Create AD user - LDAP error

[orian]

Hi,

I use "Create a user with a password in an organizational unit" workflow for creating new users in the active directory.

However, this workflow configures the account name and the user principle name with the same string I provided in account name field.

for example I would like to create the account name: John Black

and the user principle should be: johnb@contoso.com

but the workflow creates:

account name: John Black

user principle: John Black@contoso.com

I try to use the following line in order to change the user principle name:

newUser.setAttribute('userPrincipleName',"johnb@contoso.com");

but I receive the following error:

Ldap modification failed 000020B1: UpdErr: DSIS-030F1087,problem 6004(CANT_ON_RDN),data 0.

Changing manually in the active directory works fine.

By the way, other attributes like givenName, sn, displayName can be changed.

Thanks!

[iiliev]

Hi,

Where did you put this line?

newUser.setAttribute('userPrincipleName',"johnb@contoso.com");

Also, which version of AD plug-in do you use?

BTW, I think the attribute is named userPrincipalName, not userPrincipleName as in your code.

[orian]

After using the workflow which creates the user (its output is AD:User), I create a scriptable task which takes this new user and run on it the setAttribute().

My plug-in version is: 3.0.5.5377446.

And yes, I wrote it right in the code, just wrong copy paste.

Any new idea?

Thanks!

[iiliev · Accepted solution]

Tried it in my environment, and it seems to work fine (I have version 3.0.7 of AD plug-in).

If possible, could you try with some of the newer versions of the plug-in available at https://communities.vmware.com/docs/DOC-25138 ?