OVD and OUD Proxy Behave Differently when Given a MODIFY of an Empty Directory String Attribute with "Result Code: 21 (Invalid Attribute Syntax)" (Doc ID 2702884.1)

Last updated on NOVEMBER 30, 2022

Applies to:

Symptoms

 Using OVD and OUD proxy with backend OUD Directory Server.

For example, OVD modify with null value for  "description" attribute is successful as shown below:
---------------------------------------------
$ ldapmodify -p <OVD_LDAP_PORT> -D <OVD Admin account> -w "<Password>"

dn: cn=<CN_Value>,cn=Users,dc=<OU1>,dc=xxxxxx,dc=xxx
changetype: modify
replace: description
description:

modifying entry cn=<CN_Value>,cn=Users,dc=<OU1>,dc=xxxxxx,dc=xxx

Same modification performed through OUD Proxy with null value fails with below error:

./ldapmodify -h <OUD_PROXY_HOSTNAME> -p <OUD_SSL_PORT> --useSSL -X -D "<DN of the service account>" -w "Password" -f lidr7x9-blank.ldif
Processing MODIFY request for uid=<UID_value>,ou=<OU1>,dc=<DC2>,dc=<DC1>
MODIFY operation failed
Result Code: 21 (Invalid Attribute Syntax)
Additional Information: When attempting to modify entry uid=<UID_VALUE>,ou=<OU1>,o=<DOMAIN1>.<COM> to replace the set of values for attribute <ATTRIBUTE_NAME>, value "" was found to be invalid according to the associated syntax: The operation attempted to assign a zero-length value to an attribute with the directory string syntax Please note that the error message does not take into account the DN renaming occurring between client base DN:ou=<OU1>,dc=<DC2>,dc=<DC1> and source base DN:dc=<DC1>,dc=..

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.