Tuesday Sep 27, 2011

OBIEE 11.1.1 - Weblogic Server AD provider - circular group references

If you see BIEE 11.1.1.5 Weblogic Managed Server JVM seg faults and then restarts when a user logs in, check the user group memberships in Active Directory. If the user belongs to groups in a circular reference (group A belongs to group B that belongs to group A), without additional configuration parameters, the JVM may segfaults.

The managed server thread dump (kill -3) would show a trace similar to:

"[ACTIVE] ExecuteThread: '18' for queue: 'weblogic.kernel.Default (self-tuning)'" waiting for lock netscape.ldap.LDAPSearchListener@xxxxx WAITING
    java.lang.Object.wait(Native Method)
    java.lang.Object.wait(Object.java:485)
    netscape.ldap.LDAPMessageQueue.waitForMessage(LDAPMessageQueue.java:200)
    netscape.ldap.LDAPMessageQueue.nextMessage(LDAPMessageQueue.java:122)
    netscape.ldap.LDAPSearchListener.nextMessage(LDAPSearchListener.java:86)
    netscape.ldap.LDAPSearchResults.fetchResult(LDAPSearchResults.java:530)
    netscape.ldap.LDAPSearchResults.hasMoreElements(LDAPSearchResults.java:456)
    weblogic.security.providers.authentication.LDAPAtnMemberGroupsNameList.advance(LDAPAtnMemberGroupsNameList.java:115)
    weblogic.security.providers.utils.ListerManager.advance(ListerManager.java:233)
    weblogic.security.providers.authentication.LDAPAtnDelegate.advance(LDAPAtnDelegate.java:1201)
    weblogic.security.providers.authentication.LDAPAtnLoginModuleImpl.getMemberGroups(LDAPAtnLoginModuleImpl.java:496)
    weblogic.security.providers.authentication.LDAPAtnLoginModuleImpl.searchGroupUnlimited(LDAPAtnLoginModuleImpl.java:567)
    weblogic.security.providers.authentication.LDAPAtnLoginModuleImpl.searchGroupUnlimited(LDAPAtnLoginModuleImpl.java:584)
    weblogic.security.providers.authentication.LDAPAtnLoginModuleImpl.searchGroupUnlimited(LDAPAtnLoginModuleImpl.java:584)
 .... many more ....

To workaround that, set in weblogic administration console the "Max Group Membership Search Level" for the AD provider.

http://download.oracle.com/docs/cd/E12840_01/wls/docs103/secmanage/atn.html


About

A blog focused on Tips & Tricks about Oracle Business Intelligence (OBI), Oracle Exalytics and Oracle Enterprise Performance Management (EPM) products.
[Blog Admin: ahmed awan]

Search

Archives
« April 2014
SunMonTueWedThuFriSat
  
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
   
       
Today