Click HERE to see how Saviynt Intelligence is transforming the industry. |
01/13/2023 08:37 AM
Hi Team,
We are trying to create user account to ADLDS with object class as inetOrgPerson, while creating new user account getting below error message. we are not passing any passwords to AD. we configured "SETRANDOMPASSWORD" as FALSE in connection.
Error: [LDAP: error code 19 - 0000052D: AtrErr: DSID-033808CA, #1: 0: 0000052D: DSID-033808CA, problem 1005 (CONSTRAINT_ATT_TYPE), data 2245, Att 9005a (unicodePwd) ]
Create account JSON:
{"objectclass": ["top", "person", "organizationalPerson", "user", "inetOrgPerson"],
"mail": "${user.email}",
"displayName": "${user.firstname} ${user.lastname}",
"comment": "active",
"msDS-UserAccountDisabled": "FALSE",
"co": "${user.country}",
"company": "${user.companyname}",
"employeeID": "${user.employeeid}",
"employeeType": "${user.employeeType}",
"uid": "${user.username}",
"givenName": "${user.firstname}",
"sn":"${user.lastname}",
"name":"${user.username}",
"departmentNumber":"${user.departmentNumber}",
"postalAddress":"${user.street} ${user.locationnumber} ${user.city} ${user.country}",
"postalCode":"${user.locationnumber}",
"street":"${user.street}",
"l":"${user.city}",
"st":"${user.state}",
"mobile":"${user.phonenumber}",
"costCentre":"${user.costcenter}",
"c": "${user.customproperty19}",
"employeeNumber": "${user.customproperty5}",
"telephoneNumber":"${user.customproperty9}",
"preferredLanguage":"${user.customproperty2}",
"facsimileTelephoneNumber":"${user.customproperty10}",
"title":"${user.title}",
"companyShortName":"${user.customproperty21}",
"physicalDeliveryOfficeName":"${user.location}",
"cn": "${user.username}",
"preferredFirstName": "${user.customproperty14}",
"globalOrganisation": "${user.customer.description}",
"globalOrganisationCode": "${user.orgunitid}",
"globalDepartmentName": "${user.customproperty4}",
"globalDepartment": "${user.customproperty3}",
"initials": "${user.customproperty13}",
"employmentEnd": "${user.enddate}"
}
Could you please let me how to fix this issue.
Thanks & Regards,
Yogaraj K
Solved! Go to Solution.
01/13/2023 08:43 AM
Do you want to set the password while creation?
If so can you try to add below two parameters and see if that works
"accountExpires": "0",
"pwdLastSet": "0"
01/13/2023 08:49 AM
@Saathvik No, we don't want to set password while creation of user account.
01/13/2023 08:50 AM
Okay then try to include two parameters I suggested. Also rushikesh identified one AD parameter(streetAddress) which is wrongly used please correct that as well.
01/14/2023 06:13 AM
@Saathvik Getting below error message after updated the suggested attributes "accountExpires": "0", "pwdLastSet": "0"
Error: [LDAP: error code 19 - 0000209A: AtrErr: DSID-030509A6, #1: 0: 0000209A: DSID-030509A6, problem 1005 (CONSTRAINT_ATT_TYPE), data 0, Att 90060 (pwdLastSet) ]
01/14/2023 06:39 AM
beacuse you are setting password
01/14/2023 06:45 AM
We don't want to set password.
01/14/2023 06:47 AM
ms-DS-User-Password-Not-Required = false
01/14/2023 07:13 AM
Still getting this error [LDAP: error code 19 - 0000052D: AtrErr: DSID-033808CA, #1: 0: 0000052D: DSID-033808CA, problem 1005 (CONSTRAINT_ATT_TYPE), data 2245, Att 9005a (unicodePwd) ]
01/14/2023 08:26 AM
The issue has been resolved. Issue was with attribute, we have changed "msDS-UserAccountDisabled" to "IsDisable" custom attribute in AD.
01/13/2023 08:47 AM
It should streetAddress instead of street
01/13/2023 08:50 AM
@rushikeshvartak street attribute is existing in AD. so, I guess there is no issues with street attribute.
01/13/2023 08:54 AM
Oh nevermind you mentioned ADLDS so ignore about street attribute
01/13/2023 08:56 AM
"msDS-UserAccountDisabled": "false",