Quantcast
Channel: Software Communities : Discussion List - Dell One Identity Manager
Viewing all articles
Browse latest Browse all 379

Error Message adding or deleting users to AD groups using ARS

$
0
0

Hi All

 

We did incorporate Q1IM 6.0 with ARS to connect to the customers active directory. As we did build a process to automate some groups based on textfiles, we did hit a huge load of error messages last night during our go-live.

 

The error message that was coming up is:

 

2013-03-17 05:33:43 -04:00 - VI.JobService.JobComponents.ADSComponent - d3d870c2-d7f9-4321-b6dd-0bd2469dadb8: Errors occured

    The connection mode of the provider was set to ADS_EDMSERVER_BIND.

    Loading import file BFO_ADSMapping.DLL.XML has changed the object property assignment rules and the member relationships.

Error processing object relations for CN=p.aut.mss_emps,OU=Auto-Generated Groups,OU=B-F Groups,OU=All Groups,DC=b-f,DC=net in Active Directory.

    [854003] Processing task Change Members failed.

[1705017] Saving new or modified directory entry EDMS://HQUARV01/CN=p.aut.mss_emps,OU=Auto-Generated Groups,OU=B-F Groups,OU=All Groups,DC=b-f,DC=net failed.

    [System.Runtime.InteropServices.COMException] Administrative Policy returned an error.

Request to change a multi-valued attribute has failed: attempted to add or remove too many attribute values. Not more than 1500 values can be added or removed from a multi-valued attribute within a single request.

 

It seems like the customer is dealing with a bigger number of user accounts in AD groups. Does anyone know a way to work around that using Q1IM and ARS as the AD provisioning engine? Any hint would be greatly appreciated.

 

Thanks

Carsten


Viewing all articles
Browse latest Browse all 379

Trending Articles