Search Results ldap_synch

Overview

WF_LDAP is the Oracle Workflow integration package for Oracle Internet Directory (OID), the LDAP directory server bundled with Oracle Application Server and Oracle Fusion Middleware. In Oracle EBS 12.1.1 and 12.2.2 the package body encapsulates the low-level DBMS_LDAP calls that keep Workflow directory objects synchronized with the enterprise LDAP directory. Its primary business role is subscription-based change notification: Workflow registers itself as a subscriber to the OID ChangeLog, receives notification events, and then reconciles OID entries (users, roles, group memberships and related attributes) with the EBS Workflow directory tables. The identifier derived in the package header — cn=WF_SYNCH_<database_id>,cn=Subscriber Profile,cn=ChangeLog Subscriber,cn=Oracle Internet Directory — is the ChangeLog subscription distinguished name used for this purpose, which is why searches for "ldap_synch" typically surface this object.

Key Procedures and Functions

The ETRM metadata for release 12.2.2 records zero formally documented public procedures or functions, and the package is classified as OTHER rather than as a published API. The excerpted source nevertheless exposes two routines that define the package's character.

• cs_convert — a private helper that converts incoming OID attribute values from UTF8 into the local database character set. It lazily derives the local charset from userenv('LANGUAGE'), passes values through unchanged when the database character set is UTF8, and otherwise invokes SQL CONVERT. On failure it records context through wf_core.context and re-raises, preserving the Workflow error stack.
• dump_ldap_msg — a private diagnostic routine that walks a DBMS_LDAP message structure and writes its attribute/value contents for troubleshooting. The body of the routine is a no-op stub in the shipped code, with the emitting logic commented out, so it is invoked only when targeted debugging of LDAP message payloads is required.

Both routines are declared private; no external application should call them directly. Synchronization entry points are reached through the package's internal LDAP session handling rather than through a documented PL/SQL API.

Tables Accessed

The ETRM metadata lists four objects referenced through APPS synonyms.

• DBMS_LDAP — the Oracle-supplied PL/SQL LDAP client library. WF_LDAP binds to OID, searches entries and processes search results using DBMS_LDAP session, message and BER element types.
• WF_ATTRIBUTE_CACHE — the Workflow attribute cache. It is used to validate and translate directory attribute names, ensuring that OID attribute values map onto attributes understood by the Workflow directory model before they are applied.
• DBMS_JOB — the job scheduler. Synchronization work is submitted and run as scheduled database jobs, which is how recurring LDAP polling or change processing is driven in this release.
• PLITBLM — the PL/SQL implementation table used for associative array and bulk collection handling of the multi-valued attribute sets returned by LDAP searches.

Usage Notes

WF_LDAP is infrastructure rather than a user-facing interface, and it is not exposed on an Oracle EBS form. It is invoked indirectly when Workflow directory synchronization is enabled and an OID ChangeLog subscription exists: a scheduled DBMS_JOB session connects to the directory, retrieves pending changes for the WF_SYNCH subscriber, converts attribute values through cs_convert and applies them to Workflow directory data. Because the package is not a documented API, customizations should never call its routines directly; instead, administrators control behavior through OID registration and Workflow directory synchronization configuration. When diagnosing synchronization failures in 12.1.1 or 12.2.2, DBMS_OUTPUT from dump_ldap_msg and wf_core error context from cs_convert are the principal diagnostic signals, and the subscription DN should be verified against the current database_id.