AD to OID Synchronization Fails With: LDAP Error Code 20 Uniquemember Attribute has Duplicate Value

(Doc ID 578367.1)

Last updated on OCTOBER 26, 2017

Applies to:

Oracle Internet Directory - Version 10.1.2 to 10.1.4 [Release 10gR2 to 10gR3]
Information in this document applies to any platform.


OID was successfully integrated with AD.

Synchronization worked fine for few days, then began failing with $ORACLE_HOME/ldap/odi/conf/ActiveChgImp.trc error:

[LDAP: error code 20 - uniquemember attribute has duplicate value. VALUE: cn=John Smith,ou=us,dc=abc,dc=com] [LDAP: error code 20 - uniquemember attribute has duplicate value. VALUE: cn=John Smith,ou=us,dc=abc,dc=com]; remaining name 'cn=Imp users,ou=Imp groups,ou=cases,ou=us,dc=abc,dc=com'
at com.sun.jndi.ldap.LdapCtx.mapErrorCode(
at com.sun.jndi.ldap.LdapCtx.processReturnCode(
at com.sun.jndi.ldap.LdapCtx.processReturnCode(
at com.sun.jndi.ldap.LdapCtx.c_createSubcontext(
at com.sun.jndi.toolkit.ctx.ComponentDirContext.p_createSubcontext(
at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.createSubcontext(
at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.createSubcontext(
at oracle.ldap.odip.gsi.LDAPWriter.createEntry(
at oracle.ldap.odip.gsi.LDAPWriter.insert(
at oracle.ldap.odip.gsi.LDAPWriter.modifyRadd(
at oracle.ldap.odip.gsi.LDAPWriter.writeChanges(
at oracle.ldap.odip.engine.AgentThread.mapExecute(
at oracle.ldap.odip.engine.AgentThread.execMapping(




Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms