Groups > IBM > IBM Tivoli Directory Integrator > Re: ITDI 6.1.1. errors that are not in ITDI 5.2




ITDI 6.1.1. errors that are not in ITDI 5.2

ITDI 6.1.1. errors that are not in ITDI 5.2
Fri, 11 Jan 2008 16:47:10 -050
Hi - I am seeing 4 types of errors/exceptions in ITDI6.1.1 that I am not 
seeing when I flip back to running ITDI 5.2. The first one is when I am 
connecting to an ITDS (IBM).

-- Log file below ---
2008-01-11 16:04:06,558 INFO  [AssemblyLine.AssemblyLines/ACF2Change.40] 
- EXCEPTION -- 01/11/2008 - 4:04 PM -- EDUpdate - [status:fail, 
connectorname:EDUpdate, operation:update, 
exception:javax.naming.NamingException: [LDAP: error code 80 - plugin 
function failed]; remaining name 
'TDDirID=0d0bb752455be3c70ee7,ou=employees,ou=users,dc=td,dc=com', 
message:[LDAP: error code 80 - plugin function failed], 
class:javax.naming.NamingException]
-- Log file above ---

These three below are when I am connecting to an Active Directory system.

-- Log file below ---
javax.naming.InvalidNameException: cn=KELLY\, MARK - T,OU=HR 
Dept,dc=corporate,dc=com:
[LDAP: error code 34 - 00002081: NameErr: DSID-03050AE0, problem 2003 
(BAD_ATT_SYNTAX),
  data 0, best match of: 'cn=KELLY\, MARK - T,OU=HR 
Dept,dc=corporate,dc=com'];
   remaining name 'cn=KELLY\, MARK - T,OU=HR Dept,dc=corporate,dc=com'

2008-01-11 11:32:32,317 INFO  [AssemblyLine.ACF2Change-1759406302] - 
EXCEPTION -- 01/11/2008 - 11:32 AM -- ADAcctUpdate - [status:fail, 
connectorname:ADAcctUpdate, operation:update, 
exception:javax.naming.NamingException: [LDAP: error code 80 - 00002089: 
UpdErr: DSID-031B0C94, problem 5012 (DIR_ERROR), data 3
]; remaining name 'CN=DONER\, LORRAINE - 
DONEL,OU=Retail,dc=corporate,dc=com', message:[LDAP: error code 80 - 
00002089: UpdErr: DSID-031B0C94, problem 5012 (DIR_ERROR), data 3
], class:javax.naming.NamingException]

12/11/2007 - 2:06 PM -- ADAcctUpdate - [status:fail, 
connectorname:ADAcctUpdate, operation:update, 
exception:javax.naming.OperationNotSupportedException: [LDAP: error code 
53 - 00002016: SvcErr: DSID-031A0FC0, problem 5003 (WILL_NOT_PERFORM), 
data 0]; remaining name 'CN=SILVER\, YVETTE - 
DONEL,OU=Retail,dc=corporate,dc=com', message:[LDAP: error code 53 - 
00002016: SvcErr: DSID-031A0FC0, problem 5003 (WILL_NOT_PERFORM), data 
0], class:javax.naming.OperationNotSupportedException]
-- Log file above ---

For the ERR 53, I found something at Microsoft, but it pertains to 
Exchange 2007, and I could not correlate anything useful back to this.
http://technet.microsoft.com/en-us/library/bb125224.aspx

For the BAD_ATTR_SYNTAX, I found a thread from this group from about one 
month ago which looks promising. Merci, Christian.

Main issue/question is - has anyone seen any of the other errors before? 
Any pointers as to what Active Directory might be thinking? I am also 
puzzled as to how it works in ITDI 5.2, but not 6.1.1 - I will open that 
as a PMR.

-- 
Thanks, Derryck.
(in frozen Canada)
Post Reply
Re: ITDI 6.1.1. errors that are not in ITDI 5.2
Sat, 12 Jan 2008 22:44:17 -050
Update - I managed to ginger waded past the other errors, and so I am 
now down to one error - the "SvcErr: DSID-031A0FC0, problem 5003 
(WILL_NOT_PERFORM)" one.

I did some research, and the error seems to be generated by a bunch of 
conditions, none that appear to apply here. The two most prevalent 
suspects in the info that I found pointed to UserAccountControl or CN.

This is really strange. I run the AL in 5.2, it is OK - move it over to 
6.1.1, and get this error. I cannot get past it quickly, so I have 
opened up a PMR with IBM support (22920 057 649) with more details. Will 
keep the group posted.

Derryck Lamptey wrote:
> Hi - I am seeing 4 types of errors/exceptions in ITDI6.1.1 that I am not 
> seeing when I flip back to running ITDI 5.2. The first one is when I am 

DL
Post Reply
Re: ITDI 6.1.1. errors that are not in ITDI 5.2
Wed, 16 Jan 2008 12:07:45 +010
Just a thought here:

in the output map, the $dn attribute should be constructed to escape the 
special chars (such as the comma, which you apprently do with \,) but 
the cn attribute in the map should not do this escaping. Else the cn 
will not match the value that shows in the DN and AD won't be happy.

Cheers,

Christian

Derryck Lamptey wrote:

> Update - I managed to ginger waded past the other errors, and so I am 
> now down to one error - the "SvcErr: DSID-031A0FC0, problem 5003 
> (WILL_NOT_PERFORM)" one.
> 
> I did some research, and the error seems to be generated by a bunch of 
> conditions, none that appear to apply here. The two most prevalent 
> suspects in the info that I found pointed to UserAccountControl or CN.
> 
> This is really strange. I run the AL in 5.2, it is OK - move it over to 
> 6.1.1, and get this error. I cannot get past it quickly, so I have 
> opened up a PMR with IBM support (22920 057 649) with more details. Will 
> keep the group posted.
> 
> Derryck Lamptey wrote:
> 
>> Hi - I am seeing 4 types of errors/exceptions in ITDI6.1.1 that I am 
>> not seeing when I flip back to running ITDI 5.2. The first one is when

>> I am 
> 
> 
Post Reply
about | contact