Slow OID Startup When Large Number of Users Have PWDPOLICYSUBENTRY;ENTRYLEVEL Set To Some Password Policy
Last updated on MAY 27, 2016
Applies to:Oracle Internet Directory - Version 220.127.116.11.0 and later
Information in this document applies to any platform.
OID is slow to startup. The OID nodes takes minutes to startup when compared to normal startup.
1. When large number of LDAP entries have pwdpolicysubentry;entrylevel set on them, oidldapd is slow to start. ( This is rare scenario where large number of LDAP entries have pwdpolicysubentry;entrylevel set on them.)
The oidldapd log shows a long
pause at the "Loading Password policy" step:
[2015-12-08T07:58:13.635034-37:00] [OID] [NOTIFICATION:16]  [OIDLDAPD]
[host: vminst1.vm.local] [pid: 25979] [tid: 0] Main:: Loading Password policy
[2015-12-08T08:00:03.922041-37:00] [OID] [NOTIFICATION:16]  [OIDLDAPD]
[host: vminst1.vm.local] [pid: 25979] [tid: 0] Main:: Loading Verifier
The above timing is from a test done with 1 million LDAP entries with pwdpolicysubentry;entrylevel set on them.
2. During this pause, checking v$sql and v$sqltext tables in DB show huge time consumed executing this query:
SELECT /*+ USE_NL(store) INDEX(store EI_ATTRSTORE) */
store.entryid,store.attrname, NVL(store.attrval,' '),
NVL(store.attrstype, ' ') FROM ds_attrstore store WHERE store.entryid
in (SELECT /*+ INDEX( at1 ST_pwdpolicysubentry ) */ at1.entryid FROM
CT_pwdpolicysubentry at1) AND store.entryid >= :entryThreshold AND
store.attrkind = 'u' order by store.entryid
3. It was observed in OID versions 18.104.22.168 to latest 22.214.171.124+.
When large number of LDAP entries have pwdpolicysubentry;entrylevel set on them.
Sign In with your My Oracle Support account
Don't have a My Oracle Support account? Click to get started
My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms