The subscriber 'myrealm' contains multiple values for the attribute 'orclCommonUserSearchBase'

The subscriber ‘myrealm’ contains multiple values for the attribute ‘orclCommonUserSearchBase’

Today I faced an issue with user search base entries in OID. While running the configure script for BPEL worklist to use OID as user store, I got the below error.

[java] The subscriber ‘myrealm’ contains multiple values for the attribute ‘orclCommonUserSearchBase’

[java] cn=users,dc=myrealm,dc=com

[java] cn=Partner,dc=myrealm,dc=com

[java] cn=Customer,dc=myrealm,dc=com

[java] cn=Employees,dc=myrealm,dc=com

It means that administrator has configured the search base in OID with all the above four possible root DN’s.

The solution is to delete those entries in User Search Base in the OID.

You can do it in two ways:

1. Login to OIDDAS console, goto the tab Configuration -> Identity Management Realm. You can see the parameters User Search Base, User Creation Base etc., Delete the entries not required in User Search Base. I have seen console throwing errors and sometimes behaves weird when we modify params directly here. So I would suggest 2nd approach as given below.

2. Login to OIDADMIN tool, traverse to the Location dc=myrealm,dc=com,cn=Oracle Context, cn=Products, cn=Common and see the parameter orclcommonusersearchbase appearing on right side and make changes appropriately.

About the Author Mahendra

I am engulfed in Oracle Identity & Access Management domain. I have expertise on providing the optimized solutions for user provisioning, web access management, Single Sign-On and federation capabilities etc., I am also well versed with complex integrations within Identity Management and other product domains. I have expertise on building demos and implementation experience on products Oracle Access Manager, Oracle Adaptive Access Manager, Oracle Entitlement Server, Oracle Virtual Directory, Oracle Internet Directory etc., Look @ my blog: http://talkidentity.blogspot.com

Leave a Comment:

2 comments

Atul Kumar says September 21, 2010

Hi Mahendra,
Does this mean that BPEL worklist has bug that it doesn’t work with multiple searchbase ?

Which document you were using to configure BPEL worklist in OID ?

Mahendra says September 21, 2010

Hi Atul,

I dont think it is a bug. Since few containers and users got deleted it behaved abnormal. May be if there are multiple containers within cn=users, it might have worked well, not sure though as I have not tested this.

Add Your Reply