Hello,

Here a piece of the logging of the Identity Manager (logging taken with
iMonitor).

================================================== ==============================
DirXML Log Event -------------------
Driver: \GEM_ASSEN\GEM_ASSEN\Services\DirXML\DriverSet\AD2 012
Channel: Subscriber
Object: \GEM_ASSEN\GEM_ASSEN\SB\Dir\UName
Status: Error
Message: <ldap-err ldap-rc="19"
ldap-rc-name="LDAP_CONSTRAINT_VIOLATION">
<client-err ldap-rc="19"
ldap-rc-name="LDAP_CONSTRAINT_VIOLATION">Constraint
Violation</client-err>
<server-err>00002082: AtrErr: DSID-031513C2, #1:
0: 00002082: DSID-031513C2, problem 1005 (CONSTRAINT_ATT_TYPE), data
0, Att 2b (initials):len 14
</server-err>
<server-err-ex win32-rc="8322"/>
</ldap-err>
================================================== ==============================

The problem is that (here in The Netherlands) we used the "Middle
initial" for what we called in The Netherlands "Tussenvoegsel". So for
example "Willem van Oranje", "van" is the Tussenvoegsel.
Also a Tussenvoegsel is "van der" which is 7 characters. Here is the
problem. "Middle initial" in eDirectory is synchronized with "Initials"
in Active Directory. The maximum length of "Initials" in Active
Directory is 6 characters. "van der" with 7 characters gives the error
when syncing to "Initials" which can take 6 characters.

In eDirectory, don't use "Middle initial" for Tussenvoegsel or something
like that in other languages.

Kind regards,
Philip


--
PhilipOnstwedder
------------------------------------------------------------------------
PhilipOnstwedder's Profile: https://forums.netiq.com/member.php?userid=8191
View this thread: https://forums.netiq.com/showthread.php?t=51861