The error seems to be related with an attributed mis-spelled, I wasn't able
to find which one is responsible for your issue. Can you try to dump the
network traffic to see what attributes are sent by LSC to Active Directory ?

Regards,

-- 
Sebastien BAHLOUL
IAM / Security specialist
Ldap Synchronization Connector : http://lsc-project.org
Blog : http://sbahloul.wordpress.com/



2011/11/29 markham extra <[email protected]>

> Hi,
> i JUST want transfert Openldap people (cn sn givenName mail uid
> objectClass) to active directory Users,
> and I can't understand where the problem,
> can you help me please,
>
> Thanks all
>
>
> the error (same for each openldap user) :
>
> Error while adding entry cn=KEYSER SOZE in directory
> :javax.naming.directory.NoSuchAttributeException: [LDAP: error code 16
> - 00000057: LdapErr: DSID-0C090B38, comment: Error in attribute
> conversion operation, data 0, vece ]; remaining name 'cn=KEYSER SOZE'
> nov. 29 17:06:38 - ERROR - Error while synchronizing ID cn=KEYSER
> SOZE: java.lang.Exception: Technical problem while applying
> modifications to directory
> nov. 29 17:06:38 - DEBUG - java.lang.Exception: Technical problem
> while applying modifications to directory
> java.lang.Exception: Technical problem while applying modifications to
> directory
>        at
> org.lsc.AbstractSynchronize.synchronize2Ldap(AbstractSynchronize.java:399)
> [lsc-core-1.2.1.jar:na]
>        at org.lsc.SimpleSynchronize.launchTask(SimpleSynchronize.java:272)
> [lsc-core-1.2.1.jar:na]
>        at org.lsc.SimpleSynchronize.launch(SimpleSynchronize.java:155)
> [lsc-core-1.2.1.jar:na]
>        at org.lsc.Launcher.run(Launcher.java:151) [lsc-core-1.2.1.jar:na]
>        at org.lsc.Launcher.main(Launcher.java:123) [lsc-core-1.2.1.jar:na]
>
> -----------------------------------------------------------
>
> my lsc properties config file :
>
> #########################################################################
> # LDAP Synchronization Connector (LSC) - http://lsc-project.org         #
> # Main configuration file                                               #
> #########################################################################
> # Most configuration parameters for LSC are in this file.               #
> # All configuration files are located in this directory (etc)           #
> #                                                                       #
> # synchro OPENLDAP/AD by markham                                        #
> #                                                                       #
> #                                                                       #
> #########################################################################
>
> ##############################
> # Destination LDAP directory #
> ##############################
>
> #connexion a l'AD
> dst.java.naming.security.authentication = simple
> dst.java.naming.referral=ignore
> dst.java.naming.ldap.derefAliases=never
> dst.java.naming.factory.initial = com.sun.jndi.ldap.LdapCtxFactory
> dst.java.naming.ldap.version = 3
> dst.java.naming.provider.url = ldap://localhost/DC=IN,DC=monlan-yeah,DC=fr
> dst.java.naming.security.principal =
> CN=ADMINISTRATEUR,CN=Users,DC=in,DC=monlan-yeah,DC=fr
> dst.java.naming.security.credentials = ***********
>
> #To manage Active Directory Paged Results Control (which enables to
> return more than 1000 entries), add:
> dst.java.naming.ldap.pageSize = 1000
>
> ###################
> # Source database #
> ###################
>
> #connexion au ldap
> src.java.naming.security.authentication =simple
> src.java.naming.referral=ignore
> src.java.naming.ldap.derefAliases=never
> src.java.naming.factory.initial = com.sun.jndi.ldap.LdapCtxFactory
> src.java.naming.ldap.version = 3
> src.java.naming.provider.url = ldap://vizir/dc=monlan-yeah,dc=fr
> src.java.naming.security.principal = cn=Manager,dc=monlan-yeah,dc=fr
> src.java.naming.security.credentials = ********
>
> #######################
> # Tasks configuration #
> #######################
> lsc.tasks = ADuser
> lsc.tasks.ADuser.bean=org.lsc.beans.SimpleBean
> lsc.tasks.ADuser.srcService.filterId= (uid={uid})
> lsc.tasks.ADuser.srcService.pivotAttrs = uid
>
> lsc.tasks.ADuser.srcService =  org.lsc.jndi.SimpleJndiSrcService
> lsc.tasks.ADuser.srcService.baseDn = ou=people
> lsc.tasks.ADuser.srcService.filterAll =
> (&(uid=*)(objectClass=inetOrgPerson))
> lsc.tasks.ADuser.dn = 'cn=' + srcBean.getAttributeValueById('cn')
> lsc.tasks.ADuser.dstService = org.lsc.jndi.SimpleJndiDstService
> lsc.tasks.ADuser.dstService.baseDn = CN=Users,DC=in,DC=monlan-yeah,DC=fr
> lsc.tasks.ADuser.dstService.filterAll =
> (&(sAMAccountName=*)(objectClass=user))
>
> lsc.tasks.ADuser.dstService.filterId= (sAMAccountName={uid})
> lsc.tasks.ADuser.dstService.pivotAttrs = uid
>
> dn.real_root=cn=Users,dc=in,dc=monlan-yeah,dc=fr
> lsc.tasks.ADuser.srcService.attrs = cn sn givenName mail uid objectClass
> lsc.tasks.ADuser.dstService.attrs = cn sn givenName mail
> sAMAccountName objectClass userPrincipalName UnicodePwd
> userAccountControl
> ##########################
> # Synchronisation option #
> ##########################
>
> lsc.syncoptions.ADuser =
> org.lsc.beans.syncoptions.PropertiesBasedSyncOptions
> lsc.syncoptions.ADuser.default.action = F
> lsc.syncoptions.user.objectClass.force_value =
> "top";"user";"person";"organizationalPerson"
> # userAccountControl
> lsc.syncoptions.ADuser.userAccountControl.create_value =
> AD.userAccountControlSet( "0", [AD.UAC_SET_NORMAL_ACCOUNT])
> lsc.syncoptions.ADuser.sAMAccountName.create_value =
> srcBean.getAttributeFirstValueById("uid")
> lsc.syncoptions.ADuser.userPrincipalName.force_value =
> srcBean.getAttributeFirstValueById("uid") + "@in.monlan-yeah.fr"
> lsc.syncoptions.ADuser.mail.create_value =
> srcBean.getAttributeValueById("mail")
>
> # unicodePwd <- "changeit" at creation (requires SSL connection to AD)
> lsc.syncoptions.ADuser.unicodePwd.create_value =
> AD.getUnicodePwd("changeit")
> _______________________________________________________________
> Ldap Synchronization Connector (LSC) - http://lsc-project.org
>
> lsc-users mailing list
> [email protected]
> http://lists.lsc-project.org/listinfo/lsc-users
>
_______________________________________________________________
Ldap Synchronization Connector (LSC) - http://lsc-project.org

lsc-users mailing list
[email protected]
http://lists.lsc-project.org/listinfo/lsc-users

Reply via email to