OVD 11g Users / Groups Not Returned Intermittently. OAM Log: LIBOVD-40066 | javax.naming.OperationNotSupportedException: [LDAP: error code 53 - LDAP Error 53 : [LDAP: error code 12 - 00002040: SvcErr: DSID-03140395, problem 5010 (UNAVAIL_EXTENSION),data 0 (Doc ID 2247299.1)

Last updated on MARCH 23, 2017

Applies to:

Oracle Virtual Directory - Version 11.1.1.0 and later
Information in this document applies to any platform.

Symptoms

Intermittently, user groups values are coming as null from Oracle Virtual Directory (OVD) 11g to integrated Oracle Access Manager (OAM).

This issue seems to have started after upgrading OAM from 10.1.4.3 to 11.1.2.3.5.

Cannot reproduce the issue via command line ldapsearch, which always works.

The issue can be easily reproducible via OAM, but it is intermittent, and there are times where OAM works.

The users/groups are either in Microsoft (MS) Active Directory (AD) or on a Database (DB), depending on the DN. However, the issue seems to reproduce when the users/group should be coming from AD.

OAM logs show:

[2017-01-24T12:17:12.920-05:00] [oam_server1] [NOTIFICATION] [LIBOVD-20043] [oracle.ods.virtualization.accesslog] [tid: [ACTIVE].ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: ] [ecid: f5054b6bbcf846a5:70b7321b:159ba02d344:-8000-000000000004285a,0] [APP: oam_server#11.1.2.0.0] [DSID: 0000LbHU18YE8Tg5tFc9yX1OWObk00000J] conn=1 op=206 SRCH base=dc=mycompany,dc=com scope=sub filter=(&(objectclass=groupofuniquenames)(uniquemember=CN=My User,OU=Americas,OU=Users,OU=Corp,dc=employee,dc=mycompany,dc=com)) requestedAttributes=[cn, orclguid, objectclass] sizelimit=0 timelimit=0 typesOnly=false
[2017-01-24T12:17:12.926-05:00] [oam_server1] [WARNING] [LIBOVD-40066] [oracle.ods.virtualization.engine.backend.jndi.adapter1] [tid: [ACTIVE].ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: ] [ecid: f5054b6bbcf846a5:70b7321b:159ba02d344:-8000-000000000004285a,0] [APP: oam_server#11.1.2.0.0] [DSID: 0000LbHU18YE8Tg5tFc9yX1OWObk00000J] Remote Server Failure:myovdhost:6501.[[
javax.naming.OperationNotSupportedException: [LDAP: error code 53 - LDAP Error 53 : [LDAP: error code 12 - 00002040: SvcErr: DSID-03140395, problem 5010 (UNAVAIL_EXTENSION), data 0

OVD Logs include:

[2017-01-24T12:14:24.375-05:00] [octetstring] [TRACE:32] [] [com.octetstring.vde.backend.db.mydb.ParseFilterSQL] [tid: 47] [ecid: f5054b6bbcf846a5:70b7321b:159ba02d344:-8000-00000000000427a2,0:16] [SRC_CLASS: com.octetstring.vde.util.VDELogger] [SRC_METHOD: dump] EQUALITY Filter: Objectclass term did not match (inetOrgPerson != groupofuniquenames
[2017-01-24T12:14:24.375-05:00] [octetstring] [TRACE:32] [] [com.octetstring.vde.backend.db.mydb.DBMapper] [tid: 47] [ecid: f5054

[2017-01-24T12:12:46.873-05:00] [octetstring] [WARNING] [OVD-40066] [com.octetstring.vde.backend.jndi.ConnectionHandle] [tid: 53] [ecid: aa9fbb072670ffd0:4bdb39c2:159cf367617:-8000-000000000000365a,0:16] Remote ServerFailure:myadhost.mycompany.com:636.[[
javax.naming.OperationNotSupportedException: [LDAP: error code 12 - 00002040: SvcErr: DSID-03140395, problem 5010 (UNAVAIL_EXTENSION), data 0
]; remaining name 'dc=mycompany,dc=com'

 

Changes

 

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms