unable to find new resource account on AD

I have an identity template with AD resource and exectuing a role provisioning workflow:

cn=$lastname$,cn=$firstname$,ou=$Division$,ou=common,dc=ad,dc=omd,dc=net

IDM report shows that it has successfully created user account in AD and the accounts page shows the 'updating user'.

I checked AD and find no user.

Is there anything I am missing here?

Thanks.

[394 byte] By [G_identitya] at [2007-11-27 3:52:52]
# 1

this is the gateway trace.

05/09/2007 16.36.43.010000 [6316] (../../../../src/wps/agent/logging/WSTrace.cpp,150): trace active, level: 1, file: C:/gatewaytrace.txt, maxSize: 25 KB

05/09/2007 16.36.43.010000 [6316] (../../../../src/wps/agent/logging/WSTrace.cpp,205): Trace file set to 'C:/gatewaytrace.txt'

05/09/2007 16.36.43.010000 [6316] (../../../../src/wps/agent/object/RequestHandler.cpp,76): Enter: sendBuffer

05/09/2007 16.36.43.010000 [6316] (../../../../src/wps/agent/object/RequestHandler.cpp,105): Exit: sendBuffer

05/09/2007 16.36.43.010000 [6316] (../../../../src/wps/agent/object/RequestHandler.cpp,699): Exit: handleRequest

05/09/2007 16.40.53.365000 [3752] (../../../../src/wps/agent/connect/client_handler.cpp,344): got 52 bytes

05/09/2007 16.40.53.365000 [3752] (../../../../src/wps/agent/connect/RASecureConnection.cpp,269): Rightbefore decrypt:

05/09/2007 16.40.53.365000 [3752] (../../../../src/wps/agent/connect/client_handler.cpp,344): got 36 bytes

05/09/2007 16.40.53.365000 [3752] (../../../../src/wps/agent/connect/RASecureConnection.cpp,269): Rightbefore decrypt:

05/09/2007 16.40.53.385000 [3752] (../../../../src/wps/agent/connect/client_handler.cpp,344): got 14484 bytes

05/09/2007 16.40.53.385000 [3752] (../../../../src/wps/agent/connect/RASecureConnection.cpp,269): Rightbefore decrypt:

05/09/2007 16.40.53.385000 [3752] (../../../../src/wps/agent/object/RequestHandler.cpp,567): Enter: handleRequest

05/09/2007 16.40.53.385000 [3752] (../../../../src/wps/agent/object/RequestHandler.cpp,636):command='get info'

05/09/2007 16.40.53.395000 [3752] (../../../../src/wps/agent/object/RequestHandler.cpp,76): Enter: sendBuffer

05/09/2007 16.40.53.395000 [3752] (../../../../src/wps/agent/object/RequestHandler.cpp,105): Exit: sendBuffer

05/09/2007 16.40.53.395000 [3752] (../../../../src/wps/agent/object/RequestHandler.cpp,699): Exit: handleRequest

05/09/2007 16.40.53.456000 [3752] (../../../../src/wps/agent/connect/client_handler.cpp,344): got 14724 bytes

05/09/2007 16.40.53.456000 [3752] (../../../../src/wps/agent/connect/RASecureConnection.cpp,269): Rightbefore decrypt:

05/09/2007 16.40.53.456000 [3752] (../../../../src/wps/agent/object/RequestHandler.cpp,567): Enter: handleRequest

05/09/2007 16.40.53.456000 [3752] (../../../../src/wps/agent/object/RequestHandler.cpp,636):command='get'

05/09/2007 16.40.53.466000 [3752] (../../../../src/wps/agent/adsi/ADSIExtension.cpp,6359): Enter: getObject

05/09/2007 16.40.53.466000 [3752] (../../../../src/wps/agent/adsi/ADSIExtension.cpp,4667): Enter: login(wstring**,EncyptedData**,wstring**,WavesetResult&)

05/09/2007 16.40.53.476000 [3752] (../../../../src/wps/agent/adsi/ADSIExtension.cpp,4649): Enter: login(wstring**,EncyptedData**,wstring**,bool,HANDLE*,TOKEN_TYPE,WavesetResult& #38;)

05/09/2007 16.40.53.476000 [3752] (../../../../src/wps/agent/adsi/ADSIExtension.cpp,4660): Login: 1

05/09/2007 16.40.53.476000 [3752] (../../../../src/wps/agent/adsi/ADSIExtension.cpp,4661): Exit: login(wstring**,EncyptedData**,wstring**,bool,HANDLE*,TOKEN_TYPE,WavesetResult& #38;)

05/09/2007 16.40.53.476000 [3752] (../../../../src/wps/agent/adsi/ADSIExtension.cpp,4670): Login: 1

05/09/2007 16.40.53.476000 [3752] (../../../../src/wps/agent/adsi/ADSIExtension.cpp,4671): Exit: login(wstring**,EncyptedData**,wstring**,bool,HANDLE*,TOKEN_TYPE,WavesetResult& #38;)

05/09/2007 16.40.53.506000 [3752] (../../../../src/wps/agent/adsi/ADSIExtension.cpp,5188): Error opening object 'LDAP://cn=tester,cn=test,ou=Employee,ou=Denver,ou=Central,ou=Regions,ou=common ,dc=ad,dc=omd,dc=net': ADsOpenObject(): 0X80072030: , 0000208D: NameErr: DSID-031001CD, problem 2001 (NO_OBJECT), data 0, best match of:

'OU=Employee,OU=Denver,OU=Central,OU=Regions,OU=Common,DC=AD,DC=omd,DC=net'

, There is no such object on the server.

05/09/2007 16.40.53.506000 [3752] (../../../../src/wps/agent/object/RequestHandler.cpp,76): Enter: sendBuffer

05/09/2007 16.40.53.506000 [3752] (../../../../src/wps/agent/object/RequestHandler.cpp,105): Exit: sendBuffer

05/09/2007 16.40.53.506000 [3752] (../../../../src/wps/agent/adsi/ADSIExtension.cpp,6380): Exit: getObject - 1

05/09/2007 16.40.53.506000 [3752] (../../../../src/wps/agent/object/RequestHandler.cpp,699): Exit: handleRequest

G_identitya at 2007-7-12 8:56:53 > top of Java-index,Web & Directory Servers,Directory Servers...
# 2

Is this the DN of the user you are trying to create?

cn=tester,cn=test,ou=Employee,ou=Denver,ou=Central,ou=Regions,ou=common ,dc=ad,dc=omd,dc=net'

Are you sure if all the ou's and containers are created?

cn=$lastname$,cn=$firstname$,ou=$Division$,ou=common,dc=ad,dc=omd,dc=net

in the template you have three variables. in the cn=cn=$firstname$ and ou=$Division$ should exist before trying to create the record cn=$lastname$,cn=$firstname$,ou=$Division$,ou=common,dc=ad,dc=omd,dc=net

the gateway could fine only upto ou='OU=Employee, the next level cn=test may not exist

2001 (NO_OBJECT), data 0, best match of:

'OU=Employee,OU=Denver,OU=Central,OU=Regions,OU=Common,DC=AD,DC=omd,DC=net'

You can use before action scripts to create the containers

tvgsdgsuna at 2007-7-12 8:56:53 > top of Java-index,Web & Directory Servers,Directory Servers...
# 3
where do I find before actions scripts to create container?Thanks.
G_identitya at 2007-7-12 8:56:53 > top of Java-index,Web & Directory Servers,Directory Servers...
# 4
This is anything to do with permissions for the AD admin account?Thanks.
G_identitya at 2007-7-12 8:56:53 > top of Java-index,Web & Directory Servers,Directory Servers...