When an Active Directory (AD) User Moves To A Different Container, DIP Sync Creates Duplicate User Record in OID
Last updated on MARCH 08, 2017
Applies to:Oracle Internet Directory - Version 9.0.4 and later
Information in this document applies to any platform.
Moving users in Active Directory (AD) are creating new and duplicated user entries in Oracle Internet Directory (OID).
For example, create a new AD user called "test" and let is sync or bootstrap into OID.
In AD, right-click on the user "test" and select "move," and move the user to a different container, which
does exist in OID and is part of the domainrules mapping in the sync profile.
In OID now there are duplicate users for the same "test" user, i.e.
User in AD:
Corresponding users in OID:
(old entry) dn: cn=test,ou=OldOU,cn=users,dc=mycompany,dc=com
(new entry) dn: cn=test,ou=NewOU,cn=users,dc=mycompany,dc=com
The profile trace shows no error but includes the following message (in bold below):
DN : cn=test,ou=NewOU,cn=users,dc=mycompany,dc=com
No value in entry for attribute specified in OID matching filter. Check if mapping rules in the profile are complete.
Normalized DN : cn=test,ou=NewOU,cn=users,dc=mycompany,dc=com
Processing modifyRadd Operation ..
Entry Not Found. Converting to an ADD op..
Processing Insert Operation ..
Entry Added Successfully : cn=test,ou=NewOU,cn=users,dc=mycompany,dc=com
Replacing Attribute orclodipLastSuccessfulExecutionTime in the Profile with value : 20080208140836
Removed Existing attribute
orclOdipSynchronizationStatus: Synchronization Successful
Ending Mapping execution.
However, already verified that the profile has the OID Matching Filter is properly set to orclobjectguid.
Sign In with your My Oracle Support account
Don't have a My Oracle Support account? Click to get started
My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms