CA Identity Manager: Unable to modify Active Directory templates 0x0011 Undefined attribute type

Products

• CA Identity Manager
• CA Identity Governance
• CA Identity Portal

Issue/Introduction

When trying to modify or clone account templates, it fails with an error that they cannot be changed due to a specific attribute. For example: 

Active Directory Account Template 'account_template' modification failed: DB Modify failed: eTADSlyncSIPAddressOption 

In the etatrans log you'll see something like this:
rc:  0x0011 (Undefined attribute type)
msg: :ETA_E_0007<MPO>, Active Directory Account Template 'template' modification failed: DB Modify failed: eTADSlyncSIPAddressOption (ldaps://provserver:20391)

The attribute name may be different than eTADSlyncSIPAddressOption, it could be any attribute name. 
 

Environment

Release:
Component: IDMGR

Cause

The reason for this error is that your CA Directory schema for the account template is missing the attribute. This may happen if the template was modified from its out of the box version, or if you upgraded your environment and moved an old schema file into a new environment. Sometimes additional attributes are added to templates in newer versions of the product. 

Resolution

To fix this, you'll have to download the installation media for your current version of Identity Manager and replace your modified or old schema file with the out of the box file, or merge your current modified file with the out of the box version to add the missing attributes. 

You can find the schemas under CA\Directory\dxserver\config\schema 

The Active Directory schema is etrust_ads, but this may happen with any endpoint type - all endpoint types are in this folder and labeled.