My Oracle Support Banner

Slow OID Startup When Large Number of Users Have PWDPOLICYSUBENTRY;ENTRYLEVEL Set To Some Password Policy (Doc ID 2140149.1)

Last updated on AUGUST 11, 2021

Applies to:

Oracle Internet Directory - Version 11.1.1.7.0 and later
Information in this document applies to any platform.

Symptoms

OID is slow to startup. The OID nodes takes minutes to startup when compared to normal startup.

1. When large number of LDAP entries have pwdpolicysubentry;entrylevel set on them, oidldapd is slow to start. ( This is rare scenario where large number of LDAP entries have pwdpolicysubentry;entrylevel set on them.)

The oidldapd log shows a long
pause at the "Loading Password policy" step:
.
[2015-12-08T07:58:13.635034-37:00] [OID] [NOTIFICATION:16] [] [OIDLDAPD]
[host: <HOSTNAME>] [pid: xxxx] [tid: 0] Main:: Loading Password policy
entry ...
.
[2015-12-08T08:00:03.922041-37:00] [OID] [NOTIFICATION:16] [] [OIDLDAPD]
[host: <HOSTNAME>] [pid: xxxx] [tid: 0] Main:: Loading Verifier
profiles ...
.
The above timing is from a test done with 1 million LDAP entries with pwdpolicysubentry;entrylevel set on them.


2. During this pause, checking v$sql and v$sqltext tables in DB show huge time consumed executing this query:
.
SELECT /*+ USE_NL(store) INDEX(store EI_ATTRSTORE) */
store.entryid,store.attrname, NVL(store.attrval,' '),
NVL(store.attrstype, ' ') FROM ds_attrstore store WHERE store.entryid
in (SELECT /*+ INDEX( at1 ST_pwdpolicysubentry ) */ at1.entryid FROM
CT_pwdpolicysubentry at1) AND store.entryid >= :entryThreshold AND
store.attrkind = 'u' order by store.entryid

3. It was observed in OID versions 11.1.1.7 to latest 11.1.1.9+.

Changes

 When large number of LDAP entries have pwdpolicysubentry;entrylevel set on them.

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Symptoms
Changes
Cause
Solution
References


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.