How to Align orclodipConDirLastAppliedChgNum When Changing the AD DC Server For Synchronization (Doc ID 735248.1)

Last updated on MARCH 31, 2017

Applies to:

Oracle Internet Directory - Version 10.1.4 to 11.1.1.9.0 [Release 10gR3 to 11g]
Information in this document applies to any platform.

Symptoms

DIP synchronisation has been configured between OID  and Active Directory, and now the AD Domain Controller needs to be changed. For example, from server DC-01 to server DC-02 , a second server in a multi-master configuration, where:


The highestCommittedUSN on the second server (DC-02) is much lower than on the original server (DC-01), due to the number of changes (usn) being different at the AD DC server level in the same Windows domain per the USN change approach theory in AD.

Because of this difference, the OID synchronisation profile will not store any changes until the lower highestCommittedUSN catches up with the orclodipConDirLastAppliedChgNum in the profile.

Nevertheless, in the same Windows domain, objects (users, groups, etc.) are replicated between all AD DC servers.

This document describe how to re-align the highestCommittedUSN values in the profile in order to continue DIP synchronisation.

Observation:
To obtain highestCommittedUSN the following ldapsearch can be used:

ldapsearch -h <ADhost> -p 389 -D Administrator@<domain.com> -w "<passord>" -b "" -s base "objectclass=*" highestCommittedUSN



For example:

[oracle@pc-gps-im ~]$ ldapsearch -h ten.test.oracle.local -p 389 -D Administrator@test.oracle.local -w "*******" -b "" -s base "objectclass=*" highestCommittedUSN
highestCommittedUSN=532909

 

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms