OIM11g r2 - AD (ICF -11.1.1.5 version) error provisioning groups

Question

Hi,
I have upgraded 9.1.1.7 version of the connector to 11.1.1.5 version.
I am able to provision users to AD and reconcile the data from AD.
Have couple of issues
1. Unable to provision group info into AD
Error from the connector server (Trace enabled)
7/3/2013 4:05:47 PM  <VERBOSE>: Class-> ActiveDirectoryUtils, Method -> getADSPathname, Message -> Method Entered. Method Paramter: provider = LDAP, serverName = <hostname>, ActiveDirectoryConfiguration
7/3/2013 4:05:47 PM  <VERBOSE>: Class-> ActiveDirectoryUtils, Method -> getADSPathName, Message -> Method Exiting. Returning IADsPathName with path = LDAP://<hostname>/CN=\\\<group dn>
7/3/2013 4:05:47 PM  <VERBOSE>: Class-> ActiveDirectoryUtils, Method -> GetFullPath, Message -> Method Exiting. Return value = LDAP://<hostname>/<groupdn>
7/3/2013 4:05:47 PM  <VERBOSE>: Class-> ActiveDirectoryUtils, Method -> GerLDAPPath, Message -> Method Exiting. Return value =  LDAP://<hostname>/<groupdn>
7/3/2013 4:05:47 PM  <INFORMATION>: Class-> ActiveDirectoryUtils, Method -> GetDirectoryEntry, Message -> Method Entered. Parameter: path = LDAP://<hostname><groupDN>, ActiveDirectoryConfiguration
7/3/2013 4:05:47 PM  <VERBOSE>: Class-> ActiveDirectoryUtils, Method -> GetDirectoryEntry, Message -> Using the auth type as Secure
7/3/2013 4:05:47 PM  <INFORMATION>: Class-> ActiveDirectoryUtils, Method -> GetDirectoryEntry, Message -> Creating Directory Entry with path: LDAP://<hostname>/CN=\\\<Group DN>, DirectoryAdminName = <Userid> , DirectoryAdminPassword = ***********, authtype = Secure
7/3/2013 4:05:47 PM  <ERROR>: Class-> ActiveDirectoryUtils Method -> GetDirectoryEntry, Message -> Exception occured during the creation of directory entry.
7/3/2013 4:05:47 PM  <ERROR>: Class-> ActiveDirectoryUtils Method -> GetDirectoryEntry, Message -> Exception Message : There is no such object on the server.
7/3/2013 4:05:47 PM  <ERROR>: Class-> ActiveDirectoryUtils Method -> GetDirectoryEntry, Message -> Exception Stack Trace :    at System.DirectoryServices.DirectoryEntry.Bind(Boolean throwIfFail)
   at System.DirectoryServices.DirectoryEntry.Bind()
   at System.DirectoryServices.DirectoryEntry.get_NativeObject()
   at Org.IdentityConnectors.ActiveDirectory.ActiveDirectoryUtils.GetDirectoryEntry(String path, ActiveDirectoryConfiguration configuration) in C:\Documents and Settings\PSOORI\Desktop\idc\bundles\dotnet\ActiveDirectory\ActiveDirectoryConnector\ActiveDirectoryUtils.cs:line 1423
ConnectorServer.exe Error: 0 : Org.IdentityConnectors.Framework.Common.Exceptions.ConnectionFailedException: Unable to get the Directory Entry
   at Org.IdentityConnectors.ActiveDirectory.ActiveDirectoryUtils.GetDirectoryEntry(String path, ActiveDirectoryConfiguration configuration) in C:\Documents and Settings\PSOORI\Desktop\idc\bundles\dotnet\ActiveDirectory\ActiveDirectoryConnector\ActiveDirectoryUtils.cs:line 1456
   at Org.IdentityConnectors.ActiveDirectory.CustomAttributeHandlers.UpdateDeFromCa_OpAtt_Groups(ObjectClass oclass, UpdateType type, DirectoryEntry directoryEntry, ConnectorAttribute attribute) in C:\Documents and Settings\PSOORI\Desktop\idc\bundles\dotnet\ActiveDirectory\ActiveDirectoryConnector\CustomAttributeHandlers.cs:line 454
   at Org.IdentityConnectors.ActiveDirectory.CustomAttributeHandlers.UpdateDeFromCa(ObjectClass oclass, UpdateType type, DirectoryEntry directoryEntry, ConnectorAttribute attribute) in C:\Documents and Settings\PSOORI\Desktop\idc\bundles\dotnet\ActiveDirectory\ActiveDirectoryConnector\CustomAttributeHandlers.cs:line 296
   at Org.IdentityConnectors.ActiveDirectory.ActiveDirectoryUtils.AddConnectorAttributeToADProperties(ObjectClass oclass, DirectoryEntry directoryEntry, ConnectorAttribute attribute, UpdateType type) in C:\Documents and Settings\PSOORI\Desktop\idc\bundles\dotnet\ActiveDirectory\ActiveDirectoryConnector\ActiveDirectoryUtils.cs:line 701
   at Org.IdentityConnectors.ActiveDirectory.ActiveDirectoryUtils.UpdateADObject(ObjectClass oclass, DirectoryEntry directoryEntry, ICollection`1 attributes, UpdateType type, ActiveDirectoryConfiguration config) in C:\Documents and Settings\PSOORI\Desktop\idc\bundles\dotnet\ActiveDirectory\ActiveDirectoryConnector\ActiveDirectoryUtils.cs:line 400
   at Org.IdentityConnectors.ActiveDirectory.ActiveDirectoryConnector.Update(UpdateType type, ObjectClass oclass, ICollection`1 attributes, OperationOptions options) in C:\Documents and Settings\PSOORI\Desktop\idc\bundles\dotnet\ActiveDirectory\ActiveDirectoryConnector\ActiveDirectoryConnector.cs:line 1639
   at Org.IdentityConnectors.Framework.Impl.Api.Local.Operations.UpdateImpl.Update(ObjectClass objclass, Uid uid, ICollection`1 replaceAttributes, OperationOptions options) in c:\ADE\aime_icf\icf\framework\dotnet\FrameworkInternal\ApiLocalOperations.cs:line 1377
   at Org.IdentityConnectors.Framework.Impl.Api.Local.Operations.ConnectorAPIOperationRunnerProxy.Invoke(Object proxy, MethodInfo method, Object[] args) in c:\ADE\aime_icf\icf\framework\dotnet\FrameworkInternal\ApiLocalOperations.cs:line 244
   at ___proxy1.Update(ObjectClass , Uid , ICollection`1 , OperationOptions )
   at Org.IdentityConnectors.Framework.Impl.Server.ConnectionProcessor.ProcessOperationRequest(OperationRequest request) in c:\ADE\aime_icf\icf\framework\dotnet\FrameworkInternal\Server.cs:line 609
    DateTime=2013-07-03T23:05:47.5641413Z
2. When reconciliing, I am getting blank data into the process form (groups) - Event shows the group data. (Groups lookup have relavant group info).
     The number of blanks are equal to the number of groups reconciled.
Any clues on these will help.
Thanks
Vicky

Answer 1

Hi,
One more behaviour I have noticed, I have noticed only for the users with group name starting with  "+", provisioning and reconciliation are failing.
The special character "+" is giving the problem.
Did anyone have faced this kind of behaviour.
Thanks
Vicky