IDM 7.2 failed to read AD users

[Former Member]

Dear Experts,

we have IDM 7.2 and source system defined is AD server. If any new user get created in AD, it should get automatically get created in IDM as well.

There is custom job defined to run midnight but even after that AD user is not reflecting in IDM. I have forcefully run job again but job is aborted with below error.

Failed getting member from CN=KC-Users,OU=Groups

java.lang.Throwable: [LDAP: error code 12 - 00002040: SvcErr: DSID-031401E7, problem 5010 (UNAVAIL_EXTENSION), data 0]

I have also attached read job details in screenshot..

pls help..

[former_member2987 · Accepted solution]

Hi Imran,

Please post the Job log.  This is not an LDAP error I am familiar with. Also what port are you connecting to AD on?

Thanks,

Matt

[Former Member]

Thanks Matt,

1. Job log screenshot attached

2. I checked LDAP port in repository, it is 389.

@Dominik,

We do have users less than 500 AD users in total..

[former_member2987]

Ok, so LDAP 12 is a bad extension, I was wondering if you were trying something on Port 636 (LDAPS)

You might have less than 500 users, but  it could be an LDAP filter issue. Which would allude to what Dominik was saying.

What is it you want the job to do? What is the starting point?

Matt

[Former Member]

The LDAP users are reflected today even after Job is aborted. Hence Closing this thread..

Thank you Matt and Dominik for your reply.

[former_member201064]

The unavail extension occurs when a group with more members than 1500 is read out of the AD.

KC users as group name, sounds like some kind of "all users" group anyone has.