Creating User in OIM with OVD 11g Fails with EUS Enabled: IAM-3010004 javax.naming.directory.SchemaViolationException: [LDAP: error code 65 - LDAP Error 65 : [LDAP: error code 65 - Failed to find orclaccountlocked in mandatory or optional attribute list.]
(Doc ID 2174644.1)
Last updated on DECEMBER 04, 2023
Applies to:
Oracle Virtual Directory - Version 11.1.1.0 to 11.1.1.9.0Information in this document applies to any platform.
Symptoms
Creating a user in Oracle Identity Manager (OIM), with ldapsync enabled with Oracle Internet Directory (OID) and Oracle Virtual Directory (OVD) 11g and Enterprise User Security (EUS) eenabled).
The user creation fails with:
IAM-3010004 : An error occurred while deleting LDAP user in the compensate stage.
javax.naming.directory.SchemaViolationException: [LDAP: error code 65 - LDAP Error 65 : [LDAP: error code 65 - Failed to find orclaccountlocked in mandatory or optional attribute list.]]; remaining name 'cn=<USERNAME>,cn=Users,dc=<COMPANY>,dc=com'
at com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.java:3119)
javax.naming.directory.SchemaViolationException: [LDAP: error code 65 - LDAP Error 65 : [LDAP: error code 65 - Failed to find orclaccountlocked in mandatory or optional attribute list.]]; remaining name 'cn=<USERNAME>,cn=Users,dc=<COMPANY>,dc=com'
at com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.java:3119)
OVD log shows:
[2016-07-07T13:41:41.361-04:00] [octetstring] [ERROR] [OVD-40077] [com.octetstring.vde.operation.AddOperation] [tid: xx] [ecid: <ECID>] Could not add entry.[[
com.octetstring.vde.util.DirectoryException: LDAP Error 65 : [LDAP: error code 65 - Failed to find orclaccountlocked in mandatory or optional attribute list.]
at com.octetstring.vde.backend.jndi.ConnectionHandle.handleError(ConnectionHandle.java:456)
at com.octetstring.vde.backend.jndi.ConnectionHandle.createSubcontext(ConnectionHandle.java:170)
Caused by: javax.naming.directory.SchemaViolationException: [LDAP: error code 65 - Failed to find orclaccountlocked in mandatory or optional attribute list.]; remaining name 'cn=<USERNAME>,cn=Users,dc=<COMPANY>,dc=com'
at com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.java:3118)
at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:3033)
com.octetstring.vde.util.DirectoryException: LDAP Error 65 : [LDAP: error code 65 - Failed to find orclaccountlocked in mandatory or optional attribute list.]
at com.octetstring.vde.backend.jndi.ConnectionHandle.handleError(ConnectionHandle.java:456)
at com.octetstring.vde.backend.jndi.ConnectionHandle.createSubcontext(ConnectionHandle.java:170)
Caused by: javax.naming.directory.SchemaViolationException: [LDAP: error code 65 - Failed to find orclaccountlocked in mandatory or optional attribute list.]; remaining name 'cn=<USERNAME>,cn=Users,dc=<COMPANY>,dc=com'
at com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.java:3118)
at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:3033)
The user creation works fine when the EUS adapters are disabled and not active.
Cause
To view full details, sign in with your My Oracle Support account. |
|
Don't have a My Oracle Support account? Click to get started! |
In this Document
| Symptoms |
| Cause |
| Solution |