AnsweredAssumed Answered

Invalid DN Syntax Error - AD Account Creation

Question asked by Jesvin Joseph on Jan 22, 2018
Latest reply on Jan 23, 2018 by Pradeep Kadambar

Like • Show 0 Likes0
Comment • 5

Getting the below error message during AD account creation process for certain users. We are using L&G 7.0 P05

AFX reports this item failed with code [-1] and message: 'LDAPException: Invalid DN Syntax (34) Invalid DN Syntax LDAPException: Server Message: 00000057: LdapErr: DSID-0C090E21, comment: Error in attribute conversion operation, data 0, v2580 LDAPException: Matched DN: '. If available, another handler will be used to fulfill this item.

Can someone please advise what could be the possible reason.

Boris Lekumovich

Jan 22, 2018 1:27 AM

Correct Answer

See if the following helps - 000033517 - Invalid DN Syntax error in Attribute Conversion when testing AFX connector capability 'Add Account to AD Group' in RSA Via Lifecycle and Governance

See the reply in context

No one else had this question

Outcomes

Jesvin Joseph @ Boris Lekumovich on Jan 22, 2018 1:31 AM

Thanks Boris. But that did not help. We are facing the issue only in certain cases and during the automated Account Creation (not during testing of adding account to group)

Actions

Boris Lekumovich

@ Jesvin Joseph on Jan 22, 2018 1:53 AM

The article is pointing to a possible root cause to such error.

There might be a specific value which is failing the provisioning process (maybe a special char)

To troubleshoot, I would do the following:

For a user which failed to be provisioned, identify all the values which are being sent to AFX, try to reproduce the behavior by using TEST Connector Capabilities
Once reproduced, you will be able to identify what value caused the issue

Actions

Marek Lotocki Jan 22, 2018 9:51 AM

Jesvin Joseph can you show how your AFX Connector capability fro AD Account creation is configured?

Please share Account Template also.

Actions

Pradeep Kadambar

Jan 23, 2018 9:12 AM

I would turn on the debug logging for your AD connector and see the XML payload (the message body to AFX). This will also include more detailed error message from AD.

Actions

5 Replies

Boris Lekumovich Jan 22, 2018 1:27 AM
Unmark Correct
Correct Answer
See if the following helps - 000033517 - Invalid DN Syntax error in Attribute Conversion when testing AFX connector capability 'Add Account to AD Group' in RSA Via Lifecycle and Governance
Like • Show 0 Likes0
Actions
- Jesvin Joseph @ Boris Lekumovich on Jan 22, 2018 1:31 AM
  Mark Correct
  Correct Answer
  Thanks Boris. But that did not help. We are facing the issue only in certain cases and during the automated Account Creation (not during testing of adding account to group)
  Like • Show 0 Likes0
  Actions
  - Boris Lekumovich @ Jesvin Joseph on Jan 22, 2018 1:53 AM
    Mark Correct
    Correct Answer
    The article is pointing to a possible root cause to such error.
    There might be a specific value which is failing the provisioning process (maybe a special char)
    
    To troubleshoot, I would do the following:
    For a user which failed to be provisioned, identify all the values which are being sent to AFX, try to reproduce the behavior by using TEST Connector Capabilities
    Once reproduced, you will be able to identify what value caused the issue
    Like • Show 0 Likes0
    Actions
Marek Lotocki Jan 22, 2018 9:51 AM
Mark Correct
Correct Answer
Jesvin Joseph can you show how your AFX Connector capability fro AD Account creation is configured?
Please share Account Template also.
Like • Show 0 Likes0
Actions
Pradeep Kadambar Jan 23, 2018 9:12 AM
Mark Correct
Correct Answer
I would turn on the debug logging for your AD connector and see the XML payload (the message body to AFX). This will also include more detailed error message from AD.
Like • Show 0 Likes0
Actions

Invalid DN Syntax Error - AD Account Creation

Outcomes

Related Content

Recommended Content