULL![[
com.octetstring.vde.util.DirectoryException: LDAP Error 32 : [LDAP: error code 32 - 0000208D: NameErr: DSID-0310020A, problem 2001 (NO_OBJECT), data 0, best match of:
'DC=mydc,DC=net'
at com.octetstring.vde.backend.jndi.ConnectionHandle.handleError(ConnectionHandle.java:403)

Access to the groups adapter from the ODSM Data browser works without problems, and it gives the correct DNs for the groups.

Changes

 

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms