We saw the following error in provisioning a transaction for AD application after refresh task runs. i didn’t see any error logs in IQ services do i need to make any configuration to see the logs.
Error(s) reported back from the IQService - Failed to update attributes for identity CN=“TEST”, ou=test,DC=com. The attribute syntax specified to the directory service is invalid.
hi @sureshbomm
Error meaning: The attribute syntax specified to the directory service is invalid it is coming from Active Directory and indicates that IIQ is trying to update an attribute with:
An invalid value format
An incorrect data type
Or a value not allowed by the AD schema
I would check below:
In short: this is a data/mapping issue, not missing IQService logging.
Provisioning plan
I didn’t see any error attribute in the plan
Hi @sureshbomm ,
If possible, could you share provisioning plan and schema details by hiding sensitive data
hi @sureshbomm Could you please share the plan?
WADR, when did the Developer Forum become a place to ask the most basic questions about IIQ / ISC and AD provisioning? The error message is self-explanatory.
Hello @sureshbomm,
Quick question — are these attributes being updated through attribute synchronization, or is this coming from a provisioning request (like LCM or a rule)?
This helps narrow down where the issue is coming from, since both can trigger updates.
Also, you can get more details from:
Global Settings → Administrator Console → Provisioning
Search for the failed user there — it will show which exact attribute is failing and the value being sent. That will help identify if it’s a format or data issue.
Thanks!
Hi @sureshbomm are you still facing the issue?