DIP OID to AD Export - InvalidAttributeValueException: LDAP: error code 19 - 00002082: AtrErr: DSID-031513C2

(Doc ID 1470335.1)

Last updated on MARCH 08, 2017

Applies to:

Oracle Internet Directory - Version 9.0.4 to 11.1.1 [Release 10gR1 to 11g]
Information in this document applies to any platform.

Symptoms

Directory Integration Platform

The example in this document is from a 10g version DIP instance. The same issue will also apply to 11g versions of OID and DIP, but the log format will be different.

Active Directory Export profile (OID to AD) fails to synchronize some users,
the following error occurs in the ActiveExport.trc trace file.

DN : cn=Jose Fernandez,ou=do,ou=Sites,dc=oracle,dc=com
Changetype is ADD
Performing createEntry..
Exception creating Entry : javax.naming.directory.InvalidAttributeValueException: [LDAP: error code 19 - 00002082: AtrErr: DSID-031513C2, #1:
  0: 00002082: DSID-031513C2, problem 1005 (CONSTRAINT_ATT_TYPE), data 0, Att 6 (c):len 36
^@]; remaining name 'cn=Jose Fernandez,ou=do,ou=Sites,dc=oracle,dc=com'
[LDAP: error code 19 - 00002082: AtrErr: DSID-031513C2, #1:
  0: 00002082: DSID-031513C2, problem 1005 (CONSTRAINT_ATT_TYPE), data 0, Att 6 (c):len 36
^@]
Error in executing mapping DIP_LDAPWRITER_ERROR_CREATE
javax.naming.directory.InvalidAttributeValueException: [LDAP: error code 19 - 00002082: AtrErr: DSID-031513C2, #1:
  0: 00002082: DSID-031513C2, problem 1005 (CONSTRAINT_ATT_TYPE), data 0, Att 6 (c):len 36
^@]; remaining name 'cn=Jose Fernandez,ou=do,ou=Sites,dc=oracle,dc=com'
  at com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.java:3001)
  at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2934)
  at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2740)
  at com.sun.jndi.ldap.LdapCtx.c_createSubcontext(LdapCtx.java:777)
  at com.sun.jndi.toolkit.ctx.ComponentDirContext.p_createSubcontext(ComponentDirContext.java:319)
  at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.createSubcontext(PartialCompositeDirContext.java:248)
  at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.createSubcontext(PartialCompositeDirContext.java:236)
  at javax.naming.directory.InitialDirContext.createSubcontext(InitialDirContext.java:176)
  at oracle.ldap.odip.gsi.LDAPWriter.createEntry(LDAPWriter.java:1214)
  at oracle.ldap.odip.gsi.ActiveWriter.insert(ActiveWriter.java:465)
  at oracle.ldap.odip.gsi.LDAPWriter.writeChanges(LDAPWriter.java:303)
  at oracle.ldap.odip.engine.AgentThread.mapExecute(AgentThread.java:656)
  at oracle.ldap.odip.engine.AgentThread.execMapping(AgentThread.java:377)
  at oracle.ldap.odip.engine.AgentThread.run(AgentThread.java:252)
Changenumber 14496512
Changenumber 14496513
Setting Change Success Count : 98620
Setting Change Failure Count : 168810
Replacing Attribute orclodipLastSuccessfulExecutionTime in the Profile with value : 20120430141715



Due to this issue, some user accounts cannot be exported to Active Directory.

Changes

User account was created with a string representation of the "c" or Country attribute:

eg:

dn: cn=Jose Fernandez,ou=do,ou=Sites,dc=oracle,dc=com
c: Dominican Republic

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms