OUD 12c - RDBMS Workflow Returns Incorrect Results with "ldapsearch" Using "uniqueMember" Multi-Value Attribute for Group Membership (Doc ID 2846663.1)

Last updated on AUGUST 30, 2023

Applies to:

Symptoms

Groups are stored in the Oracle Database tables.
The tables for each group stores uniquemembers of that group (multi-valued attribute)

Example:  <GROUP1> contains uniquemembers <USER1>, <USER2>, <USER3> etc.

A RDBMS Workflow has been created in OUD (How to Create RDBMS Workflow with Oracle Database in OUD Proxy (Doc ID 2243152.1))

When querying the groups uniquemembers, an incorrect response is returned:

Example:

./ldapsearch -p <OUD_PORT> -D "<OUD_ADMIN_ACCOUNT>" -j <PATH_TO_PWDFILE> -b "cn=<GROUP1>,ou=groups,dc=<DOMAIN_NAME>,dc=com" -s sub "objectclass=*" uniquemember
dn: cn=<GROUP1>,ou=groups,dc=<DOMAIN_NAME>,dc=com
cn: <GROUP1>
uniquemember: cn=<USER1>,ou=people,dc=<DOMAIN_NAME>,dc=com
objectClass: groupOfUniqueNames
objectClass: top

dn: cn=<GROUP1>,ou=groups,dc=<DOMAIN_NAME>,dc=com
cn: <GROUP1>
uniquemember: cn=<USER2>,ou=people,dc=<DOMAIN_NAME>,dc=com
objectClass: groupOfUniqueNames
objectClass: top

dn: cn=<GROUP1>,ou=groups,dc=<DOMAIN_NAME>,dc=com
cn: <GROUP1>
uniquemember: cn=<USER3>,ou=people,dc=<DOMAIN_NAME>,dc=com
objectClass: groupOfUniqueNames
objectClass: top

The expected output for search of <GROUP1> uniquemembers:

dn: cn=<GROUP1>,ou=groups,dc=<DOMAIN_NAME>,dc=com
uniquemember: cn=<USER1>,ou=people,dc=<DOMAIN_NAME>,dc=com
uniquemember: cn=<USER2>,ou=people,dc=<DOMAIN_NAME>,dc=com
uniquemember: cn=<USER3>,ou=people,dc=<DOMAIN_NAME>,dc=com

Changes

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.