OVD 11g Searches Requesting memberof Attribute Return the Wrong DN for the User Member, Even With DNTranslator Plugin Applied

(Doc ID 1591982.1)

Last updated on MARCH 08, 2017

Applies to:

Oracle Virtual Directory - Version 11.1.1.0 and later
Information in this document applies to any platform.

Symptoms

Oracle Virtual Directory (OVD) 11g, i.e., 11.1.1.7.0 version.

Scenario:

AD DIT tree configured as follows:

+ dc=org
    + dc=mycompany1
    + ou=user accounts             (users are at this level)
    + ou=groups                      (groups are at this level)


OVD configured with two adapters as follows:

"MY_AD_Users" adapter for users:

+ dc=dev
    + dc=mycompany2
    + ou=Users
    + ou=MYOU                       (representing users in AD that are in "ou=user accounts,dc=mycompany1,dc=org")

"MY_AD_Groups" adapter for groups:

+ dc=dev
    + dc=mycompany2
    + ou=Groups
    + ou=MYOU                       (representing groups in AD that are in "ou=groups,ou=user accounts,dc=mycompany1,dc=org")

 

 

Searches against OVD requesting memberof attribute return the wrong DN for the user member.  For example:



The same wrong DN results continue after applying the DNTranslator plugin, either with no parameters, or with IncludedAdapter parameter value of mycompany2_AD_Groups.


Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms