Saviynt unveils its cutting-edge Intelligence Suite products to revolutionize Identity Security!
Click HERE to see how Saviynt Intelligence is transforming the industry.
Saviynt Copilot Icon

Active Directory ACCOUNTNAMERULE is not working

swagat
New Contributor II
New Contributor II

Hi All,

We are facing issue whenever we are creating account of an user having similar name already present in AD. Ideally it should create the account with rule CN=name1,OU=BU Test,OU=Staff,OU=IGA,DC=t52,DC=quadrupel,DC=local

Case 1 :

ACCOUNTNAMERULE JSON :

CN=${user.firstname} ${user.lastname},OU=BU Test,OU=Staff,OU=IGA,DC=t52,DC=quadrupel,DC=local###CN=${user.firstname} ${user.lastname}1,OU=BU Test,OU=Staff,OU=IGA,DC=t52,DC=quadrupel,DC=local

Error we are getting :

Checking DN for CN=User Firstname Lastname,OU=XXX,OU=XXX,OU=XXX,DC=XXX,DC=XXXX,DC=XXX.FOund an inactive account -CN=User Firstname Lastname,OU=XXX,OU=XXX,OU=XXX,DC=XXX,DC=XXX,DC=XXX and the attributes-[:] match so using that instead of creating a new one as the account is inactive.

Case 2:

{
"AccountNameRule": {
"Attributes": [
{
"cn": "ACCOUNTID",
"baseDN": "CN=${user.firstname} ${user.lastname},OU=XXX,OU=XXX,OU=XXX,DC=XXX,DC=XXX,DC=XXX",
"RuleCheck": "${user.firstname} ${user.lastname}###${user.firstname} ${user.lastname}1###${user.firstname} ${user.lastname}2###${user.firstname} ${user.lastname}3###${user.firstname} ${user.lastname}4"
}
]
}
}

Error we are getting :

Checking DN for { "AccountNameRule": { "Attributes": [ { "cn": "name", "baseDN": "OU=XXX,OU=XXX,OU=XXX,DC=XXX,DC=XXX,DC=XXX", "RuleCheck": "name.Error while searching for DN-{ "AccountNameRule": { "Attributes": [ { "cn": "name", "baseDN": "OU=BU Test,OU=Staff,OU=IGA,DC=t52,DC=quadrupel,DC=local", "RuleCheck": "name: [LDAP: error code 34 - 0000208F: LdapErr: DSID-0C090CB3, comment: Error processing name, data 0, v4f7c]Checking DN for name1.Error while searching for DN-name1: [LDAP: error code 34 - 0000208F: NameErr: DSID-03100233, problem 2006 (BAD_NAME), data 8350, best match of: 'name1' ] SAV-Error while creating account,Could not find a unique DN to provision

Note : We haven't configured CHECKFORUNIQUE field.

Please let us know how can we fix the issue.

2 REPLIES 2

NM
Esteemed Contributor
Esteemed Contributor

Hi @swagat make the attribute reuseinactiveaccount as false.

And use this in account name rule json 

CN=${user.firstname} ${user.lastname},OU=BU Test,OU=Staff,OU=IGA,DC=t52,DC=quadrupel,DC=local###CN=${user.firstname} ${user.lastname}1,OU=BU Test,OU=Staff,OU=IGA,DC=t52,DC=quadrupel,DC=local


If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'

swagat
New Contributor II
New Contributor II

That worked @NM Thanks for the help.