Unable to access account at this time. Please try again later

Currently our production is facing a serious problem in IdM activeSync. We receive in activeSync log the message: "Unable to access account xxx at this time. Please try again later" rather frequently, 4-5 times per day. This message implies that the changeNumber fetched from Ldap server was not treated, and was skipped to next number.

To me the problem seems to be the target user might be locked by somebody else. This shouldn't happen since that nobody is using IdM web interface and there is only activeSync running.

It happens when a user attribute value is changed on Ldap, which then triggers updates on other attributes. Thus a few changeNumbers are dedicated to the same user. I suppose changeNumber is treated one by one by activeSync, thus the lock issue should not happen. Furthermore, it happens randomly and we still don't know what is the cause.

Anyone has any idea on this?

[925 byte] By [steveloh] at [2007-11-26 9:37:14]
# 1
whether a scheduled reconcile can be one cause...I am not sure on this ...I am sorry If this is irrelevant...
Soori at 2007-7-7 0:30:21 > top of Java-index,Web & Directory Servers,Directory Servers...
# 2
There is no scheduled reconcilation configured in our system, although there is a deferred task scanner running every 10 minutes. Anyway, from the debug I don't see that the scanner has contributed to this problem.
steveloh at 2007-7-7 0:30:21 > top of Java-index,Web & Directory Servers,Directory Servers...