Skip to main content
A
Anonymous
February 26, 2009
Answered

CFLDAP and manager attribute

  • February 26, 2009
  • 1 reply
  • 2164 views
I have a CFLDAP query that I use successfully to update several user's Active Directory attributes. However, when I try to update the "manager" attribute by inserting the managers DN, I get the following error:

An error has occured while trying to execute modify :[LDAP: error code 19 - 000020B5: AtrErr: DSID-03152392, #7: 0: 000020B5: DSID-03152392, problem 1005 (CONSTRAINT_ATT_TYPE), data 0, Att 15000a (manager) 1: 000020B5: DSID-03152392, problem 1005 (CONSTRAINT_ATT_TYPE), data 0, Att 15000a (manager) 2: 000020B5: DSID-03152392, problem 1005 (CONSTRAINT_ATT_TYPE), data 0, Att 15000a (manager) 3: 000020B5: DSID-03152392, problem 1005 (CONSTRAINT_ATT_TYPE), data 0, Att 15000a (manager) 4: 000020B5: DSID-03152392, problem 1005 (CONSTRAINT_ATT_TYPE), data 0, Att 15000a (manager) 5: 000020B5: DSID-03152392, problem 1005 (CONSTRAINT_ATT_TYPE), data 0, Att 15000a (manager) 6: 000020B5: DSID-03152392, problem 1005 (CONSTRAINT_ATT_TYPE), data 0, Att 15000a (manager) ].

The manager's DN has 6 commas in it, so I believe the problem is that I am trying to update the attribute with a multiple value entry. Here is the query I am trying to execute (note the lowercase cn as recommended):

<cfldap action="MODIFY"
attributes="manager=cn=Jxx Lxxx, OU=CFO, OU=People, OU=Dallas-Tx, DC=cxx, DC=xxxxxxxx, DC=net"
modifytype="REPLACE"
dn="cn=Exx Yxxx, OU=IT Infrastructure, OU=SVC - IT OPS, OU=IT Operations, OU=People, OU=Dallas-Tx, DC=cxx, DC=xxxxxxxx, DC=net"
server="xxx.cxx.xxxxxxxx.net"
username="xxxxx"
password="xxxx">

I have tried searching through forums, google, etc. and although several people have the same problem, I can not see where this has been answered.

If anyone has any ideas or has an answer PLEASE share! I have a couple hundred user profiles to update with manager information!

Thank all in advance,
Eric
This topic has been closed for replies.
Correct answer
Eureka! Wouldn't you know, after a week of trying to get this to work, I post a message and then figure it out!

For those who are curious, you have to use the separator="" attribute within the CFLDAP query to change the separator to something other than the default comma. If left to the default, the manager attribute value fails A.D.s integrity check. The following worked like a champ:

<cfldap action="MODIFY"
modifytype="REPLACE"
dn="CN=Exx Yxxx, OU=IT Infrastructure, OU=SVC - IT OPS, OU=IT Operations, OU=People, OU=Dallas-Tx, DC=corp, DC=xxxxxxx, DC=net"
attributes="manager=CN=Jxxf Lxxxx, OU=CFO, OU=People, OU=Dallas-Tx, DC=corp, DC=sxxxxxx, DC=net"
separator="|"
server="xxxxx"
username="xxxxxx"
password="xxxxx">

1 reply

A
Anonymous
Correct answer
February 26, 2009
Eureka! Wouldn't you know, after a week of trying to get this to work, I post a message and then figure it out!

For those who are curious, you have to use the separator="" attribute within the CFLDAP query to change the separator to something other than the default comma. If left to the default, the manager attribute value fails A.D.s integrity check. The following worked like a champ:

<cfldap action="MODIFY"
modifytype="REPLACE"
dn="CN=Exx Yxxx, OU=IT Infrastructure, OU=SVC - IT OPS, OU=IT Operations, OU=People, OU=Dallas-Tx, DC=corp, DC=xxxxxxx, DC=net"
attributes="manager=CN=Jxxf Lxxxx, OU=CFO, OU=People, OU=Dallas-Tx, DC=corp, DC=sxxxxxx, DC=net"
separator="|"
server="xxxxx"
username="xxxxxx"
password="xxxxx">
Terms & ConditionsAccessibility statement
Using the community Terms of use Privacy Cookie preferences Do not sell or share my personal information ad choicesAdChoices