ADSI connector update account task issue

[BhanuKumar]

Hi All,

An update account task is created for the user, but it is not getting completed.

It gets errored out as below:

Error while update account in AD : { "status": "Failure", "failedObjects": [ { "id": "CN=upgrade\\, Prod319,OU=Users,OU=Nonemployee,DC=na,DC=domain,DC=net", "status": "Failure", "message": "Please check the data sent to msDS-cloudExtensionAttribute2.", "messageCodes": "OBJ_INFO_MSG_00005" } ], "connectionString": "LDAP://domain.net" }

Please check and help out here.

Thanks

Bhanu Kumar

[This post has been edited by a Moderator to remove sensitive information.]

[sudeshjaiswal]

Hello @BhanuKumar,

Can you please provide the json, and please make sure to mask the confidential information.

Thanks.

[BhanuKumar]

Please find the JSON used:

{

    "objects": [{

        "objectClasses": ["user"],

        "distinguishedName": "${account.accountID?.replace('\\', '\\\\')?.replace('/', '\\/')}",

        "attributes": ${

            Map attributeMap = new HashMap();

            def licensevalue = license;

            def required = access;

            String emp=user.employeeType;

            String Profile= user.customproperty25;

            String company=user.companyname;

            String sor=user.customproperty15;

            String empCountryCode = user.customproperty3;

            String xeroxprovremotemailbox=user.customproperty59;

            if ((licensevalue == 'license1' && required == 'YES'))

                attributeMap.put("msDS-cloudExtensionAttribute1", "AB");

            else if(licensevalue == 'license1' && required == 'NO')

                attributeMap.put("msDS-cloudExtensionAttribute1","NL");

            if ((licensevalue == 'license2' && required == 'YES'))

                attributeMap.put("msDS-cloudExtensionAttribute2", "CD");

            else if(licensevalue == 'license2' && required == 'NO')

                attributeMap.put("msDS-cloudExtensionAttribute2", "NL");

            if ((licensevalue == 'license3' && required == 'YES'))

                attributeMap.put("msDS-cloudExtensionAttribute3", "EF");

            else if (licensevalue == 'license3' && required == 'NO')

                attributeMap.put("msDS-cloudExtensionAttribute3", "NL");

            if ((licensevalue == 'license4' && required == 'YES'))

                attributeMap.put("msDS-cloudExtensionAttribute4", "GH");

            else if (licensevalue == 'license4' && required == 'NO')

                attributeMap.put("msDS-cloudExtensionAttribute4", "NL");

            if ((licensevalue == 'license5' && required == 'YES') && (user?.customproperty8 == 'AB' || user?.customproperty8 == 'CD'))

                attributeMap.put("msDS-cloudExtensionAttribute5", "XY");

            else if ((licensevalue == 'license5' && required == 'YES') && (user?.customproperty8 == 'PQ'))

                attributeMap.put("msDS-cloudExtensionAttribute5", "YZ");

            else if(licensevalue == 'license5' && required == 'NO')

                attributeMap.put("msDS-cloudExtensionAttribute5", "NL");

            jsonBuilder = new groovy.json.JsonBuilder(attributeMap);

            return jsonBuilder.toString().replace('\\\\', '\\');

        }

    }]

}

[sudeshjaiswal]

Hello @BhanuKumar,

Seems like the value of msDS-cloudExtensionAttribute2 is not being accepted by the (ADSI)target application, it access the unicode string only.
Could you please validate from the  postman if you are able to get it through.

Thanks.

[BhanuKumar]

in lower environment it is successful, but in prod it throws an error.

let us know the possible reason for the issue.

[sangitaladi]

Hi BhanuKumar

I too am seeing same issue. Is the issue resolved for you? If yes, how?

Regards

Sangita Ladi

[sudeshjaiswal]

Greetings, @BhanuKumar,

Could you kindly verify whether the successful and error-throwing instances are occurring within the same version? Additionally, were there any recent upgrades?

If so, I'd like to know which in which version it is working and which version is encountering issues.

Thank you.

[BhanuKumar]

Hi SudeshJaiswal,

Both Prod and Dev are  same version (3.19).

it is working in dev and not in PROD.

We suspect there is some issue in ADSI agent 

Prod -

2023-08-22 07:46:17.7383 [91] DEBUG ADSIConnector.Common.ADOperations.CreateUpdateOperations update msDS-cloudExtensionAttribute1 key and Value is [CP2]
2023-08-22 07:46:17.7383 [91] ERROR ADSIConnector.Common.Helpers.ResponseHelper Please check the data sent to msDS-cloudExtensionAttribute1.

Dev -

2023-08-22 07:45:18.8126 [101] DEBUG ADSIConnector.Common.ADOperations.CreateUpdateOperations update msDS-cloudExtensionAttribute1 value is [CP2], [System.String]
2023-08-22 07:45:19.0470 [101] DEBUG ADSIConnector.Common.ADOperations.ADHelper GetObjClassSchema Exit

Please let us know if this is something related to configuration in ADSI agent.

[System.String] is called in DEV, but in PROD it is not.

Thanks

[sudeshjaiswal]

Hello @BhanuKumar ,

Was it working before in Prod, Also We need the ADSI Agent Log as well, Please mask the confidential information.

Thanks,

[BhanuKumar]

Hi Sudeshjaiswal,

This is a new implementation in prod.

https://saviynt.freshdesk.com/support/tickets/1663524 is raised for the same, all the required logs are attached in the ticket.

Let me know if I need to attached the logs here.

Thanks

[sudeshjaiswal]

Hello @BhanuKumar,

Thanks for the confirmation, we are checking on it, we will keep you posted with the updates.