When assigning Provisioning Role to Global Users for account creation purpose on some hierarchical Endpoints (i.e. Active Directory, JNDI DYN), the Provisioning Server reports LDAP error 70 (0x0046 - Results too large).
In etatrans log, the 'External Modify' operation got 'Results too large' error.
FAILURE: External Modify (eTGlobalUserName=xxx)
rc: 0x0046 (Results too large)
msg: ETA_E_0070<MGU>, Global User 'xxx' provisioning role memberships added successfully. Associated accounts creation or update failed: (accounts created: 0, updated: 0, re-created: 0, failures: 1)
The 'Child Add' operation got account 'Already Exists' error.
FAILURE: Child Add (eTDYNAccountName=xxx)
rc: 0x0044 (Already exists)
msg: ETA_E_0004<AAC>, User Account 'xxx' on 'xxx endpoint' creation failed: Object already exists; provisioning directory updated
Endpoint Account already exists in the target account container
Endpoint Account with same account id already exists in another account container
Identity Manager 12.x/ 14.x
Enable the following Synchronization settings on IM Provisioning Manager > System > Domain Configuration > Synchronization
Also see the following Knowledge Article:
Provisioning fails with two policies with same a/c name