"ManageSyncProfiles Activate" returns Invalid Destination Domain and Invalid Domain Construct Rule (Doc ID 1582250.1)

Last updated on AUGUST 30, 2023

Applies to:

Symptoms

Using DIP to sync AD to OID 11.1.1.7. (updated from OID 11.1.1.6) and everything worked correctly until a requirement to deactive and activate the DIP profile.

The profile cannot be activated now, because when activating the profile using manageSyncProfiles activate -h <HOSTNAME> -p 7005 -D weblogic -pf profileName, the following is returned:

Map rules have following Error(s) and/or Warning(s):
Map rules "orclodipattributemappingrules" have the following errors:
Domain rule "0" has error: Invalid destination domain: ''cn=<CUSTOM CONTAINER>,cn=users,dc=<COMPANY NAME>dc=test'' not found
Domain rule "0" has error: Invalid domain construct rule: ''cn=<CUSTOM CONTAINER>,cn=users,dc=<COMPANY NAME>,dc=test'' not found.

NOTE: "cn=<CUSTOM CONTAINER>,cn=users,dc=<COMPANY NAME>,dc=test" is an example DN and needs to be adapted to your tree.

The WLS log shows this:

2013-09-04T18:35:00.133+02:00] [wls_ods1] [ERROR] [DIP-85033] [oracle.dip.mbean.sync] [tid: SyncProfileMBean] [userId: weblogic] [ecid: 8ae0f812edeba243:3a3765d5:140e9c5eb97:-8000-00000000000003d3,0] [APP: DIP#11.1.1.2.0] The profile is not valid.
[2013-09-04T18:35:00.134+02:00] [wls_ods1] [NOTIFICATION] [] [oracle.dip.mbean.sync] [tid: SyncProfileMBean] [userId: weblogic] [ecid: 8ae0f812edeba243:3a3765d5:140e9c5eb97:-8000-00000000000003d3,0] [APP: DIP#11.1.1.2.0] Error DOMAIN_RULE:0:Invalid destination domain: ''cn=<CUSTOM CONTAINER>,cn=users,dc=<COMPANY NAME>,dc=test'' not found[[
Error DOMAIN_RULE:0:Invalid domain construct rule: ''cn=<CUSTOM CONTAINER>,cn=users,dc=<COMPANY NAME>,dc=test'' not found - [LDAP: error code 50 - Insufficient Access Rights]

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.