OID Operations Such as Add and Search as cn=orcladmin Suddenly Fail with: Insufficient Access / OID Server Log Shows DB Errors: ORA-01003 ORA-00604 ORA-04031 (Doc ID 1582063.1)

Last updated on SEPTEMBER 14, 2016

Applies to:

Oracle Internet Directory - Version 10.1.2 and later
Information in this document applies to any platform.

Symptoms

Oracle Internet Directory (OID), e.g. 10g version 10.1.2.

System had been working for years.

Suddenly, an integrated application is unable to add users while logged in as the superuser cn=orcladmin.

Able to login as cn=orcladmin, and the account is not locked.

But unable to add users or search for entries while authenticating as cn=orcladmin, and getting the same error as the application:

ldap_add: Insufficient access
ldap_search: Insufficient access

 

The OID server log, $ORACLE_HOME/ldap/log/oidldapd01s<pid>.log, shows DataBase (DB) errors such as:

BEGIN
2013/08/23:08:34:24 * ServerWorker (REG):8 * ConnID:15448 * OpId:5 * OpName:search
[gsldfd_FetchSubTreeObjs] ORA error 1003: ORA-01003: no statement parsed
END

BEGIN
2013/08/23:08:34:24 * ServerWorker (REG):8 * ConnID:15448 * OpId:5 * OpName:search
08:34:24 * Error in gsldfd_FetchSubTreeObjs:5
END

BEGIN
2013/08/23:08:34:24 * ServerWorker (REG):8 * ConnID:15448 * OpId:5 * OpName:search
08:34:24 * gslsfgglorclprivilegeGroupList: Orclprivilege Group Direct                 member ship search failed 5
END

BEGIN
2013/08/23:08:34:24 * ServerWorker (REG):8 * ConnID:15448 * OpId:5 * OpName:search
08:34:24 * gslfbiFindSubscribedGRoups:Error finding subscribedgroups                    for the user orclapplicationcommonname=myoidhost.mycompany.com,cn=ias instances,cn=ias,cn=products,cn=oraclecontext
END

2013/08/23:08:34:24 * ServerWorker (REG):8 * INFO * ServerWorker * Operation Complete

BEGIN
2013/08/23:08:36:17 * ServerWorker (REG):7 * ConnID:32 * OpId:5905 * OpName:search
[gsldecfsFetchEntries] ORA error 604: ORA-00604: error occurred at recursive SQL level 2
ORA-04031: unable to allocate 4096 bytes of shared memory ("shared pool","select obj#,type#,ctime,mtim...","Typecheck heap","kgghtInit")
END

BEGIN
2013/08/23:08:36:17 * ServerWorker (REG):7 * ConnID:32 * OpId:5905 * OpName:search
08:36:17 * Error in gsldfd_FetchSubTreeObjs:5
END

2013/08/23:08:36:17 * ServerWorker (REG):7 * INFO * ServerWorker * Operation Complete



Changes

 

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms