OUD - The "UID Unique Attribute" Plugin is Not Enforcing Uniqueness of the UID Attribute (Doc ID 2797120.1)

Last updated on APRIL 11, 2024

Applies to:

Goal

On : 12.2.1.4.200827 version, Configuration

OUD "UID Unique Attribute" Plugin Not Enforcing Uniqueness of the UID Attribute

After enabling the OUD "UID Unique Attribute" Plugin it is still possible to add extra values to the UID attribute. The following shows a sample user before and after enabling the plugin with additional UID values added after enabling:

$ ldapsearch -h HOSTNAME -p LDAP_PORT -D "cn=DS_ADMIN" -w "PASSWD" -b "ou=people,dc=SUFFIX" -s sub '(uid=UID_1)' uid
dn: uid=UID_1,ou=OU-1,dc=SUFFIX
uid: UID_1

$ ${OUD_HOME}/bin/dsconfig --trustAll --port ADMIN_PORT get-plugin-prop --plugin-name "UID Unique Attribute"
Property : Value(s)
---------:-----------------------------------------
base-dn : "ou=people,dc=SUFFIX"
enabled : true
type : uid

$ ldapsearch -h HOSTNAME -p -D "cn=DS_ADMIN" -w "PASSWD" -b "ou=people,dc=SUFFIX" -s sub '(uid= UID_1)' uid
dn: uid= UID_1 ,ou=ou=people,dc=SUFFIX
uid: UID_2
uid: UID_3
uid: UID_1

There are no warnings or errors in the OUD logs.
 

Solution

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.