LDAP Reconciliation Jobs are Failing in OIM-OVD Integrated Environment due to old ECL Cookie

(Doc ID 2319193.1)

Last updated on OCTOBER 19, 2017

Applies to:

Identity Manager - Version 11.1.2.3.170418 and later
Information in this document applies to any platform.

Symptoms

LDAP Sync enabled in OIM with OUD.
OUD is front ended by OVD.
Configured the Directory Server IT Resource with OVD details.
The LDAP Reconciliation jobs will run fine for few days, but after that all the jobs will fail with the below error:

When update lastExternalChangeLogCookie from OUD in OIM Schedule Jobs, the issue will be fixed.
But the job will fail again after few days.


ERROR
-----------------------

[APP: oim] An error occurred while getting the change log from LDAP - {0}[[
javax.naming.OperationNotSupportedException: [LDAP: error code 53 - LDAP Error 53 : [LDAP: error code 53 - Full resync required. Reason: For the replicated domain : dc=example,dc=com, the provided cookie contains a start state (0000015c9dbda791255a000023b9 0000015a95dded7922bb0000002c) that is older than the start of historical in the server (0000015cface5991255a000023c5 0000015cc66fd33d22bb00000059 0000015cc66f3873012900000001)]]; remaining name 'cn=changelog'

[APP: oim] IAM-1020021 Unable to execute job : LDAP User Create and Update Reconciliation with Job History Id:294416[[
java.lang.RuntimeException: javax.naming.OperationNotSupportedException: [LDAP: error code 53 - LDAP Error 53 : [LDAP: error code 53 - Full resync required. Reason: For the replicated domain : dc=example,dc=com, the provided cookie contains a start state (0000015c9dbda791255a000023b9 0000015a95dded7922bb0000002c 0000015777202f916fbe00011353) that is older than the start of historical in the server (0000015cface5991255a000023c5 0000015cc66fd33d22bb00000059 0000015cc66f3873012900000001)]]; remaining name 'cn=changelog'
at com.oracle.oim.eventhandlers.scheduletasks.LDAPUserChangeRecon.ChangelogSearch(LDAPUserChangeRecon.java:296)

 

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms