The OVD UPNBind Plug-In With Several AdapterName Values And FirstSuccess Option Does Not Route The Bind To Next Adapter (Doc ID 2438809.1)

Last updated on APRIL 04, 2019

Applies to:

Symptoms

When the UPNBind plug-in is configured with two or more AdapterName parameter values and the FirstSuccess option only one of the LDAP backend passwords will work but ldapbind will fail with the rest of the LDAP backend passwords.

The UPNBind plug-in enables ladpbinds using a set of specified attributes instead of the actual DN.

With the FirstSuccess option the bind operation should fail over across the different adapters (all of them in none is specified in the AdapterName parameter) until a successful bind occurs.

However, if several adapters are specified in the AdapterName parameter this failover will not occur properly and ldapbind will only succeed when using one of the backend passwords.

The plug-in will however work if no AdapterName parameter value is configured but this may create an ldapbind performance problem, especially if many adapters are in place.

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.