When an Active Directory (AD) User Moves To A Different Container, DIP Sync Creates Duplicate User Record in OID (Doc ID 553567.1)

Last updated on MARCH 08, 2017

Applies to:

Oracle Internet Directory - Version 9.0.4 and later
Information in this document applies to any platform.

Symptoms

Moving users in Active Directory (AD) are creating new and duplicated user entries in Oracle Internet Directory (OID).

For example, create a new AD user called "test" and let is sync or bootstrap into OID.

In AD, right-click on the user "test" and select "move," and move the user to a different container, which
does exist in OID and is part of the domainrules mapping in the sync profile.

In OID now there are duplicate users for the same "test" user, i.e.

User in AD:
dn: CN=test,OU=NewOU,DC=mycompany,DC=com

Corresponding users in OID:
(old entry) dn: cn=test,ou=OldOU,cn=users,dc=mycompany,dc=com
(new entry) dn: cn=test,ou=NewOU,cn=users,dc=mycompany,dc=com

The profile trace shows no error but includes the following message (in bold below):
-----------
DN : cn=test,ou=NewOU,cn=users,dc=mycompany,dc=com
No value in entry for attribute specified in OID matching filter. Check if mapping rules in the profile are complete.
Normalized DN : cn=test,ou=NewOU,cn=users,dc=mycompany,dc=com
Processing modifyRadd Operation ..
Entry Not Found. Converting to an ADD op..
Processing Insert Operation ..
Performing createEntry..
Entry Added Successfully : cn=test,ou=NewOU,cn=users,dc=mycompany,dc=com
Replacing Attribute orclodipLastSuccessfulExecutionTime in the Profile with value : 20080208140836
Removed Existing attribute
RePopulated Attribute..
Updated Attributes
orclodipLastExecutionTime: 20080208140836
orclodipConDirLastAppliedChgNum: 233736944
orclOdipSynchronizationStatus: Synchronization Successful
orclodipLastSuccessfulExecutionTime: 20080208140836
Ending Mapping execution.


However, already verified that the profile has the OID Matching Filter is properly set to orclobjectguid.

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms