My Oracle Support Banner

OAM Fails to Find Groups from OVD 11g for the User | OAM Log Error: OAMSSA-20019: Failure finding groups for user : <user id> : {1}. / Caused by: ... javax.naming.NamingException: [LDAP: error code 1 - Java heap space]; remaining name <group DN> (Doc ID 1903361.1)

Last updated on AUGUST 17, 2022

Applies to:

Oracle Virtual Directory - Version 11.1.1.0 and later
Information in this document applies to any platform.

Symptoms

Oracle Virtual Directory (OVD) 11g, e.g., 11.1.1.5, integrated with Oracle Access Manager (OAM).

OAM fails to find groups from OVD for the user logged in.

The OAM wls_oam00-diagnostic.log shows error:

[2014-06-25T14:59:32.033-05:00] [xxxxxxx] [ERROR] [] [oracle.oam.user.identity.provider] [tid: [ACTIVE].ExecuteThread: '7' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId:xxxx ] [ecid: xxxx] [APP: xxxxxx] Failure finding groups for user : <USERNAME>@<DOMAIN> : {1}.[[
oracle.security.am.engines.common.identity.provider.exceptions.IdentityProviderException: OAMSSA-20019: Failure finding groups for user : <USERNAME>@<DOMAIN> : {1}.
...<etc,etc>...
Caused by: oracle.security.am.engines.common.identity.provider.exceptions.IdentityProviderException: OAMSSA-20019: Failure finding groups for user : [xxxxxxxxx]:<USERNAME>@<DOMAIN> : {1}.
at oracle.security.am.engines.common.identity.provider.impl.RoleProviderImpl.getGroupInfoListForUser(RoleProviderImpl.java:789)
at oracle.security.am.engines.common.identity.provider.impl.RoleProviderImpl.getGroupInfoListForUser(RoleProviderImpl.java:724)
... 25 more
Caused by: oracle.security.idm.OperationFailureException: javax.naming.NamingException: [LDAP: error code 1 - Java heap space]; remaining name 'cn=groups,dc=<COMPANY>,dc=com'
at oracle.security.idm.providers.stdldap.util.LDAPRealm.throwException(LDAPRealm.java:773)
at oracle.security.idm.providers.stdldap.util.InverseRelationSearchResponse.hasMoreIdentities(InverseRelationSearchResponse.java:296)
at oracle.security.idm.providers.stdldap.util.InverseRelationSearchResponse.hasNext(InverseRelationSearchResponse.java:202)
at oracle.security.idm.providers.stdldap.util.GrantedRolesSearchResponse.hasNext(GrantedRolesSearchResponse.java:58)
at oracle.security.idm.providers.stdldap.LDSearchResponse.hasNext(LDSearchResponse.java:78)
at oracle.security.am.engines.common.identity.provider.impl.RoleProviderImpl.getGroupInfoListForUser(RoleProviderImpl.java:760)
... 26 more


The corresponding (ecid) OVD debug trace:32 diagnostic.log entries include searches returning all members of a number of groups where some return the same java heap space error:


...<snip>...
uniquemember: cn=<USERNAME41>,cn=<CONTAINER>,cn=users,dc=<COMPANY>,dc=com
uniquemember: cn=<USERNAME42>,cn=<CONTAINER>,cn=users,dc=<COMPANY>,dc=com
uniquemember: cn=<USERNAME43>,cn=<CONTAINER>,cn=users,dc=<COMPANY>,dc=com
cn: LabConsultant
objectclass: orclIDXGroup
objectclass: groupOfUniqueNames
objectclass: top

]]
[2014-06-25T14:59:29.902-05:00] [octetstring] [TRACE:32] [] [com.octetstring.vde.chain.plugins.DumpTransactions.DumpTransactions] [tid: xx] [ecid: xxxxxxxxxx] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: log] !SEARCH Entry Before Plugins: (Transaction#OctetString.GlobalServiceInterface.mydump.1187)[[
DN: cn=<GROUPNAME>,cn=Groups,dc=<COMPANY>,dc=com
displayname: <GROUPNAME>
orclguid: xxxxxxxxxxxxx
description: <GROUPNAME>
cn: <GROUPNAME>
objectclass: orclIDXGroup
objectclass: groupOfUniqueNames
objectclass: top
!
]]
[2014-06-25T14:59:29.903-05:00] [octetstring] [TRACE:32] [] [com.octetstring.vde.chain.plugins.DumpTransactions.DumpTransactions] [tid: xx] [ecid: xxxxxxxxxx] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: log] !SEARCH Entry After Plugins: (Transaction#OctetString.GlobalServiceInterface.mydump.1187)[[
DN: cn=<GROUPNAME>,cn=Groups,dc=<COMPANY>,dc=com
displayname: LabConsultant
orclguid: xxxxxxxxxxxxxxxxxxx
description:<GROUPNAME>
cn: <GROUPNAME>
objectclass: orclIDXGroup
objectclass: groupOfUniqueNames
objectclass: top
!
]]
[2014-06-25T14:59:29.903-05:00] [octetstring] [TRACE] [] [com.octetstring.vde.NIOConnection] [tid: xx] [ecid: xxxxxxxxxxxx] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: debug] ConnID:0 sendResponse:Sent entry to msgId:25
[2014-06-25T14:59:29.903-05:00] [octetstring] [TRACE] [] [com.octetstring.vde.NIOConnection] [tid: xx] [ecid: xxxxxxxxxxxx] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: debug] ConnID:0 WriteToCon: write bytes=249 Len=249
[2014-06-25T14:59:29.904-05:00] [octetstring] [TRACE] [] [com.octetstring.vde.plugins.usermanagement.UserManagement] [tid: xx] [ecid: xxxxxxxxxxx] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: debug] Entry DN: cn=<GROUPNAME>,cn=Groups,dc=<COMPANY>,dc=com
...<etc>...
[2014-06-25T14:59:35.178-05:00] [octetstring] [TRACE] [] [com.octetstring.vde.OperationHandler] [tid: 22] [ecid: <ECID number>] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: debug] Operation error Java heap space
...<snip>...

  

 

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!

In this Document
Symptoms
Cause
Solution
References


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.