Getting LDAP error code - 80 for Disabling AD Accounts for LOA

[sairamya15]

HI All,

We have requirement to disable users and move them to Specific OU when user is on LOA. we are trying below json in DISABLEACCOUNTJSON and using User update rule to trigger that.

The account is getting disabled in the target system but Account is not moved to specific OU, in saviynt we are getting 

Error while Delete operation for account-stest04 in AD - [LDAP: error code 80 - 00002089: UpdErr: DSID-031B0DCE, problem 5012 (DIR_ERROR), data 3 ]

Kindly help us

DISABLEACCOUNTJSON:

{
"deleteAllGroups":"No",
"userAccountControl":"514",
"password": "${randomPassword}",
"moveUsertoOU":"${if(user.customproperty40.equals('LOA')){'OU=LOA,OU=XXXX Users,DC=XXXX,DC=LOCAL'}else if(user.statuskey==0){'OU=Disable Accounts,OU=XXXX Users,DC=XXXX,DC=LOCAL'}else{'OU=On Hold User Accounts,OU=XXXX Users,DC=XXXX,DC=LOCAL'}}"
}

[pmahalle]

Hi @sairamya15 ,

Any reason you are passing password while disabling the account. Can you try removing it?

[sairamya15]

Hi @pmahalle ,

We tried removing the password still the same.

[rushikeshvartak]

LDAP Error Codes Document - https://docs.servicenow.com/en-US/bundle/vancouver-platform-security/page/administer/reference-pages...

LDAP: error code 80 - The password provided by the user did not match any password(s) stored in the user's entry Worker . 

{
"deleteAllGroups":"No",
"userAccountControl":"514",
"moveUsertoOU":"${if(user.customproperty40.equals('LOA')){'OU=LOA,OU=XXXX Users,DC=XXXX,DC=LOCAL'}else if(user.statuskey==0){'OU=Disable Accounts,OU=XXXX Users,DC=XXXX,DC=LOCAL'}else{'OU=On Hold User Accounts,OU=XXXX Users,DC=XXXX,DC=LOCAL'}}"
}

[sairamya15]

Hi @rushikeshvartak, 

Tried with and without passing password no luck.

Already we tested only else condition is working as expected.

when if or else if condition true move OU not working and pending tasks are stuck in queue.

[rushikeshvartak]

try

task.userKey.customproperty 

[ruqayyah]

@sairamya15 

Please try the below  json and let us know if that helps.

Regards

Ruqayyah

[sairamya15]

Hi @ruqayyah , @rushikeshvartak 

I have tried both ways the account is getting diabled but OU changes are not happening and Task remains pending.

[rushikeshvartak]

Use terenery instead of if else

[sairamya15]

Hi @rushikeshvartak 

Can you help me with sample