Add access task for AD failing with LDAP: error code 53

[smithamg]

Hi team,

We are observing an intermittent issue in production - Add access task is failing with below error whenever user tries to modify the Inactive account of any AD logical application.

Error while ADD operation for account-[name]to Group-[XXXX] - [LDAP: error code 53 - 0000054F: SvcErr: DSID-031A126A, problem 5003 (WILL_NOT_PERFORM), data 0 ]

I referred below forum discussions but our case is different

AD Provisioning failing intermittently with LDAP: ... - Saviynt Forums - 24173
Need Help Getting LDAP Error Code 53 - 00002077 in... - Saviynt Forums - 20495

We have a working SSL connection and we dont have any ADDAccess JSOn or config in connection to check attributes. Could not replicate the issue in lower environment too. Its working fine in stage and dev

Kindly suggest if any resolution for this issue.

Thanks,
Smitha

[Darshanjain]

Hi @smithamg 

As the issue is intermittent, we would suggest you to raise a FD as deep triage and analysis may be required on this .

Thanks

Darshan

[PhilR]

You stated "whenever user tries to modify the Inactive account of any AD logical application"

By "modify" are you updating the AD account attributes?  If so then you can check the attribute mapping in your updateaccountJSON

Or if by "modify" you mean you are trying to add/remove a group membership then you are correct there is not a addAccessJSON for that.  What you can do is compare a User which is working (no LDAP error code) for the same group as a User which is not working.

LDAP error "code 53 - 0000054F" contains two parts.  The 'code 53' is the error reference and translates to 'server is unwilling to perform'.  The '0000054F' is the system code and I believe that translation can be found here as '0X54F':

https://learn.microsoft.com/en-us/windows/win32/debug/system-error-codes--1300-1699-

Which is "ERROR_INTERNAL_ERROR" and not a very helpful description.  If you don't have anyone from the AD team to help you investigate, I suggest comparing the Saviynt data for a positive/negative outcome and see if you can find any significant differences.