LDAP sync issues.

Question

In our environment we have OIM 11.1.1.3 and we have enabled LDAP sync with OID. Any user created on OIM is getting synced to OID. The problem is when we are making any changes to the attributes of the users or deleting a user the changes are reflected only to the entries which are under an OU. But all the users synced from OIM to OID are entering under a CN for eg- cn=Users. If someone can help or give proper pointers or guidance so that we can sync users to respective ou's ?

Answer 1

I've had the same problem in configuring ODSEE.
Since ldapadd doesn't exist, we had to use ldapmodify.
You have two choices:
a. change all of the *.ldif files and put them into the ldapmodify format
b. add the *"-a"* to the command line, such as
ldapmodify -h <host> -p <port> -D cn="Directory Manager" -w <password> -a -f iPlanet7_user_index_add_generic.ldif
This assumes that you've followed the instructions and figured out what the nsslapd-backend value is -- lets say abc. You then have to edit iPlanet7_user_index_add_generic.ldif and wherever you see *<index-root>,* replace it with *"cn=index,cn=abc,cn=ldbm database,cn=plugins,cn=config"*
The instructions state you have to extend the ODSEE using the following:
iPlanet7_user_index_add.ldif OR iPlanet7_user_index_generic.ldif
iPlanet7_oam_pwd_schema_add.ldif
iPlanet7_user_index_add.ldif
iPlanet7_user_schema_add.ldif
It appeared that changes to the sunOne schema that you should have loaded before you started extending ODSEE for OAM (creating Users, Groups, Reserve), doesn't contain userRoot which is required for iPlanet_user_index_add.ldif