HELP !!! "Cannot modify the user entry because no matching user was found"

Question

I have read all I have found about ISW (identity synchronization for windows).
However I keep bumping into this exact same problem. I am desperate since I cannot seem to
figure out the cause. Can someone please help a very desperate person ??
On the AD side the user test5 resides in an OU called "Admin Users". Even if I add test5 into the windows OU of people it still does not work.
Solaris 10, update 8
Directory Server 6.3.1 (DS)
Identity Manager 8.1.0 (IDM)
System Identity Synchronization for Windows 6.0
MySql 5.1.41 (CE)
/// Warning message
[28/Dec/2009:10:47:18.197 -0500] WARNING 19 CNN101 idmserver "Cannot modify the user entry because no matching user was found, action=Type: MODIFY SUL: SUL1 {Data Attrs: [REPL unicodepwd: ****]} {Other Attrs: cn: test five nsuniqueid: df2cb501-ef1e11de-8029a367-1c30f1b6 objectclass: top, person, organizationalPerson, inetorgperson, account, posixAccount, shadowAccount, machineuser, dspswuser dn: uid=test5,ou=people,dc=host,dc=company,dc=com changenumber: 27323}." (Action ID=CNN100-125D5CFBF36-13600, SN=5)
/// SUL definition
Sun Java System=> Directory source: dc=host,dc=company,dc=com Base DN: dc=host,dc=company,dc=com
Windows => Directory source: host.company.com Base DN: dc=host,dc=company,dc=com
/// unix ldap information
root@idmserver /: ldaplist -l passwd test5
dn: uid=test5,ou=people,dc=host,dc=company,dc=com
givenName: test
sn: five
loginShell: /bin/bash
machinegroup: admin
uidNumber: 1427
gidNumber: 10
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: inetorgperson
objectClass: account
objectClass: posixAccount
objectClass: shadowAccount
objectClass: machineuser
objectClass: dspswuser
uid: test5
gecos: test five
cn: test five
homeDirectory: /net/host/vol/vol1/home/test5
userPassword: {crypt}SQDp2i8F9mAyc
// AD windows ldap information
Dn: CN=test five,OU=Admin Users,DC=host,DC=company,DC=com
     objectClass: top; person; organizationalPerson; user;
     cn: test five;
     sn: five;
     givenName: test;
     distinguishedName: CN=test five,OU=Admin Users,DC=host,DC=company,DC=com;
     instanceType: 0x4 = ( IT_WRITE );
     whenCreated: 12/28/2009 16:46:55 Eastern Standard Time Eastern Daylight Time;
     whenChanged: 12/28/2009 17:29:52 Eastern Standard Time Eastern Daylight Time;
     displayName: test five;
     uSNCreated: 36921;
     memberOf: CN=Domain Admins,CN=Users,DC=host,DC=company,DC=com;
     uSNChanged: 36935;
     name: test five;
     objectGUID: 1210235b-61b4-4fd8-bc4b-7455d1e31554;
     userAccountControl: 0x200 = ( UF_NORMAL_ACCOUNT );
     badPwdCount: 0;
     codePage: 0;
     countryCode: 0;
     homeDirectory: \\server\profile$\test5\home;
     homeDrive: H:;
     badPasswordTime: 01/01/1601 00:00:00 UNC ;
     lastLogoff: 01/01/1601 00:00:00 UNC ;
     lastLogon: 01/01/1601 00:00:00 UNC ;
     pwdLastSet: 01/01/1601 00:00:00 UNC ;
     primaryGroupID: 513;
     profilePath: \\server\profile$\test5\profile;
     objectSid: S-1-5-21-2511962931-1144655276-2379676629-1153;
     adminCount: 1;
     accountExpires: 09/14/30828 02:48:05 UNC ;
     logonCount: 0;
     sAMAccountName: test5;
     sAMAccountType: 805306368;
     objectCategory: CN=Person,CN=Schema,CN=Configuration,DC=host,DC=company,DC=com;
Edited by: mightbe on Dec 30, 2009 8:22 AM

Answer 1

Hi,
This might be a stupid question but what happens when you perform a recon against AD? Once complete does the index list the account as confirmed, unknown etc?
Ant.