OAM Fails to Find Groups from OVD 11g for the User | OAM Log Error: OAMSSA-20019: Failure finding groups for user : <user id> : {1}. / Caused by: ... javax.naming.NamingException: [LDAP: error code 1 - Java heap space]; remaining name <group DN> (Doc ID 1903361.1)

Last updated on MARCH 08, 2017

Applies to:

Oracle Virtual Directory - Version 11.1.1.0 and later
Information in this document applies to any platform.

Symptoms

Oracle Virtual Directory (OVD) 11g, e.g., 11.1.1.5, integrated with Oracle Access Manager (OAM).

OAM fails to find groups from OVD for the user logged in.

The OAM wls_oam00-diagnostic.log shows error:

[2014-06-25T14:59:32.033-05:00] [wls_oam00] [ERROR] [] [oracle.oam.user.identity.provider] [tid: [ACTIVE].ExecuteThread: '7' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: ] [ecid: 0d58708dceef42e5:-52f97ca3:146aa50ea09:-8000-0000000000000012,1:99870] [APP: oam_server] Failure finding groups for user : USER1@MYCO.DEV : {1}.[[
oracle.security.am.engines.common.identity.provider.exceptions.IdentityProviderException: OAMSSA-20019: Failure finding groups for user : USER1@MYCO.DEV : {1}.
...<etc,etc>...
Caused by: oracle.security.am.engines.common.identity.provider.exceptions.IdentityProviderException: OAMSSA-20019: Failure finding groups for user : [LDUserPrincipal]: USER1@MYCO.DEV : {1}.
at oracle.security.am.engines.common.identity.provider.impl.RoleProviderImpl.getGroupInfoListForUser(RoleProviderImpl.java:789)
at oracle.security.am.engines.common.identity.provider.impl.RoleProviderImpl.getGroupInfoListForUser(RoleProviderImpl.java:724)
... 25 more
Caused by: oracle.security.idm.OperationFailureException: javax.naming.NamingException: [LDAP: error code 1 - Java heap space]; remaining name 'cn=groups,dc=myoid,dc=dev2'
at oracle.security.idm.providers.stdldap.util.LDAPRealm.throwException(LDAPRealm.java:773)
at oracle.security.idm.providers.stdldap.util.InverseRelationSearchResponse.hasMoreIdentities(InverseRelationSearchResponse.java:296)
at oracle.security.idm.providers.stdldap.util.InverseRelationSearchResponse.hasNext(InverseRelationSearchResponse.java:202)
at oracle.security.idm.providers.stdldap.util.GrantedRolesSearchResponse.hasNext(GrantedRolesSearchResponse.java:58)
at oracle.security.idm.providers.stdldap.LDSearchResponse.hasNext(LDSearchResponse.java:78)
at oracle.security.am.engines.common.identity.provider.impl.RoleProviderImpl.getGroupInfoListForUser(RoleProviderImpl.java:760)
... 26 more


The corresponding (ecid) OVD debug trace:32 diagnostic.log entries include searches returning all members of a number of groups where some return the same java heap space error:


...<snip>...
uniquemember: cn=user41,cn=external,cn=users,dc=myoid,dc=dev2
uniquemember: cn=user42,cn=external,cn=users,dc=myoid,dc=dev2
uniquemember: cn=user43,cn=external,cn=users,dc=myoid,dc=dev2
cn: LabConsultant
objectclass: orclIDXGroup
objectclass: groupOfUniqueNames
objectclass: top

]]
[2014-06-25T14:59:29.902-05:00] [octetstring] [TRACE:32] [] [com.octetstring.vde.chain.plugins.DumpTransactions.DumpTransactions] [tid: 22] [ecid: 0d58708dceef42e5:-52f97ca3:146aa50ea09:-8000-0000000000000012,1:99870:19] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: log] !SEARCH Entry Before Plugins: (Transaction#OctetString.GlobalServiceInterface.mydump.1187)[[
DN: cn=LabConsultant,cn=Groups,dc=myoid,dc=dev2
displayname: LabConsultant
orclguid: D8FF11C1E5116236E0400A0A9D0215CC
description: LabConsultant
cn: LabConsultant
objectclass: orclIDXGroup
objectclass: groupOfUniqueNames
objectclass: top
!
]]
[2014-06-25T14:59:29.903-05:00] [octetstring] [TRACE:32] [] [com.octetstring.vde.chain.plugins.DumpTransactions.DumpTransactions] [tid: 22] [ecid: 0d58708dceef42e5:-52f97ca3:146aa50ea09:-8000-0000000000000012,1:99870:19] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: log] !SEARCH Entry After Plugins: (Transaction#OctetString.GlobalServiceInterface.mydump.1187)[[
DN: cn=LabConsultant,cn=Groups,dc=myoid,dc=dev2
displayname: LabConsultant
orclguid: D8FF11C1E5116236E0400A0A9D0215CC
description: LabConsultant
cn: LabConsultant
objectclass: orclIDXGroup
objectclass: groupOfUniqueNames
objectclass: top
!
]]
[2014-06-25T14:59:29.903-05:00] [octetstring] [TRACE] [] [com.octetstring.vde.NIOConnection] [tid: 22] [ecid: 0d58708dceef42e5:-52f97ca3:146aa50ea09:-8000-0000000000000012,1:99870:19] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: debug] ConnID:0 sendResponse:Sent entry to msgId:25
[2014-06-25T14:59:29.903-05:00] [octetstring] [TRACE] [] [com.octetstring.vde.NIOConnection] [tid: 22] [ecid: 0d58708dceef42e5:-52f97ca3:146aa50ea09:-8000-0000000000000012,1:99870:19] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: debug] ConnID:0 WriteToCon: write bytes=249 Len=249
[2014-06-25T14:59:29.904-05:00] [octetstring] [TRACE] [] [com.octetstring.vde.plugins.usermanagement.UserManagement] [tid: 22] [ecid: 0d58708dceef42e5:-52f97ca3:146aa50ea09:-8000-0000000000000012,1:99870:19] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: debug] Entry DN: cn=LabEmployee,cn=Groups,dc=cap,dc=dev
...<etc>...
[2014-06-25T14:59:35.178-05:00] [octetstring] [TRACE] [] [com.octetstring.vde.OperationHandler] [tid: 22] [ecid: 0000KRKbA^ADSc^5xV8DyW1JejzR0000HI,0] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: debug] Operation error Java heap space
...<snip>...

  

 

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms