My Oracle Support Banner

OIDDAS Single User Search Fails: Search has failed. Please change search conditions and try again. / SSOserver.log Error: LDAP: error code 90 / Ldapsearch Fails With: ldap_search: Out of memory (Doc ID 783543.1)

Last updated on FEBRUARY 14, 2019

Applies to:

Oracle Internet Directory - Version 9.0.4 to 10.1.4 [Release 10gR1 to 10gR3]
Information in this document applies to any platform.

Symptoms

Can successfully search for most users in Oracle Internet Directory (OID) Delegated Administration Self-Service Console (OIDDAS url), but when searching for the one specific user, getting the following error:

Search has failed. Please change search conditions and try again.

 

When this user tries to register using CAC card, or login to SSO, getting the following error in $ORACLE_HOME/sso/logs/SSOserver.log:

Mon Feb 02 09:17:56 EST 2009 [ERROR] AJPRequestHandler-ApplicationServerThread-12 Could not get attributes for user, LASTNAME.FIRSTNAME.MI.1254218878
oracle.ldap.util.UtilException: NamingException encountered when resolving user - SIMPLE NAME =
LASTNAME.FIRSTNAME.MI.1254218878 [LDAP: error code 90
at oracle.ldap.util.Subscriber.getUser_NICKNAME(Subscriber.java:1215)
at oracle.ldap.util.Subscriber.getUser(Subscriber.java:913)
at oracle.ldap.util.Subscriber.getUser(Subscriber.java:860)
...<etc, etc>....

 

If searching for portions of the username via command line ldapsearch, getting "Out of memory" error:

> ldapsearch -h <oid hostname> -p <port> -D "cn=orcladmin" -w <password> -s sub -b "cn=Users,dc=<COMPANY>,dc=com" "(cn=*lastn*)"
ldap_search: Out of memory

> ldapsearch -h <oid hostname> -p <port> -D "cn=orcladmin" -w <password> -s sub -b "cn=Users,dc=<COMPANY>,dc=com" "(sn=lastn*)"
ldap_search: Out of memory

 

Searching oiddas and with ldapsearch for all other users works fine.

Also unable to delete this user entry with either ldapdelete or oidadmin.

After turning on full OID debug level, the following errors are shown in an OID version 10.1.2.3 log:

BEGIN
2009/02/06:13:18:29 * ServerWorker (REG):8 * ConnID:27 * OpId:1 * OpName:search
Entry gslfseADoSearch
13:18:29 * gslsbnrfNormForFilter:
Attr = <sn>,
InStr = <lastn>,
NormStr= <lastn>,
status=0
13:18:29 * gslffiAGetFilter: Filter string = (sn=lastn*), ret=0
13:18:29 * gslfbiGetControlInfo:Entry
13:18:29 * gslfbiGetControlInfo:Exit
13:18:29 * gslsfgglorclprivilegeGroupList:Entry
13:18:29 * Enter gsldfq_getSplGroupSQLs()13:18:29 * Enter gsldfq_getSplGroupSQLs()13:18:29 *
[gsldfd_FetchSubTreeObjs]Re-using prepared Statement
13:18:29 * Subtree Search Completed with: 100
13:18:29 * Exit: gsldfd_FetchSubTreeObjs
13:18:29 * gslsfgglorclprivilegeGroupList: Exit with 0
13:18:29 * gslsfgglorclacpGroupList: Entry
....<ETC, ETC>...
13:18:29 * END

BEGIN
2009/02/06:13:18:29 * ServerWorker (REG):8 * ConnID:27 * OpId:1 * OpName:search
Op. ID: <1> Group38 for the user DN:<cn=logical application
group,orclapplicationcommonname=formsapp_xxxx,cn=forms,cn=products,cn=oraclecontext>
13:18:29 * Op. ID: <1> Group39 for the user DN:<cn=logical application
group,orclapplicationcommonname=formsapp_xxxx,cn=forms,cn
=products,cn=oraclecontext>
13:18:29 * Op. ID: <1> Group40 for the user DN:<cn=logical application
group,orclapplicationcommonname=formsapp_xxxx,cn=forms,cn
=products,cn=oraclecontext>
13:18:29 * Entry: gslsbSearch()
13:18:29 * gslfacNGetadmin_context:Entry
13:18:29 * gslfacNGetadmin_context:Exit
13:18:29 * => gsldbBuildFilterList
13:18:29 * gslfdsaiIsAttrSkewed return isSkewed = 0, status = 2 for attr = sn
13:18:29 * gslfdsaiIsAttrSkewed return isSkewed = 0, status = 2 for attr = sn
13:18:29 * Subtree Sql: SELECT /*+ USE_NL(store) USE_NL(dn) INDEX(store EI_ATTRSTORE) ORDERED
FIRST_ROWS */ store.entryid,store.attrname, NVL(store.attrval,' '), NVL(store.attrstype, ' ')
FROM ct_dn dn, ds_attrstore store WHERE dn.entryid in ( (SELECT /*+ INDEX(at1 VA_sn) FIRST_ROWS
*/ at1.entryid FROM ct_sn at1 WHERE ( at1.attrvalue like :0 ESCAPE '\' ) ) UNION (SELECT /*+
INDEX(at1 VA_objectclass) */ at1.entryid FROM ct_objectclass at1 WHERE at1.attrvalue = 'referral'
) ) AND ( dn.parentdn like :bdn ESCAPE '\' OR (dn.rdn = :rdn and dn.parentdn = :pdn) ) AND
dn.entryid = store.entryid AND dn.entryid >= :entryThreshold AND store.attrkind = 'u'
13:18:29 * Subtree Search Completed with: 0
13:18:29 * Subtree Fetch Completed with: 0
13:18:29 * Entry: gsldba_AttrBValFetch jpegphoto
13:18:29 * Exit: gsldba_AttrBValFetch
13:18:29 * [gsldfd_FetchSubTreeObjs] Err 24 from gsldfa_GenObjEntries13:18:29 * Exit:
gsldfd_FetchSubTreeObjs
13:18:29 * Error in gsldfd_FetchSubTreeObjs:24
END

BEGIN
2009/02/06:13:18:29 * ServerWorker (REG):8 * ConnID:27 * OpId:1 * OpName:search
13:18:29 * sgslunwWrite: Entry
13:18:29 * sgslunwWrite: Exit
13:18:29 *
BASEDN = "cn=Users,dc=<COMPANY>,dc=com"
SCOPE = "2"
FILTER = "(sn=lastn*)"
#ATTRS = "0"

13:18:29 * EVENT "DB Fetch " time : 75960 micro sec
13:18:29 * EVENT "BValFetch" time : 1273 micro sec
13:18:29 * EVENT "Proc Rslt" time : 14 micro sec
13:18:29 * EVENT "Rslt Flsh" time : 137 micro sec
13:18:29 * TOTAL "Operation" time : 99045 micro sec
13:18:29 * INFO : gslfrsASendLdapResult2 RESULT = 90 nentries=0
13:18:29 * Exit: gslsbsSearch()
13:18:29 * Exit gslfseADoSearch
END

 

NOTE: An earlier version of OID high debugged log may show the error 24 syntax slightly differently, for example:

2004/02/10:17:09:56Entry: gsldba_AttrBValFetch jpegphoto
2004/02/10:17:09:56Enter: gsldbzToggleMode
2004/02/10:17:09:56Exit: gsldbzToggleMode
2004/02/10:17:09:56Exit: gsldba_AttrBValFetch
2004/02/10:17:09:56[gsldecftFetchEIDrows] Err-24 from gsldfa_GenObjEntries2004/02/10:17:09:56Exit: gsldecftFetchEIDrows with 24
2004/02/10:17:09:56[gsldecfsFetchEntries] Inserting prepared statement
2004/02/10:17:09:56Exiting gsldecfsFetchEntries : scope = 2, retval = 24

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!

In this Document
Symptoms
Cause
Solution
References

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.