libOVD Users With the Same Name With Different dn's In AD Server(s) Are Not Listed In EM (Doc ID 2477455.1)

Last updated on AUGUST 24, 2021

Applies to:

Symptoms

Users with the same name in Active Directory LDAP's, which have different DN's are

listed as separate users in Weblogic Console, but when one such user is searched to be

assigned to an application role only single user entry is displayed.

for example they have 4 users :

CN=<FIRSTNAME_NAME_LASTNAME>,OU=<USERS_OU>,DC=<COUNTRY1>,DC=<COMPANY_NAME>,DC=<DC_VALUE>;

CN=<FIRSTNAME_NAME_LASTNAME>,OU=<OU1>,OU=<USERS_OU>,DC=<COUNTRY1>,DC=<COMPANY_NAME>,DC=<DC_VALUE>;

CN=<FIRSTNAME_NAME_LASTNAME>,OU=<OU3,OU=<OU_2>,OU=<USERS_OU>,DC=<COUNTRY2>,DC=<COMPANY_NAME>,DC=<DC_VALUE>;

CN=<FIRSTNAME_NAME_LASTNAME>,OU=<OU4>,OU=<OU2>,OU=<USERS_OU>,DC=<COUNTRY2>,DC=<COMPANY_NAME>,DC=<DC_VALUE>

Those dn's match filter (&(|(samaccountname=<FIRSTNAME>*)(displayname=<NAME>*))(objectclass=user))

but only dn: CN=<FIRSTNAME_NAME_LASTNAME>,OU=<OU3,OU=<OU_2>,OU=<USERS_OU>,DC=<COUNTRY2>,DC=<COMPANY_NAME>,DC=<DC_VALUE>

is returned.

Changes

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.