InvalidAttributeValueException when provisioning with AFX Connector in RSA Governance & Lifecycle
2 years ago
Article Number
000069281
Applies To
This is a known issue in the following version:
  • RSA Governance & Lifecycle 8.0.0
Issue

The following AFX Connectors are affected:

  • Active Directory
  • OpenLDAP

AFX provisioning fails for the following capabilities:

  • Create an Account
  • Update an Account
  • Create a Group
  • Update a Group

The following is displayed on the UI when testing the connector:

Error code = -1
CreateAccount failed due to following error: [LDAP: error code 21 - 00000057: LdapErr: DSID-0C090CB7, comment: Error in attribute conversion operation, data 0, v1db1]

Cause:
javax.naming.directory.InvalidAttributeValueException: [LDAP: error code 21 - 00000057: LdapErr: DSID-0C090CB7, comment: Error in attribute conversion operation, data 0, v1db1]; remaining name 'CN=Test5,OU=vcloud Users,DC=2k8r2-vcloud,DC=local'

The following is logged in the esb.AFX-CONN-{connector name}.log:

ERROR 2023-11-17 09:41:11,278 [[MuleRuntime].uber.141: [AFX-CONN-Active_DirectoryConnector].ldapFlow.BLOCKING @af25502] [processor: ldapFlow/processors/39/route/3/processors/5/route/0/processors/0/route/0/processors/0; event: 598213d0-8557-11ee-8f2c-0050560141b3] LdapOperationsImpl: Exception in UpdateAccount the error is as follows :[LDAP: error code 21 - 00000057: LdapErr: DSID-0C090C03, comment: Error in attribute conversion operation, data 0, v1db1]

 

Cause
This issue occurs if there are some AFX optional attributes that do not have values ("[No value provided]").
Resolution
This issue is resolved in the following version:
  • RSA Governance & Lifecycle 8.0.0 P01
Workaround

Contact RSA Customer Support if you cannot patch to the version where this is resolved.