It worked after I listed the additional attributes in LDAP destination
service:

<ldapDestinationService>
                                <name>ad-dst-service</name>
                                <connection reference="ldap-dst-conn" />
                                <baseDn>ou=my,dc=homolog</baseDn>
                                <pivotAttributes>
                                        <string>mail</string>
                                </pivotAttributes>
                                <fetchedAttributes>
                                          <string>cn</string>
                                          <string>sn</string>
                                          <string>objectClass</string>
                                          <string>uid</string>
                                          <string>mail</string>
                                          <string>userPassword</string>

<string>eduPersonPrincipalName</string>
                                          <string>ntUserDomainId</string>

<string>ntUserCreateNewAccount</string>

<string>ntUserDeleteAccount</string>
                                </fetchedAttributes>

Thanks.

2014-11-11 9:34 GMT-03:00 Anderson <[email protected]>:

> Hello, I am trying to do the synchronization between Active Directory and
> openldap base, while timing want to insert the objectClass attribute NTUSER
> and ntUserDomainId but I'm getting the error:
> ERROR - Error while adding entry uid=user.test,ou=RNP,dc=homolog,dc=rnp in
> directory :javax.naming.directory.SchemaViolationException: [LDAP: error
> code 65 - missing attribute "ntUserDomainId" required by object class
> "ntUser"
>
> My Settings:
>
>                                <dataset>
>                                   <name>objectClass</name>
>                                   <policy>FORCE</policy>
>                                   <forceValues>
>                                         <string>"shadowAccount"</string>
>                                         <string>"inetOrgPerson"</string>
>                                         <string>"top"</string>
>                                         <string>"eduPerson"</string>
>                                         <string>"person"</string>
>
> <string>"organizationalPerson"</string>
>                                         <string>"ntUser"</string>
>                                   </forceValues>
>                                 </dataset>
>                                 <dataset>
>                                         <name>ntUserDomainId</name>
>                                         <policy>FORCE</policy>
>                                         <forceValues>
>                                         <string>
>                                         var ntUserDomainId =
> srcBean.getDatasetFirstValueById("uid");
>                                         </string>
>                                         </forceValues>
>
>                                 </dataset>
> Can you help?
>
> Grateful.
>
_______________________________________________________________
Ldap Synchronization Connector (LSC) - http://lsc-project.org

lsc-users mailing list
[email protected]
http://lists.lsc-project.org/listinfo/lsc-users

Reply via email to