How to set OID 11g in debug mode

Recently I had to troubleshoot OAM/OIM integration where OID is used as identity store and I had to set OID 11g in debug mode. I think this will be useful to share with you all.

To set OID in debug mode:

Create an ldif file with contents as shown below.

dn: cn=oid1,cn=osdldapd,cn=subconfigsubentry
changetype: modify
replace: orcldebugop
orcldebugop: 511

dn: cn=oid1,cn=osdldapd,cn=subconfigsubentry
changetype: modify
replace: orcldebugflag
orcldebugflag: 1

The 1st line shows cn=oid1. Replace the oid instance as per your environment. To know the OID instance name of your environment, verify the opmnctl status.

orcldebugop attribute is used to specify the ldap operations that needs to be traced. The possible values of orcldebugop are as shown in below table.

orcldebugflag attribute controls LDAP server debugging. Following table specifies the possible values of this attribute.

Run the ldap command $ORACLE_HOME/bin/ldapmodify -h <host> -p <port> -D “cn=orcladmin” -w <password> -f ldif_file_name

To clear OID in debug mode:

To clear the OID from debug mode, change the attribute values of both orcldebugflag and orcldebugop to 1 as shown below.

Create an ldif file with contents as shown below.

dn: cn=oid1,cn=osdldapd,cn=subconfigsubentry
changetype: modify
replace: orcldebugop
orcldebugop: 0

dn: cn=oid1,cn=osdldapd,cn=subconfigsubentry
changetype: modify
replace: orcldebugflag
orcldebugflag: 0

Run the ldap command $ORACLE_HOME/bin/ldapmodify -h <host> -p <port> -D “cn=orcladmin” -w <password> -f ldif_file_name

References: OID documentation

About the Author Mahendra

I am engulfed in Oracle Identity & Access Management domain. I have expertise on providing the optimized solutions for user provisioning, web access management, Single Sign-On and federation capabilities etc., I am also well versed with complex integrations within Identity Management and other product domains. I have expertise on building demos and implementation experience on products Oracle Access Manager, Oracle Adaptive Access Manager, Oracle Entitlement Server, Oracle Virtual Directory, Oracle Internet Directory etc., Look @ my blog: http://talkidentity.blogspot.com

Leave a Comment:

Not found