ObjectNotFoundException on moving AD account while enabling/Disabling

IdentityIQ (IIQ) IIQ Discussion and Questions
, ,
1

IIQ version
8.3p2

Problem Statement :
Issue: We are getting the below ObjectNotFoundException error on moving Active Directory account from CN=,OU=<old_ou>,DC= to CN=,OU=<new_ou>,DC= while enabling/disabling the account.
Functionality wise it works fine. The account is moved to the new OU and enabled on the target system and also looks fine in IIQ as well but the error shows up in access request and the provisioning result is returned as null.

I could see 8.3 release note and in which they say they fixed this defect but still I face this issue

image
image1108×109 12.1 KB

Error :
sailpoint.connector.ObjectNotFoundException: [ ObjectNotFoundException ] [ Possible suggestions ] Ensure that account - CN=XXXX,OU=Disabled Accounts,OU=Dev,OU=SailPoint,DC=XXXX,DC=local exists. [ Error details ] ObjectNotFound [LDAP: error code 32 - 0000208D: NameErr: DSID-0310028D, problem 2001 (NO_OBJECT), data 0, best match of: ‘OU=Disabled Accounts,OU=Dev,OU=SailPoint,DC=XXXX,DC=XXXX’ ]

2

Hi @DMalaghe1993,

I replied in your other topic for this problem too.

3

Hi @enistri_devo This issue is
intermittent.

4

@DMalaghe1993 try to use single account aggregation after move.

Aggregating a single account from an application - Compass

example:
a. Move User
b. Single account Aggregation
c. do other stuffs

1 Like