AD Account name generation issue in pending tasks

[Pranav]

The New account and add access tasks for AD application getting created with username instead of user first and last name and the configuration is working for update account and remove or disable account tasks the account name is getting populated with user first name and last name in pending tasks account column. Issue is only with new and add access tasks for AD and whenever they are getting provisioned encountering an error - Error while creating account in AD - [LDAP: error code 19 - 000020B5: AtrErr: DSID-03153438, #1: 0: 000020B5: DSID-03153438, problem 1005 (CONSTRAINT_ATT_TYPE), data 0, Att 15000a (manager)

We are seeing the same error for the New Account, Add Access, and Update Account tasks when they got provisioned.

[NM]

Hi @Pranav what is your account name rule ?

[Pranav]

Hi @NM Please find attached account name rule.

${if (user.employeeType.equals('Employee')) { 'CN='+user.displayname+',OU=Users,OU='+user.customproperty16+',OU=Sites,DC=sgws,DC=com'+'###'+'CN='+user.displayname+' ('+user.state+'),OU=Users,OU='+user.customproperty16+',OU=Sites,DC=sgws,DC=com'+'###'+'CN='+user.displayname+' ('+user.city+'),OU=Users,OU='+user.customproperty16+',OU=Sites,DC=sgws,DC=com'+'###'+'CN='+user.displayname+' ('+user.state+')1,OU=Users,OU='+user.customproperty16+',OU=Sites,DC=sgws,DC=com'+'###'+'CN='+user.displayname+' ('+user.state+')2,OU=Users,OU='+user.customproperty16+',OU=Sites,DC=sgws,DC=com' } else if(user.employeeType.equals('Contractor')) { 'CN='+user.displayname+' (Contractor),OU=Users,OU='+user.customproperty16+',OU=Sites,DC=sgws,DC=com'+'###'+'CN='+user.displayname+' ('+user.state+') (Contractor),OU=Users,OU='+user.customproperty16+',OU=Sites,DC=sgws,DC=com'+'###'+'CN='+user.displayname+' ('+user.city+') (Contractor),OU=Users,OU='+user.customproperty16+',OU=Sites,DC=sgws,DC=com'+'###'+'CN='+user.displayname+' ('+user.state+')1 (Contractor),OU=Users,OU='+user.customproperty16+',OU=Sites,DC=sgws,DC=com'+'###'+'CN='+user.displayname+' ('+user.state+')2 (Contractor),OU=Users,OU='+user.customproperty16+',OU=Sites,DC=sgws,DC=com' } else if(user.employeeType.equals('Consultant')) { 'CN='+user.displayname+' ('+user.companyname+'),OU=External Accounts,DC=sgws,DC=com'+'###'+'CN='+user.displayname+' ('+user.state+')'+' ('+user.companyname+'),OU=External Accounts,DC=sgws,DC=com'+'###'+'CN='+user.displayname+' ('+user.city+')'+' ('+user.companyname+'),OU=External Accounts,DC=sgws,DC=com'+'###'+'CN='+user.displayname+' ('+user.state+')1'+' ('+user.companyname+'),OU=External Accounts,DC=sgws,DC=com'+'###'+'CN='+user.displayname+' ('+user.state+')2'+' ('+user.companyname+'),OU=External Accounts,DC=sgws,DC=com' } else if(user.employeeType.equals('CanadianEmployee')) { 'CN='+user.displayname+',OU=Users,OU='+user.customproperty16+',OU=Sites,DC=sgws,DC=com'+'###'+'CN='+user.displayname+' ('+user.state+'),OU=Users,OU='+user.customproperty16+',OU=Sites,DC=sgws,DC=com'+'###'+'CN='+user.displayname+' ('+user.city+'),OU=Users,OU='+user.customproperty16+',OU=Sites,DC=sgws,DC=com'+'###'+'CN='+user.displayname+' ('+user.state+')1,OU=Users,OU='+user.customproperty16+',OU=Sites,DC=sgws,DC=com'+'###'+'CN='+user.displayname+' ('+user.state+')2,OU=Users,OU='+user.customproperty16+',OU=Sites,DC=sgws,DC=com' } else if(user.employeeType.equals('TempEmployee')) { 'CN='+user.displayname+' (Temp),OU=Users,OU='+user.customproperty16+',OU=Sites,DC=sgws,DC=com'+'###'+'CN='+user.displayname+' ('+user.state+') (Temp),OU=Users,OU='+user.customproperty16+',OU=Sites,DC=sgws,DC=com'+'###'+'CN='+user.displayname+' ('+user.city+') (Temp),OU=Users,OU='+user.customproperty16+',OU=Sites,DC=sgws,DC=com'+'###'+'CN='+user.displayname+' ('+user.state+')1 (Temp),OU=Users,OU='+user.customproperty16+',OU=Sites,DC=sgws,DC=com'+'###'+'CN='+user.displayname+' ('+user.state+')2 (Temp),OU=Users,OU='+user.customproperty16+',OU=Sites,DC=sgws,DC=com' } else { 'CN='+user.displayname+',OU=Users,OU='+user.customproperty16+',OU=Sites,DC=sgws,DC=com'+'###'+'CN='+user.displayname+' ('+user.state+'),OU=Users,OU='+user.customproperty16+',OU=Sites,DC=sgws,DC=com'+'###'+'CN='+user.displayname+' ('+user.city+'),OU=Users,OU='+user.customproperty16+',OU=Sites,DC=sgws,DC=com'+'###'+'CN='+user.displayname+' ('+user.state+')1,OU=Users,OU='+user.customproperty16+',OU=Sites,DC=sgws,DC=com'+'###'+'CN='+user.displayname+' ('+user.state+')2,OU=Users,OU='+user.customproperty16+',OU=Sites,DC=sgws,DC=com'}}

[rushikeshvartak]

can you share logs when tasks are creating and wsretry execution in 2 different file

[rushikeshvartak]

Which task/user needs to be checked ?

[Pranav]

The task requires verification. Currently, while the task is being created, the account column is displaying the username instead of the user's first and last name. As a result, when the account is provisioned, it will be named after the username rather than the user's actual first and last name. Additionally, we are currently facing the LDAP error mentioned above.

[NM]

@Pranav looks fine ..can you also share create account json?