This document describes Bundle Patch 12.2.1.4.240603 for Oracle Unified Directory.
Note:
For issues documented after the release of OUD Bundle Patch 12.2.1.4.240603, log into My Oracle Support. In the Search Knowledge Base field, enter 2602696.1. This is the ID of the document that describes the Oracle Fusion Middleware 12.2.1.4.0 Known Issues.This readme document requires base installation of Oracle Unified Directory 12c (12.2.1.4.0). It includes the following sections:
1.1 New Features and Enhancements in OUD Bundle Patch 12.2.1.4.240603
Oracle Unified Directory 12.2.1.4.240603 BP includes the following new features and enhancements:
1.2 Understanding Bundle Patches
This section describes Bundle Patches and explains differences between Stack Patch Bundles, Bundle Patches, Interim Patches (also known as patch set exceptions), and Patch Sets.
1.2.1 Stack Patch Bundle
Stack Patch Bundle deploys the IDM product and dependent FMW patches using a tool. For more information about these patches, see Quarterly Stack Patch Bundles (Doc ID 2657920.1) at https://support.oracle.com.
1.2.2 Bundle Patch
A Bundle Patch is an official Oracle patch for Oracle Unified Directory. In a Bundle Patch release string, the fifth digit indicated the Bundle Patch number. Effective November 2015, the version numbering format has changed. The new format replaces the numeric fifth digit of the bundle version with a release date in the "YYMMDD" format where:
-
YY is the last 2 digits of the year
-
MM is the numeric month (2 digits)
-
DD is the numeric day of the month (2 digits)
Each Bundle Patch includes libraries and files that have been rebuilt to implement one or more fixes. All of the fixes in a Bundle Patch are tested and certified to work with one another. Each Bundle Patch is cumulative. That is, the latest Bundle Patch includes all fixes in earlier Bundle Patches for the same release.
1.2.3 Interim Patch
In contrast to a Bundle Patch, an Interim Patch addressed only one issue for a single component. Although each Interim Patch was an official Oracle patch, it was not a complete product distribution and did not include packages for every component. An Interim Patch included only the libraries and files that had been rebuilt to implement a specific fix for a specific component.
You may also know an Interim Patch as: security one-off, exception release, x-fix, PSE, MLR, or hotfix.
1.2.4 Patch Set
A Patch Set is a mechanism for delivering fully tested and integrated product fixes. A Patch Set can include new functionality. Each Patch Set includes the libraries and files that have been rebuilt to implement bug fixes (and new functions, if any). However, a Patch Set might not be a complete software distribution and might not include packages for every component on every platform. All of the fixes in a Patch Set are tested and certified to work with one another on the specified platforms.
1.3 Recommendations
Oracle has certified the dependent Middleware component patches for Identity Management products and recommends that Customers apply these certified patches. For more information on these patches, see the note Certification of Underlying or Shared Component Patches for Identity Management Products (Doc ID 2627261.1) at https://support.oracle.com.
1.4 Bundle Patch Requirements
Before you run OPatch, find the OPatch utility in the Oracle Home (ORACLE_HOME
) and verify that you have the latest version.
Complete the following steps before you apply the Bundle Patch:
-
Verify that the OPatch version is 13.9.4.2.13 or higher.
-
Access and log into My Oracle Support at the following location:
-
In the Search Knowledge Base field, enter 1587524.1. This is the ID of the document that describes Using OUI NextGen OPatch 13 for Oracle Fusion Middleware 12c.
-
In the search results, click the link corresponding to document ID 1587524.1.
-
In the document, click the Patch 28186730 link which will take you to the screen where you can obtain the OPatch 13.9.4.2.13 or higher version.
- After obtaining the OPatch, follow the instructions in the OPatch zip README file to upgrade it to the appropriate version.
-
-
Verify the OUI Inventory:
OPatch needs access to a valid OUI inventory to apply patches. Validate the OUI inventory with the following commands:
Unix
$ opatch lsinventory
Windows
opatch.bat lsinventory
If the command throws errors, then contact Oracle Support and work to validate and verify the inventory setup before proceeding.
-
Confirm the executables appear in your system
PATH.
Unix
$ which opatch
Windows$ which unzip
where opatch.bat
where unzip
If the command throws errors, then contact Oracle Support and work to validate and verify the inventory setup before proceeding. If either of these executables do not show in the
PATH
, correct the problem before proceeding. -
Create a location for storing the unzipped patch. This location will be referred later in the document as
PATCH_TOP
.
1.5 Before Applying the Bundle Patch
Before you apply the Bundle Patch for Oracle Unified Directory 12c (12.2.1.4.0), you must set the environment variable and stop all the Directory Server instances and domains.
Note:
You must read about the OUDSM auto redeployment instructions in Documentation Updates before applying this Bundle Patch.Note:
Before applying the Bundle Patch, you must take a tar backup of the configuration directory of an OUD instance. For example: asinst_1/OUD/config. If regular backups are not in place, then a complete cold backup/tar of entire OUD instance is recommended. Example:<Path to asinst_1>
.
You must complete the following prerequisites for applying the Bundle Patch:
-
Set the
ORACLE_HOME
environment variable for Oracle Middleware Home Location (where Oracle Unified Directory is installed).For example:
Unix
$ <bash> export ORACLE_HOME="Oracle Middleware Home Location"
Windows
<prompt> set ORACLE_HOME="Oracle Middleware Home Location"
-
Verify that the
ORACLE_HOME
is set correctly by running the following command.Unixls $ORACLE_HOME/OPatch/opatch
Windows
dir %ORACLE_HOME%\OPatch\opatch.bat
-
Stop all the Directory Server instances and domains where Oracle Unified Directory Services Manager (OUDSM) is installed, depending upon the domain configuration.
-
Stop the Standalone Oracle Unified Directory Server
If you installed Oracle Unified Directory in a Standalone Oracle Unified Directory Server (Managed independently of WebLogic Server) mode, stop all the Directory Server instances using the
stop-ds
command.UnixORACLE_HOME/INSTANCE_NAME/OUD/bin/stop-ds
Windows
ORACLE_HOME\INSTANCE_NAME\OUD\bat\stop-ds.bat
-
Stop the Collocated Oracle Unified Directory Server
If you installed Oracle Unified Directory in a Collocated Oracle Unified Directory Server (Managed through WebLogic Server) mode, complete the following steps:
- Stop the OUD instance by running the following command
from command line interface.
Unix
DOMAIN_HOME/bin/stopComponent.sh INSTANCE_NAME
Windows
DOMAIN_HOME\bin\stopComponent.bat INSTANCE_NAME
- Stop the Node Manager.
Unix
DOMAIN_HOME/bin/stopNodeManager.sh
Windows
DOMAIN_HOME\bin\stopNodeManager.cmd
- Stop the Oracle WebLogic Administration Server.
Unix
DOMAIN_HOME/bin/stopWebLogic.sh
Windows
DOMAIN_HOME\bin\stopWebLogic.cmd
- Stop the OUD instance by running the following command
from command line interface.
-
Stop the OUDSM Configured in a Single Domain
If you created and configured a WebLogic domain for OUDSM, then you must stop the Administration Server.
Stop the Oracle WebLogic Administration Server:
UnixDOMAIN_HOME/bin/stopWebLogic.sh
Windows
DOMAIN_HOME\bin\stopWebLogic.cmd
-
Stop the Oracle Directory Integration Platform and OUDSM Configured in a Single Domain
Note:
This is optional only for configurations with DIP/OUDSM in a Single Domain.If you added OUDSM and Oracle Directory Integration Platform in a single domain, you must stop the Admin Server and Managed Server.
-
Stop the Oracle Directory Integration Platform Managed Server:
UnixDOMAIN_HOME/bin/stopManagedWebLogic.sh <managed_server_name> <ADMIN_SERVER_URL>
Windows
DOMAIN_HOME\bin\stopManagedWebLogic.cmd <managed_server_name> <ADMIN_SERVER_URL>
Where
managed_server_name
specifies the name of the Managed Server (the default value iswls_ods1
) andADMIN_SERVER_URL
specifies the listen address (host name, IP address, or DNS name) and port number of the domain's Administration Server. -
Stop the Oracle WebLogic Administration Server:
UnixDOMAIN_HOME/bin/stopWebLogic.sh
Windows
DOMAIN_HOME\bin\stopWebLogic.cmd
-
-
Note:
See Understanding the Oracle Unified Directory Installation Directories to know about OUD installation directories.1.6 Using the Oracle Patch Mechanism (OPatch)
Use OPatch to perform the necessary steps for applying a patch to an Oracle Home.
Note:
You must have the latest version of OPatch (version 13.9.4.2.13 or higher) from My Oracle Support. OPatch requires access to a valid Oracle Universal Installer (OUI) Inventory to apply patches. The patching process uses both unzip and OPatch executables. After sourcing the ORACLE_HOME
environment, Oracle recommends that you confirm that both of these exist before patching. OPatch is accessible at:
$ORACLE_HOME/OPatch/opatch
When OPatch starts, it validates the patch to ensure there are no conflicts with the software already installed in your $ORACLE_HOME:
- If you find conflicts with a patch already applied to the
$ORACLE_HOME
, stop the patch installation and contact Oracle Support Services. - If you find conflicts with a subset patch already applied to the
$ORACLE_HOME
, continue Bundle Patch application. The subset patch is automatically rolled back before installation of the new patch begins. The latest Bundle Patch contains all fixes from the previous Bundle Patch in$ORACLE_HOME
.
This Bundle Patch is not -auto
flag enabled. Without the -auto
flag, no servers need to be running.
See Also:
Patching with OPatchIdentifying the Version of OPatch Included with Oracle Unified Directory 12c
In general, there is a version of OPatch available for each version of the Oracle Universal Installer software.
- Change directory to the following
directory:
cd ORACLE_HOME/OPatch/
- Run the following command:
./opatch version
For example:
./opatch version OPatch Version: 13.9.4.2.13 OPatch succeeded.
1.7 Applying the Bundle Patch
Unzip the patch zip file and run OPatch to apply the patch.
ORACLE_HOME
.
-
Conflicts with a patch already applied to the
ORACLE_HOME
.In this case, stop the patch installation, and contact Oracle Support Services.
-
Conflicts with subset patch already applied to the
ORACLE_HOME
.In this case, continue the install, as the new patch contains all the fixes from the existing patch in the
ORACLE_HOME
.
1.8 After Applying the Bundle Patch
You need to perform certain tasks after applying the Bundle Patch.
1.9 Creating the File Based Access Control Log Publisher
You can create a File Based Access Control Log publisher for diagnosing ACI evaluation.
Note:
The steps mentioned in this section are optional.The File Based Access Control Log publisher should be disabled as soon as diagnostic is over as it impacts server performance.
Note:
Once this publisher is created, the de-installation of this patch will not be possible as the server would no longer be able to start.To create the File Based Access Control Log publisher, a server administrator must invoke the following dsconfig
command against a server instance that is already up and running:
dsconfig create-log-publisher \ --publisher-name "ACI logger" \ --type file-based-access-control \ --set enabled:true \ --set log-file:logs/acilog \ --hostname serverHostName --port 4444 \ --trustAll --bindDN cn=Directory\ Manager \ --bindPasswordFile passwordFile \ --no-prompt
The following entry is created in the config.ldif:
server
configuration file:
dn: cn=ACI logger,cn=Loggers,cn=config objectClass: ds-cfg-log-publisher objectClass: ds-cfg-access-control-log-publisher objectClass: ds-cfg-file-based-access-control-log-publisher objectClass: top ds-cfg-enabled: true ds-cfg-java-class: org.opends.server.loggers.accesscontrol.TextAccessControlLogPublisher ds-cfg-asynchronous: true cn: ACI logger ds-cfg-log-file-permissions: 640 ds-cfg-log-file: logs/acilog
1.10 Removing the Bundle Patch
If you experience any problems after installing the Bundle Patch, you can remove the Bundle Patch.
Note:
Before you remove the Bundle Patch, ensure that you shutdown Oracle Unified Directory, WebLogic Administration Server, and Node Manager. For more information, refer Before Applying the Bundle Patch.Execute the following commands to remove the Bundle Patch:
1.10.1 Post Action After Rollback
After roll-back, restore respectively either the configuration and schema from the backup (by restoring the configuration directory of the OUD instance) or the OUD instance complete tar backup (if available), before you start an OUD instance.
1.11 Resolved Issues
This section lists the issues resolved in 12c (12.2.1.4.0) Release.
- Resolved Issues in OUD Bundle Patch (12.2.1.4.240603)
- Resolved Issues in OUD Bundle Patch (12.2.1.4.240319)
- Resolved Issues in OUD Bundle Patch (12.2.1.4.230928)
- Resolved Issues in OUD Bundle Patch (12.2.1.4.230406)
- Resolved Issues in OUD Bundle Patch (12.2.1.4.221009)
- Resolved Issues in OUD Bundle Patch (12.2.1.4.220405)
- Resolved Issues in OUD Bundle Patch (12.2.1.4.211008)
- Resolved Issues in OUD Bundle Patch (12.2.1.4.210406)
- Resolved Issues in OUD Bundle Patch (12.2.1.4.200827)
- Resolved Issues in OUD Bundle Patch (12.2.1.4.200526)
- Resolved Issues in OUD Bundle Patch 12.2.1.4.200204
1.11.1 Resolved Issues in OUD Bundle Patch (12.2.1.4.240603)
The following table lists the issues resolved in OUD Bundle Patch 12.2.1.4.240603:
Table 1-1 Issues Resolved in 12c Release 12.2.1.4.240603
Bug Number | Description |
---|---|
35902509 | CVE-2023-36478 |
1.11.2 Resolved Issues in OUD Bundle Patch (12.2.1.4.240319)
The following table lists the issues resolved in OUD Bundle Patch 12.2.1.4.240319:
Table 1-2 Issues Resolved in 12c Release 12.2.1.4.240319
Bug Number | Description |
---|---|
35741913 | CUSTOMIZE MESSAGE TEMPLATE FILES ARE UNDER $OUD_INSTANCE/OUD/CONFIG/MESSAGES |
35708773 | SORTING ORDER OPTION IN LDAPSEARCH OUTPUT FOR A MULTIVALUED ATTRIBUTES |
34743083 | OUD QUERY FOR "VERSION ATTRIBUTE STRING" IS DIFFERENT THAN ODSEE. |
34760868 | CUSTOMIZING THE SERVER.OUT FILE RECORDS TO ADD INSTANCE NAME. |
33551848 | REPLICATION DOMAIN RE-APPEARS IN ECL COOKIE MODE AFTER REMOVAL FROM REPLICATION |
33160429 | OUD REPLICATION SERVER IS LIMITED TO 128 CONNECTIONS |
35574518 | OUD12CPS4: NPE FOR MULTIPLE CHANGES ON SAME ATTRIBUTE (ON SAME DN) INTO SAME MOD |
35636446 | OUD12CPS4: NPE: NULLPOINTEREXCEPTION (ACCESSLOGPUBLISHER.JAVA: |
35915586 | OUD LOCKTIMEOUTEXCEPTION: LOCK EXPIRED ON TOMBSTONE PURGE WAITED FOR READ LOCK |
1.11.3 Resolved Issues in OUD Bundle Patch (12.2.1.4.230928)
The following table lists the issues resolved in OUD Bundle Patch 12.2.1.4.230928:
Table 1-3 Issues Resolved in 12c Release 12.2.1.4.230928
Bug Number | Description |
---|---|
35155826 | OUD METRICS ARE NOT PROPERLY FORMATTED |
35398216 | OUD COLLECTIVE ATTRIBUTES NOT ADDING ALL REQUIRED ATTRIBUTES |
35385421 | DSREPLICATION ENABLE-CHANGELOG FAIL DUE WRONG INDEX IN KMS ARRAY |
35470364 | REBUILD-INDEX --REBUILDALL CORRUPTS INDEXES WITH JAPANESE CHARACTERS ON A JAPANESE WINDOWS VERSION. |
19561137 | Fix for Bug 19561137 |
35358723 | CVE-2021-28165 |
34748606 | "COULD NOT DECRYPT AN ATTRIBUTE" ERROR AFTER APPLYING OUD BP 12.2.1.4.221009 |
33858063 | ADDING IDLE-TIMEOUT FEATURE TO QOS POLICIES/NETWORK GROUP - OUD PROXY |
34965896 | SYMMETRIC KEYS CANNOT BE DECODED |
31008920 | ER OUD - AUTOMATE TRIMMING OF BACKUP.INFO FILE AND REMOVAL OF OLD BACKUPS |
35540014 | PERFORMANCE SEVERELY AFFECTED AFTER ENABLING PRIVILEGE VIRTUAL ATTRIBUTES AND VIRTUAL ATTRIBUTE |
34901825 | CUSTOMER IS REPORTING A POSSIBLE SECURITY ISSUE |
33920490 | VLV INDEX LOGGING |
35278836 | DSREPLICATION INIT SHOWING "THEY ARE POTENTIALLY STOPPED OR TOO SLOW" ERROR |
35752862 | OUD - OAM - OAUTH 2.0 SUPPORT FOR OUD REST BACKEND APIS |
1.11.4 Resolved Issues in OUD Bundle Patch (12.2.1.4.230406)
The following table lists the issues resolved in OUD Bundle Patch 12.2.1.4.230406:
Table 1-4 Issues Resolved in 12c Release 12.2.1.4.230406
Bug Number | Description |
---|---|
34669884 | OUD PROXY INSTANCE CORRUPTS OUTPUT OF USERCERTIFICATE ATTRB. |
34661482 | CHANGELOGDB SIZE IS TOO HIGH IN ONE OF THE SERVER IN REPLICATION GROUP. |
34513966 | QOS ENHANCEMENT FOR INTERNAL CONTEXT ACCESS (LIKE CHANGELOG DB) |
34748268 | DUPLICATE "MODIFIERSNAME" AND "MODIFYTIMESTAMP" IN USER ENTRY AND GROUP ENTRY |
34951663 | NULLPOINTEREXCEPTION (NPE) WHEN RUNNING VERIFY-INDEX, REBUILD-INDEX, OR DBTEST |
34769296 | ACI EVALUATION CHANGES OVER TIME |
34778119 | FILTER-TO-INCLUDE CAUSES SEARCH TO FAIL WITH ERROR 50 |
34719962 | OUD 12C SEARCH FILTER IGNORES BAD ENTRYDN VALUE TO PERFORM SEARCH |
34477930 | POOR SEARCH PERFORMANCE OBSERVED WITH "LDAPSEARCH" CASEEXACTMATCH |
34427815 | REQUEST FOR ADDITIONAL SNMP TRAPS TO BE INCLUDED WITH OUD |
34964109 | OUD BUG 26141190 FIX IS BROKEN IN PS4 AS IT SENDS PASSWORD EXPIRED POLICY CODE |
33585017 | ACI EVALUATION ENGINE OF CHILD SUFFIX NOT WORKING AFTER REINDEX OF PARENT SUFFIX |
33647244 | OUD REPLICATION SERVER CONNECT TIMEOUT IS HARD CODED TO 500MSEC |
34460281 | NODEMANAGER FAILS TO MANAGE OUD INSTANCE AFTER RESTART OF NODEMANAGER |
34951280 | CONT'D FROM BUG 34460281 - NEED A FIX TO WITH SAVED/UNUSED INSTANCES AS WELL |
29759915 | OUDSM CANNOT ASSIGN A NON-NUMERIC OID LIKE THE STRING VALUE "ATTRIBUTENAME-OID" |
34244811 | OUD MULTI VALUED ATTRIBUTE IS NOT TAKING MORE THAN ONE VALUE UNTIL RESTART. |
34533876 | REST JETTY SERVER 30S TIMEOUT SHOULD BE ABLE TO BE CHANGED |
1.11.5 Resolved Issues in OUD Bundle Patch (12.2.1.4.221009)
The following table lists the issues resolved in OUD Bundle Patch 12.2.1.4.221009:
Table 1-5 Issues Resolved in 12c Release 12.2.1.4.221009
Bug Number | Description |
---|---|
34536207 | CHANGING ACCESS LOG FORMAT MODE FOR HTTP ADMIN LOGGER DOES NOT SHOW COMPLETE ERROR MESSAGE IN CASE OF FAILURE. |
34465429 | OUD RDBMS MYSQL QUERY HANG |
34143081 | OUDSM IS NOT ALLOWING TO CREATE ATTRIBUTE WITH UNDERSCORE ('_') CHARACTER |
33803966 | MAKE JETTY LOG LEVEL CONFIGURABLE |
34011413 | ENHANCE VIRTUAL ATTRIBUTE HANDLING FOR ACI IN USER ENTRY CACHE |
31097732 | OUD 12C - MODIFY LOGGING OF /TMP/OUD-REPLICATION AND /TMP/OUD-STATUS FILES |
26963341 | OUD11G - ER PROXY DOES NOT TRANSFORM THE ORCLGUID TO OBJECTGUID VALUE ON SEARCH |
33793294 | OUD 12C ABILITY TO LOG TLS CONNECTIONS TO HTTP ACCESS LOG |
29416071 | OUD 12C ABILITY TO LOG TLS CONNECTIONS TO STANDARD ACCESS LOG |
31737231 | IMPLEMENT CONTROL FILTERING APPROACH TO FILTER OUT UNDESIRED CONTROLS FROM THE REQUEST |
33690183 | HIGH RESPONSE TIME AND CONCURRENTMODIFICATIONEXCEPTION ON OUD PROXY SERVER |
33806327 | OUD 12.2.1.4.211008 TAKES A LONG TIME TO DELETE A OBJECTCLASS=LDAPSUBENTRY ENTRY |
34249006 | "SIGNED " VERSION OF THE OIDPWDCN.DLL FOR ORACLE UNIFIED DIRECTORY |
33886328 | OUD REPLICATION GATEWAY ADMIN-BACEND.LDIF DISAPEARED |
33359196 | FORK JOIN WFE WITH LEFT-OUTER JOIN ISSUE |
33811580 | DEFINED VIRTUAL ATTRIBUTES NOT INHERITED BY GROUP-DN |
33434640 | NULLPOINTEREXCEPTION DURING BINDOPERATION |
33438452 | USING LOG-CONNECTION-DETAILS ENABLED THROWS NULLPOINTER |
33690457 | DELETED VALUES REAPPEAR IN MULTIVALUED ATTRIBUTE IN A REPLICATED OUD |
1.11.6 Resolved Issues in OUD Bundle Patch (12.2.1.4.220405)
The following table lists the issues resolved in OUD Bundle Patch 12.2.1.4.220405:
Table 1-6 Issues Resolved in 12c Release 12.2.1.4.220405
Bug Number | Description |
---|---|
33593111 | ENCRYPT NEWLY ADDED ATTRIBUTE AND/OR SUFFIX FOR ATTRIBUTE ENCRYPTION |
31087872 | FIX FOR BUG 31087872 |
28176112 | REPLACE DEPRECATED API'S OF JETTY WITH RECOMMENDED |
33496397 | ANT PRECOMMIT ON OUD MAIN FAILS DUE TO MISSING MESSAGES |
33625029 | DATA ATTRIBUTE ENCRYPTION CONFIG VALIDATION AND REENCRYPT TASK TO CONSIDER ONLY THE REQUIRED SUFFIXES FOR RE-ENCRYPTION |
33818980 | ENHANCE VIRTUAL ATTRIBUTE HANDLING IN USER ENTRY CACHE |
33716315 | REENCRYPT TASK TO HANDLE CANCELLATION OF RECURRING TASK AS WELL AS INDIVIDUAL SCHEDULED TASK. |
30784370 | INCORRECT OUDSM VERSION IN 12.2.1.4 : POSSIBLE REGRESSION OF BUG :30248015 |
32656018 | --PROPERTIESFILEPATH" IS NOT WORKING WITH OUD STATUS COMMAND |
32283362 | OUD DOES NOT RESPECT SIZE LIMITS WHEN USING PROXY AUTHORIZATION |
32576057 | OUD 12C USER PASSWORD POLICY ATTRIBUTES NOT REMOVED FROM UNTRUSTED REPLICA |
33377025 | MODIFICATIONS RESULTS IN 2 PWDFAILURETIME ATTRIBUTES WHILE REPLICATION WORKS. |
32577340 | OUD - UPDATES TO SCHEMA NOT BEING WRITTEN OUT TO 99USER.LDIF |
33276603 | OUD 12.2.1.4 REPLICATION GATEWAY REPLICATING INCOMPLETE TOMBSTONES FROM ODSEE 11 |
33277588 | CREATE-PASSWORD-VALIDATOR --TYPE CHARACTER-SET DISPLAYS AN EXTRA CHARACTER WHEN AND EXCLUED CHARACTER IS ENCOUNTERED |
33517788 | OUD12C: ISMEMEBEROF FILTER DOES NOT WORK AS EXPECTED |
33521773 | AD EXTENSION DOWN AFTER APPLYING THE LATEST OUD BP 33448950 12.2.1.4.211008 |
Note:
As part of this bundle patch, Entry Cache is enabled by default for OUD instances created after applying the patch. However, if in your deployment scenario, Entry Cache is not required, then you can disable it after creating the instance using thedsconfig
command.
1.11.7 Resolved Issues in OUD Bundle Patch (12.2.1.4.211008)
The following table lists the issues resolved in OUD Bundle Patch 12.2.1.4.211008:
Table 1-7 Issues Resolved in 12c Release (12.2.1.4.211008)
Bug Number | Description |
---|---|
33340220 | OUD 12CPS4 OCT'21 BP - DSREPLICATION ENABLE FAILING WITH NEW LISTENADDRESS1 PARAMETER |
32643974 | OUD 12C ACI NOT EVALUATED PROPERLY W/SASL EXTERNAL AND OBJECTCLASS=GROUPOFURLS |
33055228 | REPLICATION NULLPOINTEREXCEPTION CAUSED BY CONFLICTS-HISTORICAL-PURGE-DELAY AND REPLICATION-PURGE-DELAY |
25719578 | LEVERAGE STRING CONSTANT POOL FOR ACI PERFORMANCE |
27870572 | OUD11G -SUPPORT MULTI VALUE ATTRIBUTE LIKE GROUP MEMBERSHIP IN CASE OF RDBMS |
32814167 | DSCONFIG COMMANDS SHOULD NOT HAVE --RESET KEY-STORE-PIN-FILE |
32958797 | ANALYSIS OF PERFORMANCE ISSUE FOR BUG 32532350 |
32959469 | SUPPORT FOR GCM, AES OPTIONS ETC. FOR ATTRIBUTE ENCRYPTION |
32959482 | SUPPORT CUSTOM PASSWORD STORAGE SCHEMES |
32288501 | OUD PROXY- LOAD BALANCING ALGORITHM NOT DETECTING DISABLED BACKENDS |
32488611 | "LOG-CONNECTION-DETAILS" ENABLED THROWS "NULLPOINTEREXCEPTION" |
32440224 | LAST-LOGIN-TIME FOR REPLICATED SERVERS LOCATED IN DIFFERENT TIMEZONES |
32477736 | REPLICATION INITIALIZE FAILS ON BASE DN CONTAINING SLASH CHAR |
32690984 | CERTIFICATES GET CORRUPTED THROUGH THE REPLICATION GATEWAY:ODSEE-OUD 12.2.1.4 |
32441706 | OUD12.2.1.4.0:PASSWORD POLICY ALLOWING TO RE-USE OLD PASSWORDS STORED IN PWDHIST |
32968947 | OUD KERBEROS PTA /TMP FILE JAASXXXXXXXXXXXXXXXXXXX.CONF |
31852977 | OUD SHOULD USE SHA256 ALGORITHM IN ALL CASES WHERE AUTO CERTIFICATES ARE GENERATED |
32130922 | OUD 12C FORKJOIN LDAPSEARCH FAILS WITH COMPLEX FILTER |
32038977 | OUD REPLICATION STOPPED WHILE BATCH DELETING WITH MANAGEDSAIT CONTROL |
31661241 | NEED TO DEFINE LISTEN-ADDRESS FOR REPLICATION SERVER |
1.11.8 Resolved Issues in OUD Bundle Patch (12.2.1.4.210406)
The following table lists the issues resolved in OUD Bundle Patch 12.2.1.4.210406:
Table 1-8 Issues Resolved in 12c Release (12.2.1.4.210406)
Bug Number | Description |
---|---|
32562107 | ODSEE-OUD 12.2.1.4 CERTIFICATES GET CORRUPTED THROUGH THE REPLICATION GATEWAY |
25471403 | FIX FOR 25471403 |
31851470 | OUD 12C: ISMEMBER SEARCH RECEIVES STACKOVERFLOWERROR |
29651080 | REPLICATION SUMMARY SHOWS INCORRECT DATA WITH OEM13C AND OUD 12.2.1.3.0 |
31745920 | OUD UNION PROXY SEARCHES RECEIVE A RESULT=4 WHEN PAGE-SIZE=0 FOR WFE |
30513440 | SUPPORT PASSWORD VALIDATORS AND GENERATORS IN SUBENTRY PASSWORD POLICY |
29530047 | PASSWORD VISIBLE IN ACCESS LOG FOR DB WORKFLOWS |
32547317 | FORWARD MERGE OF BUG 29376960 TO MAIN VIEW |
32208265 | CRYPTO MANAGER ORDERS CIPHERS ALPHABETICALLY (DIFFERENT THEN OTHER SSL HANDLERS) |
32065140 | REPLICATION IGNORES SCHEMA VIOLATION |
31546491 | CPU SPIKES AND UTILIZATION RESULTING IN TIMETHREAD ERROR |
31878749 | STACKING TRANSFORMATIONS MODIFIY OPERATION FAILS |
31931564 | OUD 12C - LOG-CONNECTION-DETAILS CONFIG INCORRECTLY SHOWING IN FILE BASED AUDIT LOGGER MENU |
32019006 | SUPPORTING PWDMINLENGTH IN PASSWORD POLICY AT SUBENTRY LEVEL |
30666508 | NPE WHEN EXECUTING LDAPSEARCH ON OUD PROXY WITH PAGESIZE SET IN LDAPSERVEREXTENSION |
31666925 | THE OUD-SETUP SCRIPT DOES NOT RECOGNIZE A EXABYTE FS |
1.11.9 Resolved Issues in OUD Bundle Patch (12.2.1.4.200827)
The following table lists the issues resolved in OUD Bundle Patch 12.2.1.4.200827:
Table 1-9 Issues Resolved in 12c Release (12.2.1.4.200827)
Bug Number | Description |
---|---|
28401694 | ADD OPTION FOR ADDITIONAL BINDDN, CLIENTIP, AND PROTOCOL TO LOGGERS |
29868285 | OUDSM CRASHES WHEN ACCESSING CORE CONFIG, WITH LATEST BP 28569189 |
30386441 | (JE 7.0.7) INTERRUPTEDEXCEPTION MAY CAUSE INCORRECT INTERNAL STATE |
30403293 | CANNOT UPGRADE 11G BECAUSE OF THE "DS-CFG-FETCH-AUTHENTICATED-USER" PROPERTY |
30767720 | EXCLUDE SEARCH FILTER IN WORKFLOW CONFIG RETURNS RESULT: 50 OR 80 |
30832284 | OUD 12C VIRTUAL ATTRIBUTE SUB CONTAINER PASSWORD POLICY INCONSISTENTLY APPLIED |
30871004 | OUD 12.2.1.4 RETURN-BIND-ERROR-MESSAGES=TRUE NOT WORKING |
30963266 | OUD 12C PASSWORD INVALID WHEN USING BRACE SPECIAL CHARACTER |
31013245 | ER OUD - S_CONN VALUES IN PROXY ACCESS LOGS SHOULD SHOW HOSTNAME OF DS SERVER |
31239817 | UNION WF DOES NOT SHOW OUTPUT IN DATA BROWSER TAB OF OUDSM |
31246776 | OUD12CPS4: COMPLEX QUERIES USING NONEXISTING GROUP MEMBERSHIP RETURN ALL USERS |
31336975 | UNABLE TO ADD OR MODIFY OBJECT CLASSES AND ATTRIBUTES TO OUD 12C PS4 |
31377876 | REBUILD-INDEX DISABLES BACKEND WHEN USING MIXED DEFINED/NOTDEFINED ATTRIBUTES |
31490532 | OUD 12CPS4 JULY2020 BP - UPGRADE OF 12CPS3JULY'20 BP OUD DS INSTANCE TO 12CPS4JULY'20 BP IS FAILING |
1.11.10 Resolved Issues in OUD Bundle Patch (12.2.1.4.200526)
The following table lists the issues resolved in OUD Bundle Patch 12.2.1.4.200526:
Table 1-10 Issues Resolved in 12c Release (12.2.1.4.200526)
Bug Number | Description |
---|---|
29971908 | OUD 12C - DSREPLICATION STATUS IGNORES -I ADMINUID WHEN SPECIFIED VIA CLI |
30668734 | UNABLE TO USE UNDERSCORES IN DNS |
30012998 | SETTING DEPRECATED PASSWORD STORAGE SCHEME AND ADMIN PWD RESET CLEARS PWDRESET |
28467589 | START-DS IN DMZ SLOW |
30854158 | CODE CORRECTION FOR BUG 29676093 |
29757041 | OUD 12C: DIGEST-MD5 SASL AUTH FAILS WITH LDAP 80 IF SEARCHING JOIN VIEW CONTEXT |
30651541 | OUD 12C - CUSTOM PASSWORD POLICY AND VALIDATOR IGNORED ON ACCOUNT CREATION |
30440259 | OUD INVALID PWDGRACEUSETIME ATTRIBUTE CREATED BY EUS. |
30521914 | AFTER INITIALIZATION THE RGW STATUS SHOWS AS "BAD DATA SET" |
30534318 | OUD 11G: HIGH CPU AND CAUSING LOSS OF SERVICE |
29026772 | ISSUE WITH FORCE-CHANGE-ON-ADD AFTER APPLYING BUNDLE PATCH 11.1.2.3.181016 |
1.11.11 Resolved Issues in OUD Bundle Patch 12.2.1.4.200204
The following table lists the issues resolved in OUD Bundle Patch 12.2.1.4.200204:
Table 1-11 Issues Resolved in OUD Bundle Patch 12.2.1.4.200204:
Bug Number | Description |
---|---|
30645038 | OUD 12.2.1.3 JAN'20 BP - COUPLE OF NEWLY ADDED CORE-ENTRYCACHE TESTS FAILING IN FARM EXECUTION |
30265103 | OUD11G - BEFORE BP DS-RLIM-IDLE-TIME-LIMIT ATT. WAS IN SECS AFTER BP IS MS |
30367492 | UNINSTALL FAILS DUE TO RESOLVING HOST TO 0.0.0.0 |
29885985 | OUD ALLOWS ADDING USER INTO GROUP EVEN IF USER DOESN'T EXIST WHEN RI IS ENABLED |
29661762 | CUSTOM PASSWORD POLICIES REQUIRE A INDIVIDUAL "PASSWORDSTORAGESCHEME" |
30074000 | Fix for Bug 30074000 |
29682036 | FORKJOIN WFE WITH LEFT-OUTER-JOIN DOES NOT WORK |
28135591 | UNABLE TO SPECIFY A DENIED-CLIENT HOSTNAME THAT BEGINS WITH A NUMERIC VALUE |
29945677 | ISMEMBEROF SUBSTRING SEARCH FILTER RETURNS NO ENTRIES |
30094884 | REGRESSION FOR BUG 29724794 |
29418242 | (JE 7.0.7) ENVIRONMENT MUST BE CLOSED, CAUSED BY: COM.SLEEPYCAT.JE.THREADINTERRU |
1.12 Known Issues and Workarounds
For known issues and workarounds, log in to My Oracle Support, and then search for 2602696.1 or 2636943.1, which is the ID of the document, Oracle Fusion Middleware 12.2.1.4.0 Known Issues.
For Known Issues specific to Oracle Unified Directory Bundle Patches, search for Doc ID 2636943.1 in My Oracle Support.
For information about OPatch issues, log in to My Oracle Support and use the OPatch version provided with the product.
1.13 Documentation Updates
This section describes documentation updates for this release.
OUDSM Auto Redeployment Instructions
oudsm.ear
file is shipped along with the OUD Bundle Patch. (bppatchnumber/files/oracle.idm.oud.odsm/12.2.1.4.0/oracle.idm.oud.odsm.symbol/odsm/oudsm.ear)
A new oudsm.ear
file is included with OUD Bundle Patch 12.2.1.4.240319 would be patched at the following location:
$ORACLE_HOME/oud/odsm/oudsm.ear
When you restart the Server for the first time after applying the patch, it will
automatically redeploy the new oudsm.ear
file. Therefore, you might
experience a slower restart of the Server. You must look at the logs related to
oudsm.ear
file deployment.
If for any reason the oudsm.ear
file deployment fails during the
first restart of the Server, then you manually need to redeploy the file.
1.14 Related Documents
For more information, see the following resources:
-
Oracle Fusion Middleware Documentation
This contains documentation for all Oracle Fusion Middleware 12c products.
-
This site contains additional documentation that is not included as part of the documentation libraries.
1.15 Documentation Accessibility
For information about Oracle's commitment to accessibility, visit the Oracle Accessibility Program website at http://www.oracle.com/pls/topic/lookup?ctx=acc&id=docacc
.
Access to Oracle Support
Oracle customers that have purchased support have access to electronic support through My Oracle Support. For information, visit http://www.oracle.com/pls/topic/lookup?ctx=acc&id=info
or visit http://www.oracle.com/pls/topic/lookup?ctx=acc&id=trs
if you are hearing impaired.
Oracle Fusion Middleware Oracle Unified Directory Bundle Patch Readme, 12c (12.2.1.4.240603)
F99446-01
July 2024