Replication Not Working Properly And Change Log In Supply Node Not Purged "DSA is unwilling to perform" (Doc ID 1939241.1)

Last updated on MARCH 08, 2017

Applies to:

Oracle Internet Directory - Version 11.1.1.7.0 and later
Information in this document applies to any platform.

Symptoms

LDAP replication configured

Replication logs (oidrepld00-0000.log)  reporting errors similar to the following:


[2014-06-24T01:11:01-04:00] [OID] [ERROR:8] [23020] [OIDREPLD] [host: oidbox.us.oracle.com] [pid: 7396] [tid: 2] Reader(Apply):: In gslrrfeFetchChanges, ldap_search failure against server=oid2_orcl2 where basedn=cn=changelog, scope=1, filter=(&(objectclass=changeLogEntry)(servername=oid2_orcl2)(changeNumber=0)), attrs=, error=DSA is unwilling to perform.


Change logs not being purged by garbage collection jobs.

Checking asr_chg_log table:

select count (*) from asr_chg_log where retry_cnt=10;

and

select count (*) from asr_chg_log where retry_cnt >= 0;

If you find you have many entries with a retry_cnt stuck at 10, you may be hitting this issue. 

(Also check the OP_TIME column as this will give you an idea of when these entries were created)

 

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms