My Oracle Support Banner

OUD12c: ForkJoin: Getting result=32 Errors While Trying to Search for an Entry Existing Only in One Participant of a Fork-Join Workflow Element (WFE) (Doc ID 2532713.1)

Last updated on MAY 01, 2019

Applies to:

Oracle Unified Directory - Version 12.2.1.3.0 and later
Information in this document applies to any platform.

Symptoms

On : 12.2.1.3.0 version, Proxy & Load-Balancing

When a search is done for a baseDN that is not present in both participants of a Fork-Join Workflow, the result=32 is return in the outputs/results of ldap query.

Sample:
$ ./bin/ldapsearch -h localhost -p 51389 -D "cn=Directory Manager" -j <PASSWORD_FILE> -b "CN=Userfj1st0001 Testfj1st0001,dc=forkJoinedAD" -s base "(objectClass=user)" uid userPassword telephonenumber mail sAMAccountName givenname displayname description sn cn objectclass orclguid
dn: CN=Userfj1st0001 Testfj1st0001,dc=forkJoinedAD
sn: Testfj1st0001
sAMAccountName: utfj1st0001
cn: Userfj1st0001 Testfj1st0001
objectclass: top
objectclass: user
objectclass: organizationalPerson
objectclass: person
givenname: Userfj1st0001
displayname: Userfj1st0001 Testfj1st0001

SEARCH operation failed
Result Code: 32 (No Such Entry)
Additional Information: 0000208D: NameErr: DSID-03100238, problem 2001 (NO_OBJECT), data 0, best match of:
  'OU=ForkJoin2nd,DC=fmw,DC=example,DC=com'

Matched DN: OU=ForkJoin2nd,DC=fmw,DC=example,DC=com

$ tail -f ./logs/access
...
[19/Feb/2019:14:55:25 +0000] CONNECT conn=60 from=127.0.0.1:51685 to=127.0.0.1:51389 protocol=LDAP
[19/Feb/2019:14:55:25 +0000] BIND REQ conn=60 op=0 msgID=1 type=SIMPLE dn="cn=Directory Manager" version=3
[19/Feb/2019:14:55:25 +0000] BIND RES conn=60 op=0 msgID=1 result=0 authDN="cn=Directory Manager,cn=Root DNs,cn=config" etime=0
[19/Feb/2019:14:55:25 +0000] SEARCH REQ conn=60 op=1 msgID=2 base="CN=Userfj1st0001 Testfj1st0001,dc=forkJoinedAD" scope=base filter="(objectClass=user)" attrs="uid,userPassword,telephonenumber,mail,sAMAccountName,givenname,displayname,description,sn,cn,objectclass,orclguid"
[19/Feb/2019:14:55:25 +0000] SEARCH PROXY_REQ conn=60 op=1 msgID=2 filter="(objectClass=user)" s_credmode=use-specific-identity scope="base" s_conn=9 s_msgid=23047 base="CN=Userfj1st0001 Testfj1st0001,ou=ForkJoin1st,dc=example,dc=com"
[19/Feb/2019:14:55:25 +0000] SEARCH PROXY_RES conn=60 op=1 msgID=2 result=0 nentries=1 etime=185 s_authdn=cn=Administrator,cn=Users,dc=example,dc=com authzDN=cn=Directory Manager,cn=Root DNs,cn=config s_conn=9 s_msgid=23047
[19/Feb/2019:14:55:25 +0000] SEARCH PROXY_REQ conn=60 op=1 msgID=2 filter="(objectClass=user)" s_credmode=use-specific-identity scope="base" s_conn=20 s_msgid=19684 base="CN=Userfj1st0001 Testfj1st0001,ou=ForkJoin2nd,dc=fmw,dc=example,dc=com"
[19/Feb/2019:14:55:25 +0000] SEARCH PROXY_RES conn=60 op=1 msgID=2 result=32 nentries=0 Message="0000208D: NameErr: DSID-03100238, problem 2001 (NO_OBJECT), data 0, best match of:
  'OU=ForkJoin2nd,DC=fmw,DC=example,DC=com'
" etime=2 s_authdn=cn=oracle,cn=users,dc=fmw,dc=example,dc=com authzDN=cn=Directory Manager,cn=Root DNs,cn=config s_conn=20 s_msgid=19684
[19/Feb/2019:14:55:25 +0000] SEARCH RES conn=60 op=1 msgID=2 result=32 message="0000208D: NameErr: DSID-03100238, problem 2001 (NO_OBJECT), data 0, best match of:
  'OU=ForkJoin2nd,DC=fmw,DC=example,DC=com'
" nentries=1 etime=198
[19/Feb/2019:14:55:25 +0000] UNBIND REQ conn=60 op=2 msgID=3
[19/Feb/2019:14:55:25 +0000] DISCONNECT conn=60 reason="Client Disconnect"





STEPS
-----------------------
The issue can be reproduced at will with the following steps:
1. Create a fork-join using 2 participants
2. Run ldapsearch using as baseDN an entry present only in one participant.
3. Result of ldapsearch will show the details of existing entry , but the result is ending with failure :

SEARCH operation failed
Result Code: 32 (No Such Entry)

BUSINESS IMPACT
-----------------------
The issue has the following business impact: Incorrect results
Due to this issue, users cannot search for baseDN details which exist only in one participant.

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Symptoms
Cause
Solution
References


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.