Hello All,

I'm getting this "LDAP_INVALID_SYNTAX">Invalid Syntax error on some
users syncing to AD. Others, apparently identical, work fine.

IDM 4.01 with latest AD Driver (from 4.02 Designer). Couldn't put up
4.02 because it's an OES 11 server.

I cannot find what's wrong. If someone could tell me why this user
won't work, I'd be grateful.

Level 3 trace:

10:37:33 FFFFFFFF9136A700 Drvrs: BHPSD AD Driver ST:Stripping
operation data from input document
10:37:33 FFFFFFFF9136A700 Drvrs: BHPSD AD Driver ST:Remote Interface
Driver: Sending...
10:37:33 FFFFFFFF9136A700 Drvrs: BHPSD AD Driver ST:
<nds dtdversion="4.0" ndsversion="8.x">
<source>
<product edition="Standard" version="4.0.1.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<add cached-time="20120907143733.530Z" class-name="user"
dest-dn="CN=Vincent Mannino,OU=HHS,OU=BHP,dc=bhprsd,dc=org"
event-id="hhsidm01#20120907143733#1#1:2f4647ae-3c49-4a11-538a-ae47462f493c"
qualified-src-dn="O=BHP\OU=HHS\CN=vmannino"
src-dn="\BHP-TREE\BHP\HHS\vmannino" src-entry-id="33784"
timestamp="1347028660#2">
<add-attr attr-name="displayName">
<value timestamp="1153833989#42" type="string">Vincent Mannino</value>
</add-attr>
<add-attr attr-name="givenName">
<value timestamp="1347028660#2" type="string">Vincent1</value>
</add-attr>
<add-attr attr-name="mail">
<value timestamp="1153833989#47"
type="string">vmannino@bhprsd.org</value>
</add-attr>
<add-attr attr-name="logonHours">
<value type="octet">B/j/B/j/B/j/B/j/B/j/B/j/B/j/</value>
</add-attr>
<add-attr attr-name="dirxml-uACAccountDisable">
<value timestamp="1221830172#4" type="state">false</value>
</add-attr>
<add-attr attr-name="sn">
<value timestamp="1153833989#39" type="string">Mannino</value>
</add-attr>
<add-attr attr-name="userPrincipalName">
<value>vmannino@bhprsd.org</value>
</add-attr>
<add-attr attr-name="sAMAccountName">
<value>vmannino</value>
</add-attr>
<add-attr attr-name="telephoneNumber">
<value type="string"/>
</add-attr>
<password><!-- content suppressed --></password>
</add>
10:37:33 FFFFFFFF9136A700 Drvrs: <modify class-name="group"
event-id="hhsidm01#20120907143733#1#1:2f4647ae-3c49-4a11-538a-ae47462f493c">
<association>68200348ca93f8449505f7617d59c1ec</association>
<modify-attr attr-name="member">
<add-value>
<value type="string">CN=Vincent
Mannino,OU=HHS,OU=BHP,dc=bhprsd,dc=org</value>
</add-value>
</modify-attr>
</modify>
<modify class-name="group"
event-id="hhsidm01#20120907143733#1#1:2f4647ae-3c49-4a11-538a-ae47462f493c">
<association>5b41c5a0fa545f4286240bbbf7d3da1c</association>
<modify-attr attr-name="member">
<add-value>
<value type="string">CN=Vincent
Mannino,OU=HHS,OU=BHP,dc=bhprsd,dc=org</value>
</add-value>
</modify-attr>
</modify>
<modify class-name="group"
event-id="hhsidm01#20120907143733#1#1:2f4647ae-3c49-4a11-538a-ae47462f493c">
<association>602bd5a3a016cd4680823180b24e9a11</association>
<modify-attr attr-name="member">
<add-value>
<value type="string">CN=Vincent
Mannino,OU=HHS,OU=BHP,dc=bhprsd,dc=org</value>
</add-value>
</modify-attr>
</modify>
</input>
</nds>
10:37:33 FFFFFFFF9136A700 Drvrs: BHPSD AD Driver ST:Remote Interface
Driver: Document sent.
10:37:33 FFFFFFFF935C2700 Drvrs: BHPSD AD Driver :Remote Interface
Driver: Received.
10:37:33 FFFFFFFF935C2700 Drvrs: BHPSD AD Driver :
<nds dtdversion="1.1" ndsversion="8.7">
<source>
<product asn1id="" build="20110211_120000" instance="\BHP-TREE\BHP\BHP
Driver Store\BHPSD AD Driver" version="3.5.14">AD</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status
event-id="hhsidm01#20120907143733#1#1:2f4647ae-3c49-4a11-538a-ae47462f493c"
level="error" type="driver-general">
<ldap-err ldap-rc="21" ldap-rc-name="LDAP_INVALID_SYNTAX">
<client-err ldap-rc="21" ldap-rc-name="LDAP_INVALID_SYNTAX">Invalid
Syntax</client-err>
<server-err>00000057: LdapErr: DSID-0C090C3E, comment: Error in
attribute conversion operation, data 0, v1db1</server-err>
<server-err-ex win32-rc="87"/>
</ldap-err>
</status>
<status
event-id="hhsidm01#20120907143733#1#1:2f4647ae-3c49-4a11-538a-ae47462f493c"
level="warning" type="driver-general">
<ldap-err ldap-rc="32" ldap-rc-name="LDAP_NO_SUCH_OBJECT">
<client-err ldap-rc="32" ldap-rc-name="LDAP_NO_SUCH_OBJECT">No Such
Object</client-err>
<server-err>00000525: NameErr: DSID-031A11CC, problem 2001
(NO_OBJECT), data 0, best match of:
''
</server-err>
<server-err-ex win32-rc="1317"/>
</ldap-err>
</status>
<status
event-id="hhsidm01#20120907143733#1#1:2f4647ae-3c49-4a11-538a-ae47462f493c"
level="warning" type="driver-general">
<ldap-err ldap-rc="32" ldap-rc-name="LDAP_NO_SUCH_OBJECT">
<client-err ldap-rc="32" ldap-rc-name="LDAP_NO_SUCH_OBJECT">No Such
Object</client-err>
<server-err>00000525: NameErr: DSID-031A11CC, problem 2001
(NO_OBJECT), data 0, best match of:
''
</server-err>
<server-err-ex win32-rc="1317"/>
</ldap-err>
</status>


Regards,

Don