My Oracle Support Banner

OIM Connector for OID Fails with Error "LDAP: error code 36" or Takes Long time to Update Entries in OID (Doc ID 2852446.1)

Last updated on MARCH 17, 2022

Applies to:

Oracle Internet Directory - Version 11.1.1.9.0 and later
Identity Manager Connector - Version 12.2.1.3.0 and later
Information in this document applies to any platform.

Symptoms

OIM has OID Connector configured with OID

Any user modification from OIM fails with the following error in the log file

<Error> <ORACLE.IAM.CONNECTORS.ICFCOMMON.PROV.ICPROVISIONINGMANAGER> <BEA-000000>
<oracle.iam.connectors.icfcommon.prov.ICProvisioningManager : doUpdate : Error while updating user
org.identityconnectors.framework.common.exceptions.ConnectorException: Exception occurred while searching
[LDAP: error code 36 - Problem in dereferencing the base of the search.]
at org.identityconnectors.ldap.search.LdapInternalSearch.execute(LdapInternalSearch.java:77)
.................

Or it takes long time to update the entries in OID causing severe performance issue

Debug log from OID shows the following

[OID] [TRACE:16] [] [OIDLDAPD] [host: xxxxxxxxxx] [pid: 44588] [tid: 10] [ecid: <ECID>] ServerWorker (REG):[[
BEGIN
ConnID:19134 mesgID:13 OpID:12 OpName:search ConnIP:::ffff:xxxxx:49902 ConnDN:cn=orcladmin
orclinmemFilter:
Orig Filter(numAVAFilters=6):(&(&(objectclass=top)(objectclass=person)(objectclass=organizationalperson)(objectclass=inetorgperson))(orclguid=<guid>)(objectclass=*))
Removed Filter: (objectclass=*)
New Filter(numAVAFilters=5):(&(&(objectclass=top)(objectclass=person)(objectclass=organizationalperson)(objectclass=inetorgperson))(orclguid=<guid>))

* orclinmemFilter:
Orig Filter(numAVAFilters=5):(&(&(objectclass=top)(objectclass=person)(objectclass=organizationalperson)(objectclass=inetorgperson))(orclguid=<guid>))
Removed Filter: (objectclass=inetorgperson)
New Filter(numAVAFilters=4):(&(&(objectclass=top)(objectclass=person)(objectclass=organizationalperson))(orclguid=<guid>))

* INFO :gslfseADoSearch BASE = dc=xxx,dc=xxx,dc=xxx FILTER = (&(&(objectclass=top)(objectclass=person)(objectclass=organizationalperson))(orclguid=<guid>)) #REQDATTR = 1 SCOPE = 2 REQDATTRS = orclguid
TIMELIMIT = 30 SIZELIMIT = 0 DEREF = 3
* gslsbsSearch * BASE = "dc=xxx,dc=xxx,dc=xxx" FILTER = "(&(&(objectclass=top)(objectclass=person)(objectclass=organizationalperson))(orclguid=<guid>))" SCOPE = 2
* gslfbpsParsePagingCtrlValue: exit with status = 0 pagesize = 100
* Subtree search: SQL:SELECT <..............> Exceeds time limit
* INFO:gsleswrASndResult OPtime=30073441 micro sec RESULT=36 tag=101 nentries=0
* Qtime=0 micro sec
END

 

 

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!

In this Document
Symptoms
Cause
Solution
References


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.