My Oracle Support Banner

AD Synched Entries Have Multiple Values for cn in OID (Doc ID 473118.1)

Last updated on OCTOBER 15, 2019

Applies to:

Oracle Internet Directory - Version 10.1.2.2 and later
Information in this document applies to any platform.

Symptoms

AD synched entries show more than one value for "cn" in OID, even though the entry in AD has a single value. For example:

Search AD: 

ldapsearch -h <AD_HOSTNAME> -p <AD_PORT> -D "<AD_USER@DOMAIN>" -w <PASSWORD> -s sub -b "CN=<USERNAME>,CN=Users,DC=<DOMAIN>,DC=<COMPANY>,DC=com" objectclass=*

CN=<USERNAME>,CN=Users,DC=<DOMAIN>,DC=<COMPANY>,DC=com 
...
cn=<USERNAME>


Search for the synched entry in OID:

ldapsearch -h <OID_HOSTNAME -p <OID_PORT> -D "cn=orcladmin" -w <PASSWORD> -s base -b "CN=<USERNAME>,CN=Users,DC=<COMPANY>,DC=com" objectclass=*

CN=<USERNAME>,CN=Users,DC=<COMPANY>,DC=com
cn=<USERNAME>
cn=<FIRST_INITIAL_LASTNAME>
...

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Symptoms
Cause
Solution
References


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.