Slow OID Startup When Large Number of Users Have PWDPOLICYSUBENTRY;ENTRYLEVEL Set To Some Password Policy (Doc ID 2140149.1)

Last updated on MAY 27, 2016

Applies to:

Oracle Internet Directory - Version 11.1.1.7.0 and later
Information in this document applies to any platform.

Symptoms

OID is slow to startup. The OID nodes takes minutes to startup when compared to normal startup.

1. When large number of LDAP entries have pwdpolicysubentry;entrylevel set on them, oidldapd is slow to start. ( This is rare scenario where large number of LDAP entries have pwdpolicysubentry;entrylevel set on them.)

The oidldapd log shows a long
pause at the "Loading Password policy" step:
.
[2015-12-08T07:58:13.635034-37:00] [OID] [NOTIFICATION:16] [] [OIDLDAPD]
[host: vminst1.vm.local] [pid: 25979] [tid: 0] Main:: Loading Password policy
entry ...
.
[2015-12-08T08:00:03.922041-37:00] [OID] [NOTIFICATION:16] [] [OIDLDAPD]
[host: vminst1.vm.local] [pid: 25979] [tid: 0] Main:: Loading Verifier
profiles ...
.
The above timing is from a test done with 1 million LDAP entries with pwdpolicysubentry;entrylevel set on them.


2. During this pause, checking v$sql and v$sqltext tables in DB show huge time consumed executing this query:
.
SELECT /*+ USE_NL(store) INDEX(store EI_ATTRSTORE) */
store.entryid,store.attrname, NVL(store.attrval,' '),
NVL(store.attrstype, ' ') FROM ds_attrstore store WHERE store.entryid
in (SELECT /*+ INDEX( at1 ST_pwdpolicysubentry ) */ at1.entryid FROM
CT_pwdpolicysubentry at1) AND store.entryid >= :entryThreshold AND
store.attrkind = 'u' order by store.entryid

3. It was observed in OID versions 11.1.1.7 to latest 11.1.1.9+.

Changes

 When large number of LDAP entries have pwdpolicysubentry;entrylevel set on them.

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms