My Oracle Support Banner

OVD 11g Searches Requesting memberof Attribute Return the Wrong DN for the User Member, Even With DNTranslator Plugin Applied (Doc ID 1591982.1)

Last updated on NOVEMBER 25, 2019

Applies to:

Oracle Virtual Directory - Version and later
Information in this document applies to any platform.


Oracle Virtual Directory (OVD) 11g, i.e., version.


AD DIT tree configured as follows:

+ dc=org
    + dc=<COMPANY1>
    + ou=users             (users are at this level)
    + ou=groups                      (groups are at this level)

OVD configured with two adapters as follows:

"MY_AD_Users" adapter for users:

+ dc=dev
    + dc=<COMPANY2>
    + ou=Users
    + ou=<OU1>                    (representing users in AD that are in "ou=users,dc=<COMPANY1>,dc=org")

"MY_AD_Groups" adapter for groups:

+ dc=dev
    + dc=<COMPANY2>
    + ou=Groups
    + ou=<OU2>                       (representing groups in AD that are in "ou=groups,ou=users,dc=<COMPANY1>,dc=org")



Searches against OVD requesting memberof attribute return the wrong DN for the user member.  For example:

The same wrong DN results continue after applying the DNTranslator plugin, either with no parameters, or with IncludedAdapter parameter value of <COMPANY2>_AD_Groups.


To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!

In this Document

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.