VLV & Server Side Sort Query with ODSEE 11g

Hi
We are trying to integrate Microsoft FIM with ODSEE.. When FIM does a Full Import it with VLVControl and SortControl ON it gets the following error
1100 objects were returned on import, exceeding the configured page size in the Run Profile of 500. Only the first 500 objects were processed. Import aborted.
Now looking at ODSEE Logs it does the following
[27/Mar/2015:08:29:40 +1100] conn=1 op=1 msgId=402743 - SRCH base="<BASENAME>" scope=2 filter="<FILTER NAME>" attrs="<LONG LIST OF ATTRIBUTES>"
[27/Mar/2015:08:29:40 +1100] conn=1 op=1 msgId=402743 -  SORT dn
[27/Mar/2015:08:29:40 +1100] conn=1 op=1 msgId=402743 -  VLV 0:499:0:0 1:40 (0)
[27/Mar/2015:08:29:40 +1100] conn=1 op=1 msgId=402743 -  SORT dn
[27/Mar/2015:08:29:40 +1100] conn=1 op=1 msgId=402743 -  VLV 0:499:0:0 1:4 (0)
[27/Mar/2015:08:29:40 +1100] conn=1 op=1 msgId=402743 -  SORT dn
[27/Mar/2015:08:29:40 +1100] conn=1 op=1 msgId=402743 -  VLV 0:499:0:0 1:6412 (0)
[27/Mar/2015:08:29:41 +1100] conn=1 op=1 msgId=402743 -  SORT dn
[27/Mar/2015:08:29:41 +1100] conn=1 op=1 msgId=402743 -  VLV 0:499:0:0 1:685 (0)
[27/Mar/2015:08:29:41 +1100] conn=1 op=1 msgId=402743 -  SORT dn
[27/Mar/2015:08:29:41 +1100] conn=1 op=1 msgId=402743 -  VLV 0:499:0:0 1:232 (0)
[27/Mar/2015:08:29:41 +1100] conn=1 op=1 msgId=402743 - RESULT err=0 tag=101 nentries=1100 etime=1
[27/Mar/2015:08:29:55 +1100] conn=3 op=2 msgId=402744 - UNBIND
Ofcourse as we can see it is returning 1100 but FIM is expecting only 500.. Microsoft suggests that VLV index and server side sort is not correctly configured on our end. What could be going wrong here? We have both the supported controls ON in ODSEE. I have created a vlvindex entry in dse.ldif matching the SORT dn and vlvbase,vlvscope and vlvfilter
Not well versed with VLV and sort index..

Hello,
Could you try to perform an equivalent search with the ldapseatch that comes with DSEE and check how many entries are returned ?
See ldapsearch(1) (Sun Java System Directory Server Enterprise Edition 6.2 Man Page Reference) , option -G
If the ldapsearch returns more than 500 entries, I would encourage you to contact the Oracle Support.
-Sylvain
Please mark this response as correct or helpful when appropriate to make it easier for others to find it

Similar Messages

  • How do I do server side sorting in AD with JDK 1.4.2

    In JDK 1.6, I'm able to use SortControl to sort the results from AD on the server side.
    Here is my code that works for JDK 1.6:
    //Set Search Controls          
         SearchControls searchControls = new SearchControls();
         searchControls.setSearchScope(SearchControls.SUBTREE_SCOPE);
         // Limits the result data for each object
         searchControls.setReturningAttributes(SEARCH_LIST);
            searchControls.setTimeLimit(100000);
         // Setting Sort Controls if sorting was set
         if(sortSearch != null){
             Control[] ctls = new Control[] {new SortControl(new String [] {sortSearch}, Control.CRITICAL)};
             ctx.setRequestControls(ctls);
            //Searching off the base of the tree     
           NamingEnumeration ldapResults = ctx.search("",  filter, searchControls);I want to do the same sorting in JDK 1.4.2
    In that JDK, the SortControl class doesn't exist. Does anyone have a work around for sorting on older JDK versions?
    Thanks

    Thanks adler_steven for the help
    Here is the page where you can download the booster pack jar file
    [http://java.sun.com/products/jndi/downloads/index.html]
    The needed jar file is called ldapbp.jar

  • How do I define server-side spam rules with Yosemite & Server 4

    Really surprised that this isn't functionality available in the server UI. Poking around in the dovecot/spamassassin docs imply this is possible using sieve, but the configuration looks more complex than I'd like to have to figure out on my own. It seems that sieve might be possible to use. In /Library/Server/Mail/Config/dovecot/conf.d, the option sieve_dir is uncommented, pointing to /Library/Server/Mail/Data/rules/%u. That seems to imply I could create user directories there and apply some sieve rules, has anyone tried this?
    I'd rather not do user-specific rules, I'd prefer to use the default and attempt to move all spam into a spam folder for each user.
    I've seen notes that the webmail client Roundcube provided server-side rules, but I really don't need the web mail client, and various search results seem to raise questions about whether Roundcube is compatible with Sever 4 / Yosemite.
    Any help would be appreciated...

    Was able to get it working with some digging. The basic summary is that you need to create a rules directory for each mail user, and then add a sieve rule in each of the directories you create. I did this manually, which is manageable because I'm using OS X server for my household, and we don't add members to my household that often... :-). Summary of the steps:
    1) Each user has a directory in /Library/Server/Mail/Data/mail that is in UUID format (long hex string with sections broken by - characters).
    2) For each of the users you identify in (1), create an equivalent UUID directory in /Library/Server/Mail/Data/rules
    3) Create a file named "dovecot.sieve" in each of the directories you created in (2). For a basic rule that moves mail marked by SpamAssassin as spam to the Junk folder that Mail.app should create by default, you can use the following:
         require ["fileinto"];
         # rule:[SPAM]
         if header :contains "X-Spam-Flag" "YES" {
                 fileinto "Junk";
    4) Ensure that all of the directories/files are owned by _dovecot. I marked dovecot.sieve as executable, but I'm not sure that was necessary.
    5) Once you've done steps 1-4, you should start to see evidence that sieve is being used for delivery of mail in /Library/Logs/Mail/mailinfo.log. Grep for "sieve" in that to see activity. If there are errors, you'll likely see notices that there are sieve logs being created in the rules directories you set up in (2). I ran into errors for at least one account that didn't have a Junk folder created; if you hit that just have the user create a folder named Junk to clear it up.
    Hope this helps others...

  • Enabling server-side load balancing with Oracle 10g RAC

    Hi, all.
    I created a RAC database on vmware by using DBCA.
    By default, remote_listener and tnsname.ora have been configured.
    The followings are part of dba_services from my RAC database.
    NAME, GOAL, ENABLED, CBL_GOAL
    SYS$BACKGROUND NONE NO SHORT
    SYS$USERS NONE NO SHORT
    DEVDB NO LONG
    By default(created by DBCA), server-side load balancing is enabled for
    the RAC database, DEVDB??
    --> GOAL of DEVDB is null, but CBL_GOAL IS LONG.
    After creating a RAC db by using "DBCA", do I need to do something
    for server-side load balancing??
    If so what I need to do?? How can I test it??
    And what is beneficial in enabling server-side loadbalancing ??
    Is it good in the real world??
    Thanks for reading.
    Best Regards.
    Message was edited by:
    user507290

    [urgent] 10gR2 RAC Load Balancing Configuration (client and server side)!!
    [urgent] 10gR2 RAC Load Balancing Configuration (client and server side)!!
    Virag

  • Server side database access with Applets?

    Does anyone know how to do this without any JDBC or any other expensive, server heavy and special requirements?
    Who could be interested in this?
    Am i the only one?
    Most internet hosts, rented i mean, do not give many possibilities you have PHP and not much more to access a MySql or other database engine.
    If you want to build an aplication, a decent one, you must use java Applet because server side Java is not very interesting and is very expensive.

    Personally, I think server-side Java is very interesting and would disagree that a decent web application necessarily requires applets.
    I use Supplehost for their reliable and inexpensive Java hosting service.
    Many sites and applications make use of cross-browser DHTML and Java server technologies (JSP and servlets) are ideal for building and delivering data-driven DHTML pages.
    Of course applets have their advantages but, without a server providing access to data in a database, they're effectively working just as a static web page.
    There are other interfaces to databases: for example, Microsoft SQL Server provides the means to interrogate SQL databases through the underlying web server and to have the results returned in XML format.
    For me, J2EE provides the best tools for developing data-driven applications and the question over which client should do the presenting is more often one of how best to cater for the intended audience: cross-browser DHTML is best in some circumstances, applets in others, Macromedia Flash in others.
    Check out Supplehost's site: you get SSH and secure FTP access to a shared server, can install and run servlets and JSP applications and upload, configure and restart your applications very easily:
    http://www.supplehost.com
    Chris.

  • BUG for sort column with Oracle 11g and APEX 3.2

    I have BUG in Report region(Oracle 11g and APEX 3.2). if i have more than 746 Char for my column's value and i want to sort them, this error appear
    Report error :
    ORA-00910: specified length too long for its datatype.
    But in an other environement in Oracle 10g and apex 3.2, with the same data. I have no BUG.
    Somebody have an idea for a possible solution to this problem???

    Again, I may just be wasting your time...but if I have XDB problems...especially with the password, I do the following:
    1. Change your working directory to $ORACLE_HOME/apex.
    2. Start SQL*Plus and connect to the database where Oracle Application Express is installed as SYS.
    3. Run apxconf.sql
    > @apxconf
    4. When prompted, enter a password for the Oracle Application Express Admin account.
    5. When prompted, enter the port for the Oracle XML DB HTTP server. (default port being, of course,8080).
    6. Unlock the ANONYMOUS account
    > ALTER USER ANONYMOUS ACCOUNT UNLOCK;
    7. If needed, I do the SETHTTPPORT command mentioned before...
    Since I'm using the Oracle 11g, with embedded PL/SQL server, I have no idea if this is the same for 10g us OHS?
    Hope that helps!
    KSL.

  • Can BI Server launch parallel query (with DOP 1)?

    Hi guys,
    I have some perfomance problems with some reports. These reports are quite siple, no aggregation, no measures...just columns coming from different dimensions.
    The problem is that the size of the dimensions ranges from 1 milion to 10 milions of records and some dimensions are linked by "outer join" relationships. The physical query generated by the BI Server takes around 22 minutes but if i modify the same query adding the paralellism for the involved tables (e.g. select /*+ paralell(mytable 4) */ ...) i get the result in 5 minutes (1/4 of the time).
    So is there any way to force the BI server to use a degree (DOP) > 1 for the all/some physical tables?
    What about using indexes (I didn't create any index yet, maybe i should start to use them for primary/foreign keys)?
    Of course, others solutions to fix this issue are appretiated! :-)
    Thanks in advance,
    Nazza

    Nazza,
    Did you try out the HINT feature(Physical Table ->>General Tab -->>HINT) available in physical layer. You can use parallel hint there and the query generated would use the same while firing it to the database.
    Indexex are good to have but do check with your DBA, which index would be more cost effective to your query.
    Cheers
    Dhrubo

  • DSEE 7 error code 12 - Sort Response Control for server side sort

    I am using Sun DSEE 7, My application works fine for small data set (e.g. 1000) and gives me correct sorted result, but same code fails for large data set (e.g. 656000). I find that for large data set, I am getting the error "*javax.naming.OperationNotSupportedException: [LDAP: error code 12 - Sort Response Control];*". I have changed the look-throught-limit, size-limit and time-limit values to unlimited using dsconf utility. I changed db cache size, entry cache size to appropriate values and also i increased all-id-threshold, all-ids-threshold-eq, all-ids-threshold-pres to the max possible value (2147483646) for one index attribute which i am using in my query but still exception is coming. If i change my client code (Java code using JNDI) to use Context.NONCRITICAL for SortControl, the sorted result is coming fine for small data set (access log shows query as indexed) but result is not sorted for large dataset and also i see the query is now unindexed. I am using only one attribute for sorting. Please help me out what configuration i am missing here.

    Exactly. There is no reason to have the LDAP server sort the
    results during the retrieval.
    Query of Query can be used such as:
    <cfldap name="ldapResults" .....> <!--- Do the LDAP
    query first --->
    <cfquery dbtype="query" name="sortedResults">
    SELECT
    FROM
    ldapResults
    ORDER BY
    sprintcompany
    ,sprintpocrole
    ,sn
    </cfquery>
    Then, use the "sortedResults" query for the rest of your
    processing.

  • How do you implement server side sorting using IPlanet 5.x?

     

    You can use the sort control. The C and Java SDKs also provide support for it. See http://docs.iplanet.com/docs/manuals/dirsdk/csdk41/html/controls.htm#13286 for an example.

  • Server-Side Wins with Shared Maps

    We are using shared maps/publication items in our solution. Using this approach, the MGP process composes the set of publications items once for each group of users instead of once for each user. This helps a great deal in reducing MGP-compose times.
    What we are looking to implement however is server-side conflict resolution with shared maps. Oracle does not support this by deafult, so we were told write custom conflict resolution for this to work.
    As it stands now, we have written custom DML for the conflict resolution. However, in the apply-phase we are only given the group-id for the current sync user. What we need, however, is the client-id of the current sync user.
    Using the client-id, we can check to see if the client (and not the entire group) has any dirty records in the out-queue. If there are dirty records, then the server wins and the conflict-records are not applied.

    shared items have the same selection criteria for all users (ie: no data subsetting). Therefore the same data is composed and placed in the out queue for each user that is part of the group.
    I assume you are trying to check if there is a copy of the incoming record waiting to go to the the user, so you can compare the data on update. The problems you may have with this are
    1) data being present in the out queue (or not) depends as much on when the last compose ran, as the fact that the data has changed (can you hand on heart guarantee that the compose will have run if the user sends an update within a half an hour of the server being changed.
    2) the same record (because it is shared) may have been downloaded to a number of different clients. What will you do if they all send back updates?
    normally shared items are used for reference data (ie: static), but if you want to use them in this way it may be better to do your conflict tests against the actual underlying data, rather than what is stored in the MGP temporary tables. This will provide more consistent results as it does not rely on the timing of the compose process, and will be consistent for each user transaction
    You know which publication item is being processed. From mobileadmin.C$all_publications you can pick up the schema name, object name and template query. You can then use this to compare the current server data against the incoming data

  • Can Oracle Database 11.2.0.3 authenticate with ldap (ODSEE 11g)??

    Dear Experts,
    I wanted to know if the Oracle DB 11.2.0.3 can authenticate with LDAP ODSEE 11g. I got to know that in order to authenticate to LDAP oracle DB needs to connect to Oracle Virtual Directory (OVD). Is this the correct statement. Any inputs will be appriciate it. thanks in advance.
    Ibbi
    Edited by: Ibbi2200 on Apr 29, 2013 11:30 AM

    Yes i have looked into these Docs, It seems like Oracle DB does not connect directly with ODSEE 11g. It seems like you have to have OID (LDAP) not ODSEE (LDAP) for DB connection, and if you need to use ODSEEE, you have to use OVD to connect DB....Which is weird as OID is also an LDAP...and ODSEE is also an Oracle Ldap....
    this is the error i get when i tried connecting DB to ODSEE.
    "Error
    Unable to connect to Oracle Internet Directory.
    I am not using OID, we have ODSEE. Is there any pointers or workaround to connect ODSEE to DB? I am just trying to avoid OVD in the middle. Any help will be appriciated.
    Thanks
    ibbi

  • JavaHelp server side search engine

    I'm trying to use a server side search engine with JavaHelp 1.1.3.
    In the Moment all Helpsets are located on a Server. The viewer like a bowser and on server side a selfmade servlet answered the request. Now the searchengine should used like written here:
    A comment out of the User Guilde on page 32
    Server Side
    In a Server-side search, the search data, topic files, and the search engine are >all located on the server side -- only the results of the search are downloaded >to the client. Also the searchengine shoud realise working with wildcards.
    But I can't find any information how to realise a system like this. I hope i can get some informations or perhaps an example here.
    thx Stefan

    Hi Gary ... why don't you just network the two machines with a firewire ? 6000 photo its a lot .. the other thing you could do its too set your main Mac as a sort of little server or so or just open the web sharing .. put your photos in it .. no matter if a connection 's wireless or so .. all you got to do its to write a little crappy html link to the folder where your photos are even faster .. why don't you put them all on a CD burn it .. and there you are ... other than all that I got no idea at all .. it might be something better, faster .. but I don't know of .. that are the only alternatives that I know .. all the best Dominique .

  • Introducing a custom Password policy to expire passwords. odsee 11g - what are the expected results

    We have left the default Password Policy untouched. As a default password aging is off. Our DS compatibility mode is now DS6 so we can add Password Policies with max age!
    Some users need to have their passwords changed regularly due to political reasons.
    We have introduced a custom Password Policy which has a pwd_Max_age value of 180 days and allows the user to Change Password. Entry is cn=Custom Pwd Policy for ABC,dc=mycorp,dc=com
    Ok. Now we get confused by the behaviour of this ODSEE 11g server. Now, we are ADDING a new custom Password Policy to just a few selected users!
    1. When we add the Policy to the user by setting the passwordpolicysubentry attribute = "cn=Custom Pwd Policy for ABC,dc=mycorp,dc=com"
    - Nothing seems to happen.
    - WHEN IS THE PASSWORD EXPIRED?
    2. After we change a password for a user who has the passwordpolicysubentry attribute, he gains a new attribute pwdChangedTime
    - IS THIS THE ONLY TIME THE EXPIRY CLOCK STARTS TICKING? *AFTER* THE PASSWORD IS CHANGED?
    3. Is it true, that if a user never changes his password, even if he gets the new custom password policy applied, his password never automatically expires????
    I just cannot work out what is supposed to happen. I would have hoped that at the very least, the password begins to expires as soon as he gets a Password Policy with pwd_Max_age set.
    How is ODSEE 11g designed/supposed to function.
    Help!!!!!
    *HH

    Sylvain ,Many thanks for your reply and suggestions. Always good to have a choice!
    So it seems the only way to get the password aging clock to tick is for the password to be changed after having the password policy applied.
    Option1 is not really an option although it certainly would make the users change the password and set up the password aging...
    The main difficulty with odsee 11g  (Version 11.1.1.7.0) is that pwdChangedTime is a system read-only attribute linked to a modification to userPassword attribute, I cannot use ldapmodify to add/modify the pwdChangedTime attribute.
    I was amazed that I can read/store the userpassword as the base64 string and replace the userpassword attribute with this value using ldapmodify. This is very easy (and works!) but will cause the pwdChangedTime attribute to contain the same time for all users. I can imagine helpdesk loving it when everyone calls them in 6 months time.
    Using the LDIF backup/restore utility looks the best option, if it succeeds. At least we can randomize the actual value of pwdChangedTime with this approach.
    Mercy Buckets.

  • Display Server Side Include at top of scrollable Div

    Hello,
    In this topic, I will be referring to the following containers on my page:
    DIV A:  Contains the content of the page; this div has overflow set to scroll.
    DIV B: Contains the links
    DIV A contains 3 different server side includes, each with a different ID. Using the Show/Hide Element, I have set it so that when a link in Div B is clicked, the appropriate server side include is displayed in DIV A, and the other two server side includes are set to hide.
    The only problem is that when their appropriate links are clicked, SSI 2 and SSI 3 do not appear at the top of DIV A, but at the position they would be if all SSIs were set to show, so the user has to scroll to see SSI and SS 2.
    Do you folks know of any way to have the SSI display at the top of DIV A?
    It occurred to me that instead of using Show/Hide behavior, I may need to somehow include an SSI only when a DIV B link is clicked, and when a different DIV B link is clicked, that SSI is stripped form the page and the appropriate SSI is included.Is that even possible?
    Does this make sense to all of you?
    Thanks,
    Mike

    Without seeing your code, it could be how you are positioning these elements on your page.  If you plan on showing/hiding layers you will need to position these layers to show in the same spot every time by setting the position of DIV A to relative and the position of the 3 layers inside to absolute with a top and left value set to 0.

  • How to get the client identity from the certificate at server side

    hi, this is ravi kiran,
    I am working on a project which requires, receiving a signed file from the client side and verify whether the file is signed by a valid certificate that is there in the servers keystore.
    How can i get the client certificate at server side and check with the certificates already present in the servers keystore.
    i have no idea how to do this
    can any one help me
    thanx in advance

    Hi Ravi, did you get any answer to your question ?
    I'm also after a similar problem, please share your solution, if you have any.

Maybe you are looking for

  • Report output Issue

    Hi, I have a T.code S_AL0_96000493, in which we can see the Purchase Orders... When we run this report, it display only these columns..Purch.Doc., Vendor, PGroup, POrganisation, Doc. Date... Now i want to add more field from change layout but in adde

  • Post processing PDF to XML.

    Topic Post-processing PDF into XML. Compton MacKenzie - 08:48am Oct 29, 2008 Pacific Hi, Sorry for the basic question... We want to have users fill out a fillable PDF form using Aacrobat Reader and then upload it to a web page. Once we get the PDF, w

  • Problem to connect E 73 with home wireless

    Hi there  I cant connect my E 73 with home wifi system, it always come up with the error messsage : J007 Incorrect Security Certificate.  Pls advise what to do. Thanks allan

  • The Iphone "Iphone" Could Not Be Restored.An unknown error occured (2)

    Hi hello everybody  i am using iphone 4 16 GB when i try to update my ios from 6.1.3 to ios7  i have connected my iphone to system and then it downloaded ios7 file and middle of the installation it is showing an error  please can anyone help me to ov

  • -50 error: can't connect to server?

    I purchased music. Then my Internet service went down. When the service came back up, when I go to Advanced/Check for Purchases, it says it's trying to access my purchases, and then I get a -50 error that says it can't connect to the server. This has