Issue with ADSI Connector: extensionAttribute3 Population Failure in Active Directory

[Ajaykoppula]

Hi everyone,

We're currently working on integrating Active Directory using the ADSI connector, and we have a requirement to populate extensionAttributes in AD. However, we've encountered an issue where the AD account is being created but fails to populate the extensionAttribute.

Here's the JSON we're using:

{
"objects": [
{
"objectClasses": [
"user",
"top",
"Person",
"OrganizationalPerson"
],
"attributes": {
"cn": "${user?.displayname.replace(',', '\\\\,')?.replace('/','\\/')}",
"displayName": "${user?.displayname.replace(',', '\\\\,')?.replace('/','\\/')}",
"sAMAccountName": "${user?.customproperty2}",
"extensionAttribute3": "${user?.username}",
"initials": "${if (user?.middlename == null || user?.middlename == '') {''} else {user?.middlename}}",
"givenName": "${if (user?.preferedFirstName == null || user?.preferedFirstName == '' ) {user?.firstname} else {user?.preferedFirstName}}",
"sn": "${if (user?.customproperty1 == null || user?.customproperty1 == '' ) {user.lastname} else {user?.customproperty1}}"
}
}
]
}

we're encountering the following error:
status:Success, message:Improper/Malformed data is passed to some attribute(s). | Processing additional object classes failed. | Please check the data sent to extensionAttribute3., messageCodes:OBJ_ERR_MSG_00013 | OBJ_ERR_MSG_00014 | OBJ_INFO_MSG_00005, errorDetails:OBJ_ERR_MSG_00013 : -2147016651 : The server is unwilling to process the request. : 0000052D: SvcErr: DSID-031A124C, problem 5003 (WILL_NOT_PERFORM), data 0


Could someone please help us identify what might be causing this issue? We'd greatly appreciate any insights or suggestions.

Thank you!

[Manu269]

@Ajaykoppula Can you try this please :

"${user.username}",

[Ajaykoppula]

Hi Manish, 
I have tried it, still it gives me the same error..

status:Success, message:Improper/Malformed data is passed to some attribute(s). | Processing additional object classes failed. | Please check the data sent to extensionAttribute3., messageCodes:OBJ_ERR_MSG_00013 | OBJ_ERR_MSG_00014 | OBJ_INFO_MSG_00005, errorDetails:OBJ_ERR_MSG_00013 : -2147016651 : The server is unwilling to process the request. : 0000052D: SvcErr: DSID-031A124C, problem 5003 (WILL_NOT_PERFORM), data 0

[Raghu]

add null check  and try it

"attributes": {
"cn": "${user.displayname.replace(',', '\\\\,')?.replace('/','\\/')}",
"displayName": "${user.displayname.replace(',', '\\\\,')?.replace('/','\\/')}",
"sAMAccountName": "${user.customproperty2 != null ? user.customproperty2 : 'null'}",
"extensionAttribute3": "${user.username != null ? user.username : 'null'}",
"initials": "${if (user.middlename == null || user.middlename == '') {''} else {user.middlename}}",
"givenName": "${if (user.preferedFirstName == null || user.preferedFirstName == '' ) {user.firstname} else {user.preferedFirstName}}",
"sn": "${if (user.customproperty1 == null || user.customproperty1 == '' ) {user.lastname} else {user.customproperty1}}"
}

[shaligramc]

Hi Ajay, 

The error indicates that the target system (AD in this case) is not accepting the value sent in extensionAttribute3. Please verify on AD end, if there is any restriction (special chars, length of the data, etc) on the data/value it can take. You can see sample values of this attribute on AD side as well for existing accounts and compare with what is being sent. 

Thanks, 

Shaligram Choudhary

[Ajaykoppula]

Hi Shaligram Choudhary,

I tried to pass "x10000008" this from AD itself then it is allowed, but when i'm trying to pass "x10000007" from Saviynt it is giving me the issue...

Thanks,
Ajay

[vivek9237]

@Ajaykoppula Can you hardcode the value of extensionAttribute3 and try?

{
  "objects": [
    {
      "objectClasses": [
        "user",
        "top",
        "Person",
        "OrganizationalPerson"
      ],
      "attributes": {
        "cn": "${user?.displayname.replace(',', '\\\\,')?.replace('/','\\/')}",
        "displayName": "${user?.displayname.replace(',', '\\\\,')?.replace('/','\\/')}",
        "sAMAccountName": "${user?.customproperty2}",
        "extensionAttribute3": "x10000007",
        "initials": "${if (user?.middlename == null || user?.middlename == '') {''} else {user?.middlename}}",
        "givenName": "${if (user?.preferedFirstName == null || user?.preferedFirstName == '' ) {user?.firstname} else {user?.preferedFirstName}}",
        "sn": "${if (user?.customproperty1 == null || user?.customproperty1 == '' ) {user.lastname} else {user?.customproperty1}}"
      }
    }
  ]
}

[Ajaykoppula]

Hi Vivek

Have tried by passing the value hardcoded, still it's the same error.
Thanks,
Ajay

[rushikeshvartak]

Are you able to import extensionAttribute3