LDAP error when provisioning Active Directory

[Former Member]

Hi!

I'm running IdM 7.1 SP5 and an Active Directory on Windows 2008.

When trying to provision the AD (using the SAP provisioning framework), I have an error message in the CreateADSUSer pass :

Exception from Add operation:javax.naming.PartialResultException: [LDAP: error code 10 - 0000202B: RefErr: DSID-031007EF, data 0, 1 access points

Did anyone ever had this error code and knows what it means?

I also have another question : is it mandatory when provisioning an AD to use a LDAPS port, or is it just so when provisioning passwords?

Thanks a lot for your help,

Clotilde

[Former Member · Accepted solution]

Hi clotilde,

It sounds your LDAP path where you try to create your AD user is not correct, check your DN and TEMPDN job,

Benjamin

[Former Member]

Hello

It seems like we found the problem, you were right, the DN we were using wasn't right.

Thank you,

Clotilde

[Former Member]

Hi Clotilde,

you only need to use LDAPS when provisioning a password to AD, otherwise it is not required.

The LDAP error code 10 that you are getting is a referral error. So it seems that no information if stored at the root DN that you specified and that you are getting a referral instead. Whch root Root DN and which connections parameters to AD are you using?

Best regards

Holger