Please help: Simple AD Provisioning with OIM issue

Question

Hi everyone,
Hopefully someone can lend a helping hand. I am trying to provision to AD, but I am getting the following error:
16:21:50,937 INFO [STDOUT] Running Get Attribute Map
16:21:51,500 INFO [STDOUT] Running Get Path
16:21:51,546 INFO [STDOUT] Running Create User
16:21:51,609 ERROR [ACTIVEDIRECTORYCONTROLLER] Problem creating object: javax.na
ming.NameNotFoundException: [LDAP: error code 32 - 0000208D: NameErr: DSID-031001C6, problem 2001 (NO_OBJECT), data 0, best match of:
        'DC=HappyGoLucky,DC=com'
]; remaining name 'cn=Jeff Chang'
I have imported all XML files and copied the necessary jar files to the xellerate\javatasks and xellerate\ext folders. Additionally, I fully configured the IT Resource (AD Server) and successfully compiled the adapter via Adapter Manager. FWIW, I tested my IT Resource settings in Softerra LDAP Browser successfully. I am NOT using any type of approval workflow. The failure message occured after I created an Xellerate User and tried to provision a new AD resource. The IT Resorce is using dc=happygolucky,dc=com as the root context (which means it should provision to cn=users,dc=happygolucky,dc=com) and I am not using SSL.
I am using JBoss 4.02, Windows Server 2003, and Oracle DB.
Any help would be greatly appreciated.
Thanks,
Jeff Chang
Message was edited by:
user555460

Answer 1

I don't think AD Server Cert to the Java keystore is required.
Anyway, besides that - I can tell you 1 problem. remaining name 'cn=Jeff Chang' is the problem area. Your remaining name should be something like cn=Jeff Chang, ou=WhateverOu,DC=HappyGoLucky,DC=com .
If you are able to add a user with the same credentials via LDAP Browser, this should work. I can even share a piece of code for doing the same:
public String createUser(String cnvalue, String fname, String lname, String treevalue){
          String rtnval="EXECUTION_SUCCESS";
          String treenodevalue="ou=WhateverOu,DC=HappyGoLucky,DC=com";
          if(treevalue!="")
               treenodevalue=treevalue;
          try {
               BasicAttributes attrs      = new BasicAttributes();
               BasicAttribute ocs           = new BasicAttribute("objectClass");
                                             ocs.add("top");
                                             ocs.add("person");
                                             ocs.add("rajnishbhatia19Class");
               attrs.put(ocs);
               attrs.put(new BasicAttribute("cn", cnvalue));
               attrs.put(new BasicAttribute("sn", lname));
               //attrs.put(new BasicAttribute("displayName", fname+" "+ lname)); // I named this custom attribute - your schema might not have it.
               String fulldn="cn="+cnvalue+","+treenodevalue;
               getContext().createSubcontext(fulldn, attrs);
          catch (Exception ex) {
               rtnval="ERROR: "+ex.getMessage();
               ex.printStackTrace();
               return rtnval;
I am also using this code on JBoss 4.02, Windows Server 2003, and Oracle DB environment. I have used this code to create user in Sun One DS & ADAM. I'm sure it should be consistent for AD as well.
Hope this helps.