ActiveWriter Synchronization Export Profile to AD Fails with DIP-10007 and "invalid attribute description; remaining name 'cn=changelog'" Due to Invalid Matching Filter
(Doc ID 2129380.1)
Last updated on AUGUST 30, 2023
Applies to:
Oracle Internet Directory - Version 11.1.1.9.0 and laterOracle Unified Directory - Version 11.1.2.3.0 and later
Information in this document applies to any platform.
Symptoms
Synchronization Profile exporting changes from the Oracle back-end directory, e.g. Oracle Internet Directory (OID) or Oracle Unified Directory (OUD), to Microsoft (MS) Active Directory (AD) configured on Oracle Directory Integration Platform (DIP or ODIP).
The Export Profile fails with the following error messages in wls_ods1-diagnostic.log log:
ODIException: Failure During Search
at oracle.ldap.odip.gsi.LDAPReader.searchChanges(LDAPReader.java:412)
at oracle.ldap.odip.web.DIPSyncBean.mapExecute(DIPSyncBean.java:617)
at oracle.ldap.odip.web.DIPSyncBean.execMapping(DIPSyncBean.java:459)
at oracle.ldap.odip.web.DIPSyncBean.doOneIteration(DIPSyncBean.java:359)
at oracle.ldap.odip.web.DIPSync_2r3ocw_EOImpl.__WL_invoke(Unknown Source)
...
Caused by: javax.naming.directory.InvalidSearchFilterException: invalid attribute description; remaining name 'cn=changelog'
at com.sun.jndi.ldap.Filter.encodeSimpleFilter(Filter.java:415)
at com.sun.jndi.ldap.Filter.encodeFilter(Filter.java:126)
at com.sun.jndi.ldap.Filter.encodeFilterList(Filter.java:720)
...
Changes
The profile is for exporting changes from Oracle directory (E.g. OID and OUD) to AD.
The Writer is "oracle.ldap.odip.gsi.ActiveWriter".
The filter "searchfilter=LDAP_SEARCH_FILTER" is set in the Matching Filter of profile, for example "searchfilter=cn!=user01".
Cause
To view full details, sign in with your My Oracle Support account. |
|
Don't have a My Oracle Support account? Click to get started! |
In this Document
| Symptoms |
| Changes |
| Cause |
| Solution |
| References |