Active Directory Provisioning issue

IdentityIQ (IIQ) IIQ Discussion and Questions
,
1

Which IIQ version are you inquiring about?

Version 8.4

Share all details related to your problem, including any error messages you may have received.

Hello Experts,

We are working on AD provision from IIQ and getting below error. Can you please help us to fix this issue.

Errors: Exception occurred while executing the RPCRequest: Errors returned from IQService. Error occurred while enabling the account cn=C327xxxx,OU=xxxx,OU=xxxx,OU=xxxx-QA,DC=xxx,DC=xxxx,DC=comThe server is unwilling to process the request. The server is unwilling to process the request. 0000052D: SvcErr: DSID-031A124C, problem 5003 (WILL_NOT_PERFORM), data 0 0000052D: SvcErr: DSID-031A124C, problem 5003 (WILL_NOT_PERFORM), data 0 . HRESULT 0x80072035

Thanks

2

Forst thing to be checked if the account in AD has a password set - you won’t be able to enable AD account without password.

3

We are creating the account. we are not enabling it.

4

Then check if password you are setting complies with required AD password complexity.

1 Like
5

Hi @niket345 ,

Active Directory rejects the account creation request if the password does not meet the configured policy.

I would recommend you check with the Active Directory admin for password policies and meet those then it will work.

1 Like
6

The error is not caused by IIQ, but comes directly from Active Directory. This error may be returned by Active Directory by any one of these problems:

  • An attempt to violate a password policy, such as history, password length, blank password, etc.
  • An attempt to set a value for an attribute that does not exist
  • An attempt to set an incorrect value for an attribute (the value does not adhere to the attribute’s syntax).
  • Any other operation that the Active Directory server will not allow.

Ensure that the operation is allowed by Active Directory: passwords should comply with password policy; attributes must exist; attribute values must adhere to the attribute’s syntax. Also check network metrics for anomalies and check network security appliances for closed connections.

3 Likes
7

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.