My Oracle Support Banner

DIP 12.2.1.3.0 - OID To EDir Sync - Updates/Modify Failing With "Not Able To Construct DN" (Doc ID 2596386.1)

Last updated on OCTOBER 07, 2019

Applies to:

Oracle Internet Directory - Version 12.2.1.3.0 and later
Information in this document applies to any platform.

Symptoms

Fresh DIP 12.2.1.3.0 install.

Configured export sync profile from OID to eDirectory 9.1.

Add of new user syncs correctly, however modify of a user in OID causes failure  "Not able to construct DN".

Using the following Domain Mapping rule (to flatten DIT and create users with RDN of uid=%)
DomainRules
cn=users,o=<ORGANIZATION>,dc=com:ou=people,dc=<COMPANY>,dc=com:uid=%,ou=people,dc=<COMPANY>,dc=com

 Example from wls_ods1-diagnostics log (modify of email address on <USERNAME>)

====================================

 

[2019-06-14T13:05:00.759+00:00] [wls_ods1] [NOTIFICATION] [DIP-10186] [oracle.dip.<PROFILE_NAME>] [tid: <PROFILE_NAME>] [userId: <anonymous>] [ecid: <ECID>] [APP: DIP] [partition-name: DOMAIN] [tenant-name: GLOBAL] Source changerecord : ChangeRecord : ----------[[
Changetype: MODIFY
ChangeKey: cn=<USERNAME>,cn=users,dc=<COMPANY>,dc=com
Attributes:
Class: null Name: objectclass Type: nonbinary ChgType: NOCHANGE Value: [top, person, organizationalPerson, inetOrgPerson, orclUser, orclUserV2]
Class: null Name: mail Type: null ChgType: REPLACE Value: [<EMAIL>@<DOMAIN>.com]
Class: null Name: targetdn Type: null ChgType: NOCHANGE Value: [cn=<USERNAME>,cn=users,dc=<COMPANY>,dc=com]
-----------.
]]
[2019-06-14T13:05:00.759+00:00] [wls_ods1] [NOTIFICATION] [DIP-10247] [oracle.dip.<PROFILE_NAME>] [tid: <PROFILE_NAME>] [userId: <anonymous>] [ecid: <ECID>] [APP: DIP] [partition-name: DOMAIN] [tenant-name: GLOBAL] Not able to construct DN.
[2019-06-14T13:05:00.764+00:00] [wls_ods1] [NOTIFICATION] [DIP-10209] [oracle.dip.<PROFILE_NAME>] [tid: <PROFILE_NAME>] [userId: <anonymous>] [ecid: <ECID>] [APP: DIP] [partition-name: DOMAIN] [tenant-name: GLOBAL] Changenumber : 98221.
[2019-06-14T13:05:00.770+00:00] [wls_ods1] [NOTIFICATION] [] [oracle.dip.<PROFILE_NAME>] [tid: oracle.ldap.odip.web.DIPSyncWriterThread] [userId: <anonymous>] [ecid: <ECID>] [APP: DIP] [partition-name: DOMAIN] [tenant-name: GLOBAL] [[
Output ChangeRecord ChangeRecord : ----------
Changetype: MODIFY
ChangeKey: *
Attributes:
Class: null Name: objectclass Type: null ChgType: NOCHANGE Value: [inetorgperson]
Class: null Name: mail Type: null ChgType: REPLACE Value: [<EMAIL>@<DOMAIN>.com]

Changes

 NOTE: Problem does not occur if using the following mapping rule:

cn=users,o=<ORGANIZATION>,dc=com:ou=people,dc=<COMPANY>,dc=com

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Symptoms
Changes
Cause
Solution
References


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.