Click HERE to see how Saviynt Intelligence is transforming the industry. |
08/13/2024 04:39 AM
Hi All,
We are facing issue whenever we are creating account of an user having similar name already present in AD. Ideally it should create the account with rule CN=name1,OU=BU Test,OU=Staff,OU=IGA,DC=t52,DC=quadrupel,DC=local
Case 1 :
ACCOUNTNAMERULE JSON :
CN=${user.firstname} ${user.lastname},OU=BU Test,OU=Staff,OU=IGA,DC=t52,DC=quadrupel,DC=local###CN=${user.firstname} ${user.lastname}1,OU=BU Test,OU=Staff,OU=IGA,DC=t52,DC=quadrupel,DC=local
Error we are getting :
Checking DN for CN=User Firstname Lastname,OU=XXX,OU=XXX,OU=XXX,DC=XXX,DC=XXXX,DC=XXX.FOund an inactive account -CN=User Firstname Lastname,OU=XXX,OU=XXX,OU=XXX,DC=XXX,DC=XXX,DC=XXX and the attributes-[:] match so using that instead of creating a new one as the account is inactive.
Case 2:
{
"AccountNameRule": {
"Attributes": [
{
"cn": "ACCOUNTID",
"baseDN": "CN=${user.firstname} ${user.lastname},OU=XXX,OU=XXX,OU=XXX,DC=XXX,DC=XXX,DC=XXX",
"RuleCheck": "${user.firstname} ${user.lastname}###${user.firstname} ${user.lastname}1###${user.firstname} ${user.lastname}2###${user.firstname} ${user.lastname}3###${user.firstname} ${user.lastname}4"
}
]
}
}
Error we are getting :
Checking DN for { "AccountNameRule": { "Attributes": [ { "cn": "name", "baseDN": "OU=XXX,OU=XXX,OU=XXX,DC=XXX,DC=XXX,DC=XXX", "RuleCheck": "name.Error while searching for DN-{ "AccountNameRule": { "Attributes": [ { "cn": "name", "baseDN": "OU=BU Test,OU=Staff,OU=IGA,DC=t52,DC=quadrupel,DC=local", "RuleCheck": "name: [LDAP: error code 34 - 0000208F: LdapErr: DSID-0C090CB3, comment: Error processing name, data 0, v4f7c]Checking DN for name1.Error while searching for DN-name1: [LDAP: error code 34 - 0000208F: NameErr: DSID-03100233, problem 2006 (BAD_NAME), data 8350, best match of: 'name1' ] SAV-Error while creating account,Could not find a unique DN to provision
Note : We haven't configured CHECKFORUNIQUE field.
Please let us know how can we fix the issue.
Solved! Go to Solution.
08/13/2024 05:00 AM
Hi @swagat make the attribute reuseinactiveaccount as false.
And use this in account name rule json
CN=${user.firstname} ${user.lastname},OU=BU Test,OU=Staff,OU=IGA,DC=t52,DC=quadrupel,DC=local###CN=${user.firstname} ${user.lastname}1,OU=BU Test,OU=Staff,OU=IGA,DC=t52,DC=quadrupel,DC=local
08/13/2024 05:12 AM
That worked @NM Thanks for the help.