{"id":2559,"date":"2011-06-27T16:02:56","date_gmt":"2011-06-27T20:02:56","guid":{"rendered":"http:\/\/onlineappsdba.com\/index.php\/2011\/06\/27\/how-to-delete-entries-in-oid-11g-in-bulk-delete-failed-ldap-error-code-66-not-allowed-on-non-leaf\/"},"modified":"2011-06-28T04:24:36","modified_gmt":"2011-06-28T08:24:36","slug":"how-to-delete-entries-in-oid-11g-in-bulk-delete-failed-ldap-error-code-66-not-allowed-on-non-leaf","status":"publish","type":"post","link":"https:\/\/onlineappsdba.com\/index.php\/2011\/06\/27\/how-to-delete-entries-in-oid-11g-in-bulk-delete-failed-ldap-error-code-66-not-allowed-on-non-leaf\/","title":{"rendered":"How to delete Entries in OID 11g in Bulk – Delete Failed : Ldap Error Code 66 Not allowed on Non-Leaf"},"content":{"rendered":"

<\/a><\/p>\n

Entries in LDAP Server (OID) are stored in tree like structure. You can delete an entry OID 11g using ODSM<\/a>\u00a0but if you try to delete an entry which contains sub-entry then you will get error message like “LDAP Error Code 66 Not allowed on Non-Leaf<\/strong> ” (11.1.1.4 and lower) . You should first delete lowest level of tree (leaf) and then go all the way up to delete entries via ODSM. What if you have approx. 10\/15 levels for an entry or wish to delete entries in OID in Bulk (all users\/groups or subset of users\/groups) ?<\/p>\n

Simple answer is bulkdelete<\/strong> which is LDAP command. In this post I am going to show how to delete entries OID 11g in bulk or recursively<\/p>\n

1.<\/strong> Set Environment Variable ORACLE_HOME<\/strong> and ORACLE_INSTANCE <\/strong>for OID 11g<\/p>\n

export ORACLE_HOME=\/u01\/oracle\/fmw\/Oracle_IDM1
\nexport ORACLE_INSTANCE=\/u01\/oracle\/fmw\/asinst_1<\/p>\n

2. <\/strong>Shutdown OID using OPMNCTL \u00a0(OID should be down during bulkdelete or entry caching should be disabled<\/font>)<\/p>\n

$ORACLE_INSTANCE\/bin\/opmnctl stopall<\/p>\n

3<\/strong>. Run bulkdelete with entry which you want to delete in OID (command will delete all child entry under that)<\/p>\n

$ORACLE_HOME\/ldap\/bin\/bulkdelete connect=connect_string {[basedn=Base_DN] | [file=file_name]}<\/p>\n

$ORACLE_HOME\/ldap\/bin\/bulkdelete connect=oiddb basedn=”ou=service,cn=users,dc=mydomain,dc=co,dc=uk” (Here oiddb is TNS name defined by default in $ORACLE_INSTANCE\/network )<\/p>\n

Provide ODS schema password when prompted<\/font><\/p>\n

You should see output like XXX Entries have been deleted<\/p>\n

b)<\/strong> If you want to delete multiple entries (under different location in one go) then create a file delete.ldif with entry like<\/p>\n

ou=user1,cn=users,dc=mydomain,dc=co,dc=uk
\nou=user2,cn=users,dc=mydomain,dc=co,dc=uk
\ncn=group1,cn=groups,dc=mydomain,dc=co,dc=uk<\/p>\n

Here “ou=user1,cn=users,dc=mydomain,dc=co,dc=uk” is Distinguished Name (DN) of entry which you wish to delete (Change DC as per your OID setup<\/font>)<\/p>\n

and run
\n$ORACLE_HOME\/ldap\/bin\/bulkdelete connect=oiddb file<\/strong>=delete.ldif<\/p>\n

Provide ODS schema password when prompted<\/p>\n

You should see output like XXX Entries have been deleted<\/p>\n

4.<\/strong> Start OID, $ORACLE_INSTANCE\/bin\/opmnctl startall<\/p>\n

.<\/p>\n

References<\/u><\/strong><\/p>\n