My Oracle Support Banner

OVD 11g Searches Requesting memberof Attribute Return the Wrong DN for the User Member, Even With DNTranslator Plugin Applied (Doc ID 1591982.1)

Last updated on NOVEMBER 25, 2019

Applies to:

Oracle Virtual Directory - Version 11.1.1.0 and later
Information in this document applies to any platform.

Symptoms

Oracle Virtual Directory (OVD) 11g, i.e., 11.1.1.7.0 version.

Scenario:

AD DIT tree configured as follows:

+ dc=org
    + dc=<COMPANY1>
    + ou=users             (users are at this level)
    + ou=groups                      (groups are at this level)


OVD configured with two adapters as follows:

"MY_AD_Users" adapter for users:

+ dc=dev
    + dc=<COMPANY2>
    + ou=Users
    + ou=<OU1>                    (representing users in AD that are in "ou=users,dc=<COMPANY1>,dc=org")

"MY_AD_Groups" adapter for groups:

+ dc=dev
    + dc=<COMPANY2>
    + ou=Groups
    + ou=<OU2>                       (representing groups in AD that are in "ou=groups,ou=users,dc=<COMPANY1>,dc=org")

 

 

Searches against OVD requesting memberof attribute return the wrong DN for the user member.  For example:



The same wrong DN results continue after applying the DNTranslator plugin, either with no parameters, or with IncludedAdapter parameter value of <COMPANY2>_AD_Groups.


Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!

In this Document
Symptoms
Cause
Solution


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.