My Oracle Support Banner

OAM Fails to Find Groups from OVD 11g for the User | OAM Log Error: OAMSSA-20019: Failure finding groups for user : <user id> : {1}. / Caused by: ... javax.naming.NamingException: [LDAP: error code 1 - Java heap space]; remaining name <group DN> (Doc ID 1903361.1)

Last updated on FEBRUARY 21, 2018

Applies to:

Oracle Virtual Directory - Version 11.1.1.0 and later
Information in this document applies to any platform.

Symptoms

Oracle Virtual Directory (OVD) 11g, e.g., 11.1.1.5, integrated with Oracle Access Manager (OAM).

OAM fails to find groups from OVD for the user logged in.

The OAM wls_oam00-diagnostic.log shows error:

[2014-06-25T14:59:32.033-05:00] [wls_oam00] [ERROR] [] [oracle.oam.user.identity.provider] [tid: [ACTIVE].ExecuteThread: '7' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: ] [ecid: <ECID number>] [APP: oam_server] Failure finding groups for user : USER1@MYCO.DEV : {1}.[[
oracle.security.am.engines.common.identity.provider.exceptions.IdentityProviderException: OAMSSA-20019: Failure finding groups for user : USER1@MYCO.DEV : {1}.
...<etc,etc>...
Caused by: oracle.security.am.engines.common.identity.provider.exceptions.IdentityProviderException: OAMSSA-20019: Failure finding groups for user : [LDUserPrincipal]: USER1@MYCO.DEV : {1}.
at oracle.security.am.engines.common.identity.provider.impl.RoleProviderImpl.getGroupInfoListForUser(RoleProviderImpl.java:789)
at oracle.security.am.engines.common.identity.provider.impl.RoleProviderImpl.getGroupInfoListForUser(RoleProviderImpl.java:724)
... 25 more
Caused by: oracle.security.idm.OperationFailureException: javax.naming.NamingException: [LDAP: error code 1 - Java heap space]; remaining name 'cn=groups,dc=myoid,dc=dev2'
at oracle.security.idm.providers.stdldap.util.LDAPRealm.throwException(LDAPRealm.java:773)
at oracle.security.idm.providers.stdldap.util.InverseRelationSearchResponse.hasMoreIdentities(InverseRelationSearchResponse.java:296)
at oracle.security.idm.providers.stdldap.util.InverseRelationSearchResponse.hasNext(InverseRelationSearchResponse.java:202)
at oracle.security.idm.providers.stdldap.util.GrantedRolesSearchResponse.hasNext(GrantedRolesSearchResponse.java:58)
at oracle.security.idm.providers.stdldap.LDSearchResponse.hasNext(LDSearchResponse.java:78)
at oracle.security.am.engines.common.identity.provider.impl.RoleProviderImpl.getGroupInfoListForUser(RoleProviderImpl.java:760)
... 26 more


The corresponding (ecid) OVD debug trace:32 diagnostic.log entries include searches returning all members of a number of groups where some return the same java heap space error:


...<snip>...
uniquemember: cn=user41,cn=external,cn=users,dc=myoid,dc=dev2
uniquemember: cn=user42,cn=external,cn=users,dc=myoid,dc=dev2
uniquemember: cn=user43,cn=external,cn=users,dc=myoid,dc=dev2
cn: LabConsultant
objectclass: orclIDXGroup
objectclass: groupOfUniqueNames
objectclass: top

]]
[2014-06-25T14:59:29.902-05:00] [octetstring] [TRACE:32] [] [com.octetstring.vde.chain.plugins.DumpTransactions.DumpTransactions] [tid: 22] [ecid: <ECID number>:19] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: log] !SEARCH Entry Before Plugins: (Transaction#OctetString.GlobalServiceInterface.mydump.1187)[[
DN: cn=LabConsultant,cn=Groups,dc=myoid,dc=dev2
displayname: LabConsultant
orclguid: D8FF11C1E5116236E0400A0A9D0215CC
description: LabConsultant
cn: LabConsultant
objectclass: orclIDXGroup
objectclass: groupOfUniqueNames
objectclass: top
!
]]
[2014-06-25T14:59:29.903-05:00] [octetstring] [TRACE:32] [] [com.octetstring.vde.chain.plugins.DumpTransactions.DumpTransactions] [tid: 22] [ecid: <ECID number>:19] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: log] !SEARCH Entry After Plugins: (Transaction#OctetString.GlobalServiceInterface.mydump.1187)[[
DN: cn=LabConsultant,cn=Groups,dc=myoid,dc=dev2
displayname: LabConsultant
orclguid: D8FF11C1E5116236E0400A0A9D0215CC
description: LabConsultant
cn: LabConsultant
objectclass: orclIDXGroup
objectclass: groupOfUniqueNames
objectclass: top
!
]]
[2014-06-25T14:59:29.903-05:00] [octetstring] [TRACE] [] [com.octetstring.vde.NIOConnection] [tid: 22] [ecid: <ECID number>:19] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: debug] ConnID:0 sendResponse:Sent entry to msgId:25
[2014-06-25T14:59:29.903-05:00] [octetstring] [TRACE] [] [com.octetstring.vde.NIOConnection] [tid: 22] [ecid: <ECID number>:19] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: debug] ConnID:0 WriteToCon: write bytes=249 Len=249
[2014-06-25T14:59:29.904-05:00] [octetstring] [TRACE] [] [com.octetstring.vde.plugins.usermanagement.UserManagement] [tid: 22] [ecid: <ECID number>:19] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: debug] Entry DN: cn=LabEmployee,cn=Groups,dc=cap,dc=dev
...<etc>...
[2014-06-25T14:59:35.178-05:00] [octetstring] [TRACE] [] [com.octetstring.vde.OperationHandler] [tid: 22] [ecid: <ECID number>] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: debug] Operation error Java heap space
...<snip>...

  

 

Changes

 

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.