unable to find new resource account on AD
I have an identity template with AD resource and exectuing a role provisioning workflow:
cn=$lastname$,cn=$firstname$,ou=$Division$,ou=common,dc=ad,dc=omd,dc=net
IDM report shows that it has successfully created user account in AD and the accounts page shows the 'updating user'.
I checked AD and find no user.
Is there anything I am missing here?
Thanks.
# 1
this is the gateway trace.
05/09/2007 16.36.43.010000 [6316] (../../../../src/wps/agent/logging/WSTrace.cpp,150): trace active, level: 1, file: C:/gatewaytrace.txt, maxSize: 25 KB
05/09/2007 16.36.43.010000 [6316] (../../../../src/wps/agent/logging/WSTrace.cpp,205): Trace file set to 'C:/gatewaytrace.txt'
05/09/2007 16.36.43.010000 [6316] (../../../../src/wps/agent/object/RequestHandler.cpp,76): Enter: sendBuffer
05/09/2007 16.36.43.010000 [6316] (../../../../src/wps/agent/object/RequestHandler.cpp,105): Exit: sendBuffer
05/09/2007 16.36.43.010000 [6316] (../../../../src/wps/agent/object/RequestHandler.cpp,699): Exit: handleRequest
05/09/2007 16.40.53.365000 [3752] (../../../../src/wps/agent/connect/client_handler.cpp,344): got 52 bytes
05/09/2007 16.40.53.365000 [3752] (../../../../src/wps/agent/connect/RASecureConnection.cpp,269): Rightbefore decrypt:
05/09/2007 16.40.53.365000 [3752] (../../../../src/wps/agent/connect/client_handler.cpp,344): got 36 bytes
05/09/2007 16.40.53.365000 [3752] (../../../../src/wps/agent/connect/RASecureConnection.cpp,269): Rightbefore decrypt:
05/09/2007 16.40.53.385000 [3752] (../../../../src/wps/agent/connect/client_handler.cpp,344): got 14484 bytes
05/09/2007 16.40.53.385000 [3752] (../../../../src/wps/agent/connect/RASecureConnection.cpp,269): Rightbefore decrypt:
05/09/2007 16.40.53.385000 [3752] (../../../../src/wps/agent/object/RequestHandler.cpp,567): Enter: handleRequest
05/09/2007 16.40.53.385000 [3752] (../../../../src/wps/agent/object/RequestHandler.cpp,636):command='get info'
05/09/2007 16.40.53.395000 [3752] (../../../../src/wps/agent/object/RequestHandler.cpp,76): Enter: sendBuffer
05/09/2007 16.40.53.395000 [3752] (../../../../src/wps/agent/object/RequestHandler.cpp,105): Exit: sendBuffer
05/09/2007 16.40.53.395000 [3752] (../../../../src/wps/agent/object/RequestHandler.cpp,699): Exit: handleRequest
05/09/2007 16.40.53.456000 [3752] (../../../../src/wps/agent/connect/client_handler.cpp,344): got 14724 bytes
05/09/2007 16.40.53.456000 [3752] (../../../../src/wps/agent/connect/RASecureConnection.cpp,269): Rightbefore decrypt:
05/09/2007 16.40.53.456000 [3752] (../../../../src/wps/agent/object/RequestHandler.cpp,567): Enter: handleRequest
05/09/2007 16.40.53.456000 [3752] (../../../../src/wps/agent/object/RequestHandler.cpp,636):command='get'
05/09/2007 16.40.53.466000 [3752] (../../../../src/wps/agent/adsi/ADSIExtension.cpp,6359): Enter: getObject
05/09/2007 16.40.53.466000 [3752] (../../../../src/wps/agent/adsi/ADSIExtension.cpp,4667): Enter: login(wstring**,EncyptedData**,wstring**,WavesetResult&)
05/09/2007 16.40.53.476000 [3752] (../../../../src/wps/agent/adsi/ADSIExtension.cpp,4649): Enter: login(wstring**,EncyptedData**,wstring**,bool,HANDLE*,TOKEN_TYPE,WavesetResult& #38;)
05/09/2007 16.40.53.476000 [3752] (../../../../src/wps/agent/adsi/ADSIExtension.cpp,4660): Login: 1
05/09/2007 16.40.53.476000 [3752] (../../../../src/wps/agent/adsi/ADSIExtension.cpp,4661): Exit: login(wstring**,EncyptedData**,wstring**,bool,HANDLE*,TOKEN_TYPE,WavesetResult& #38;)
05/09/2007 16.40.53.476000 [3752] (../../../../src/wps/agent/adsi/ADSIExtension.cpp,4670): Login: 1
05/09/2007 16.40.53.476000 [3752] (../../../../src/wps/agent/adsi/ADSIExtension.cpp,4671): Exit: login(wstring**,EncyptedData**,wstring**,bool,HANDLE*,TOKEN_TYPE,WavesetResult& #38;)
05/09/2007 16.40.53.506000 [3752] (../../../../src/wps/agent/adsi/ADSIExtension.cpp,5188): Error opening object 'LDAP://cn=tester,cn=test,ou=Employee,ou=Denver,ou=Central,ou=Regions,ou=common ,dc=ad,dc=omd,dc=net': ADsOpenObject(): 0X80072030: , 0000208D: NameErr: DSID-031001CD, problem 2001 (NO_OBJECT), data 0, best match of:
'OU=Employee,OU=Denver,OU=Central,OU=Regions,OU=Common,DC=AD,DC=omd,DC=net'
, There is no such object on the server.
05/09/2007 16.40.53.506000 [3752] (../../../../src/wps/agent/object/RequestHandler.cpp,76): Enter: sendBuffer
05/09/2007 16.40.53.506000 [3752] (../../../../src/wps/agent/object/RequestHandler.cpp,105): Exit: sendBuffer
05/09/2007 16.40.53.506000 [3752] (../../../../src/wps/agent/adsi/ADSIExtension.cpp,6380): Exit: getObject - 1
05/09/2007 16.40.53.506000 [3752] (../../../../src/wps/agent/object/RequestHandler.cpp,699): Exit: handleRequest
# 2
Is this the DN of the user you are trying to create?
cn=tester,cn=test,ou=Employee,ou=Denver,ou=Central,ou=Regions,ou=common ,dc=ad,dc=omd,dc=net'
Are you sure if all the ou's and containers are created?
cn=$lastname$,cn=$firstname$,ou=$Division$,ou=common,dc=ad,dc=omd,dc=net
in the template you have three variables. in the cn=cn=$firstname$ and ou=$Division$ should exist before trying to create the record cn=$lastname$,cn=$firstname$,ou=$Division$,ou=common,dc=ad,dc=omd,dc=net
the gateway could fine only upto ou='OU=Employee, the next level cn=test may not exist
2001 (NO_OBJECT), data 0, best match of:
'OU=Employee,OU=Denver,OU=Central,OU=Regions,OU=Common,DC=AD,DC=omd,DC=net'
You can use before action scripts to create the containers