Updating username and attribute in LDAP causes error; Transfer users between groups

Asked By melendezathena 0 points N/A Posted on - 02/12/2012

Hi,

I have an LDAP java program for Active Directory acceptance. I am stuck with 2 questions. Please answer these.

I can successfully run when I update user information without updating the user name or an attribute. But an error occurs when trying to update name or attribute  See below.

javax.naming.OperationNotSupportedException: [LDAP: error code 53 –

00002016: Sv

cErr: DSID-031A0FC0, problem 5003 (WILL_NOT_PERFORM), data 0

I need a way to update name and an attribute in user.

The second one is that I want to transfer a user from one group to another. For example, I want update user dn:

CN=test1,OU¬111,OU=中望,OU=外来服务人员,O=gdepb,DC=gdepb,DC=gov,DC=cn

To another group with dn update to

dn:CN=test1,OU¬222,OU=中望,OU=外来服务人员,O=gdepb,DC=gdepb,DC=gov,DC=cn

I want to know how to do the transfer from AD111 to AD222.

Thanks in advance.

• Status: Open
• Question Views: 1284
• Answer Count: 1
• Vote Up 0 Vote Down

• Answer Accepted: No
• Question Category: Active Directory

Answered By tibor.tokie 25 points N/A #96062

Updating username and attribute in LDAP causes error; Transfer users between groups

 

Dear Melendezathena

 

For the first question, "(WILL_NOT_PERFORM)" indicates that LDAP server can't process your request because of some server defined restrictions. This error may occur for several reasons, u should solve your problem first in order to be able to update your data.

 

Maybe the add entry request violates the server defined rules. Or the modify attribute request specifies some attributes that users r not able to modify. Or password restrictions prevent this action. Or connection restrictions may also prevent the action.

 

In your case, this error happens because LDAP is unable to update the attribute. This because the value provided to the new attribute doesn't meet the server predefined rules like length, complexity or history requirements of the domain.

 

This happens often when u try to enable a user that has an empty password. To resolve this issue, try to reset the password of the target user or select to synchronize passwords ensuring that they r not blank.

 

Hope this may help you.

 

Best of luck

About tibor.tokie

Questions
1

Answers
157

Best Answers
24

• Vote Up 0 Vote Down

• Posted on - 02/13/2012
• Question Category: Active Directory