AD (GC) to OID DIP 11g Sync is Not Synchronizing Mail Attribute Consistently. Works Intermittently. DIP Log Error: LDAP: error code 67 - Modifying the Naming attribute for the entry without modifying the DN]; remaining name '<user DN>' (Doc ID 2168040.1)

Last updated on MARCH 08, 2017

Applies to:

Oracle Internet Directory - Version 11.1.1 and later
Information in this document applies to any platform.

Symptoms

Oracle Internet Directory (OID) 11g and Directory Integration Platform (DIP) synchronization with Microsoft (MS) Active Directory.

AD to OID Sync is not syncing the mail attribute.

Other attributes are sync'd, but the mail attribute is NULL.

DIP log shows:

[2016-07-25T08:19:15.704-04:00] [wls_ods1] [NOTIFICATION] [] [oracle.dip.ADtoOID] [tid: oracle.ldap.odip.web.DIPSyncWriterThread] [userId: ] [ecid: 0000LNgFO5ZFw000jzwkno1NY43U000003,1:24167] [APP: DIP#11.1.1.2.0] Normalized DN : cn=my user,cn=users,dc=mycompany,dc=com
[2016-07-25T08:19:15.704-04:00] [wls_ods1] [TRACE] [] [oracle.dip.ADtoOID] [tid: oracle.ldap.odip.web.DIPSyncWriterThread] [userId: ] [ecid: 0000LNgFO5ZFw000jzwkno1NY43U000003,1:24167] [APP: DIP#11.1.1.2.0] [SRC_CLASS: oracle.ldap.odip.gsi.LDAPWriter] [SRC_METHOD: performWriteChanges] Changetype is 5
[2016-07-25T08:19:15.705-04:00] [wls_ods1] [NOTIFICATION] [] [oracle.dip.ADtoOID] [tid: oracle.ldap.odip.web.DIPSyncWriterThread] [userId: ] [ecid: 0000LNgFO5ZFw000jzwkno1NY43U000003,1:24167] [APP: DIP#11.1.1.2.0] Processing modifyRadd Operation ..
[2016-07-25T08:19:15.705-04:00] [wls_ods1] [NOTIFICATION] [] [oracle.dip.ADtoOID] [tid: oracle.ldap.odip.web.DIPSyncWriterThread] [userId: ] [ecid: 0000LNgFO5ZFw000jzwkno1NY43U000003,1:24167] [APP: DIP#11.1.1.2.0] Performing checkNReplace..
[2016-07-25T08:19:15.705-04:00] [wls_ods1] [NOTIFICATION] [] [oracle.dip.ADtoOID] [tid: oracle.ldap.odip.web.DIPSyncWriterThread] [userId: ] [ecid: 0000LNgFO5ZFw000jzwkno1NY43U000003,1:24167] [APP: DIP#11.1.1.2.0] Naming attribute: cn
[2016-07-25T08:19:15.705-04:00] [wls_ods1] [TRACE] [] [oracle.dip.ADtoOID] [tid: oracle.ldap.odip.web.DIPSyncWriterThread] [userId: ] [ecid: 0000LNgFO5ZFw000jzwkno1NY43U000003,1:24167] [APP: DIP#11.1.1.2.0] [SRC_CLASS: oracle.ldap.odip.gsi.LDAPWriter] [SRC_METHOD: checkNReplace] Adding Attribute in OID : mail
[2016-07-25T08:19:15.705-04:00] [wls_ods1] [NOTIFICATION] [] [oracle.dip.ADtoOID] [tid: oracle.ldap.odip.web.DIPSyncWriterThread] [userId: ] [ecid: 0000LNgFO5ZFw000jzwkno1NY43U000003,1:24167] [APP: DIP#11.1.1.2.0] Total # of Mod Items : 2
[2016-07-25T08:19:15.706-04:00] [wls_ods1] [ERROR] [DIP-10225] [oracle.dip.ADtoOID] [tid: oracle.ldap.odip.web.DIPSyncWriterThread] [userId: ] [ecid: 0000LNgFO5ZFw000jzwkno1NY43U000003,1:24167] [APP: DIP#11.1.1.2.0] Exception modifying entry : [LDAP: error code 67 - Modifying the Naming attribute for the entry without modifying the DN].
[2016-07-25T08:19:15.707-04:00] [wls_ods1] [TRACE] [] [oracle.dip.ADtoOID] [tid: oracle.ldap.odip.web.DIPSyncWriterThread] [userId: ] [ecid: 0000LNgFO5ZFw000jzwkno1NY43U000003,1:24167] [APP: DIP#11.1.1.2.0] [SRC_CLASS: oracle.ldap.odip.gsi.LDAPWriter] [SRC_METHOD: modifyRadd] Error in modifying Entry cn=my user,cn=users,dc=mycompany,dc=com[[
ODIException: Error Modifying Entry in Directory
at oracle.ldap.odip.gsi.LDAPWriter.checkNReplace(LDAPWriter.java:1157)
at oracle.ldap.odip.gsi.LDAPWriter.checkNReplace(LDAPWriter.java:961)
at oracle.ldap.odip.gsi.LDAPWriter.modifyRadd(LDAPWriter.java:920)
at oracle.ldap.odip.gsi.LDAPWriter.performWriteChanges(LDAPWriter.java:422)
at oracle.ldap.odip.gsi.LDAPWriter.writeChanges(LDAPWriter.java:256)
at oracle.ldap.odip.web.DIPSyncWriterThread.run(DIPSyncWriterThread.java:71)
Caused by: javax.naming.directory.SchemaViolationException: [LDAP: error code 67 - Modifying the Naming attribute for the entry without modifying the DN]; remaining name 'cn=my user,cn=users,dc=mycompany,dc=com'
at com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.java:3118)
at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:3033)
at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2840)
at com.sun.jndi.ldap.LdapCtx.c_modifyAttributes(LdapCtx.java:1478)
at com.sun.jndi.toolkit.ctx.ComponentDirContext.p_modifyAttributes(ComponentDirContext.java:273)
at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.modifyAttributes(PartialCompositeDirContext.java:190)
at javax.naming.directory.InitialDirContext.modifyAttributes(InitialDirContext.java:172)
at oracle.ldap.odip.gsi.LDAPWriter.checkNReplace(LDAPWriter.java:1107)
... 5 more

]]
[2016-07-25T08:19:15.707-04:00] [wls_ods1] [ERROR] [DIP-10005] [oracle.dip.ADtoOID] [tid: oracle.ldap.odip.web.DIPSyncWriterThread] [userId: ] [ecid: 0000LNgFO5ZFw000jzwkno1NY43U000003,1:24167] [APP: DIP#11.1.1.2.0] Error in applying map rule.[[
ODIException: Error Modifying Entry in Directory
at oracle.ldap.odip.gsi.LDAPWriter.checkNReplace(LDAPWriter.java:1157)
at oracle.ldap.odip.gsi.LDAPWriter.checkNReplace(LDAPWriter.java:961)
at oracle.ldap.odip.gsi.LDAPWriter.modifyRadd(LDAPWriter.java:920)
at oracle.ldap.odip.gsi.LDAPWriter.performWriteChanges(LDAPWriter.java:422)
at oracle.ldap.odip.gsi.LDAPWriter.writeChanges(LDAPWriter.java:256)
at oracle.ldap.odip.web.DIPSyncWriterThread.run(DIPSyncWriterThread.java:71)
Caused by: javax.naming.directory.SchemaViolationException: [LDAP: error code 67 - Modifying the Naming attribute for the entry without modifying the DN]; remaining name 'cn=my user,cn=users,dc=mycompany,dc=com'
at com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.java:3118)
at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:3033)
at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2840)
at com.sun.jndi.ldap.LdapCtx.c_modifyAttributes(LdapCtx.java:1478)
at com.sun.jndi.toolkit.ctx.ComponentDirContext.p_modifyAttributes(ComponentDirContext.java:273)
at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.modifyAttributes(PartialCompositeDirContext.java:190)
at javax.naming.directory.InitialDirContext.modifyAttributes(InitialDirContext.java:172)
at oracle.ldap.odip.gsi.LDAPWriter.checkNReplace(LDAPWriter.java:1107)
... 5 more

]]




Changes

 

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms