OUD endpoint: Connector Server Modify failed: code 50 (INSUFFICIENT_ACCESS_RIGHTS)

Products

• CA Identity Suite

Issue/Introduction

Getting below error:

0/15/2024 11:33:52 PM: :ETA_E_0008<MAC>, User Account '*****' on 'OUD NG PROD' modification failed: Connector Server Modify failed: code 50 (INSUFFICIENT_ACCESS_RIGHTS): failed to modify entry: eTDYNAccountName=*****,eTDYNContainerName=People,eTDYNDirectoryName=********,eTNamespaceName=**********,dc=im,dc=etasa: JCS@*******: JNDI: [LDAP: error code 50 - The request control with Object Identifier (OID) "1.3.6.1.4.1.30221.2.10.3.151" cannot be used due to insufficient access rights]: failed to modify uid=*****,ou=People,o=ng (ldaps://<IP address>:<Port>) 

 

We tested with 14.4 Connectors server - it is working. 

Issue is with 14.5 Connector Server.

Environment

IM 14.5

Cause

Version 14.5 requires more (different set?) of privileges at OUD endpoint.

Resolution

Please work with your LDAP Administrators to review and add additional control permission to OUD:

(targetcontrol = "2.16.840.1.113730.3.4.18 || 1.2.840.113556.1.4.473|| 1.3.6.1.4.1.30221.2.10.3.151|| 1.2.826.0.1.3344810.2.3 || 1.3.6.1.1.13.1 || 1.3.6.1.1.13.2 || 1.3.6.1.1.12 || 1.3.6.1.4.1.42.2.27.9.5.9 || 1.2.840.113556.1.4.319 || 2.16.840.1.113730.3.4.9") (version 3.0; acl "Authenticated users control access"; allow (read) userdn = "ldap:///all";)

Where userdn = "ldap:///all", means all authenticated users.