OID: How To Create a New Container To Store or Synchronize Users (Doc ID 361512.1)

Last updated on AUGUST 30, 2023

Applies to:

Goal

1. To create a new container, e.g., ou=<OU>,<REALM> with proper access, and store users within the new container in Oracle Internet Directory (OID) 10g, 11g, 12c or higher.

2. Users within the new container should be able to login to OID (and to legacy 10g OIDDAS/OSSO and change their own profiles).

This Note applies for the following scenarios as well when synchronizing users from Microsoft Active Directory (MS AD) to OID via Directory Integration Platform (DIP):
a. The following DIP log error can occur when trying to synchronize into a different container than the default realm users container: LDAP: error code 50 - Insufficient Access Rights; <PROFILE> MAPPING IMPORT OPERATION FAILURE; Agent execution successful, Mapping/import operation failure
b. 10g OIDDAS: The MS AD users can successfully login to 10g OIDDAS, but when trying to access the any of the tabs, e.g. Directory, Profile, etc., the following error is returned: 'Unable to connect to directory server' .
In this case, apply ACI's as mentioned in Solution step 2 below.

Solution

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.