Managing "ds-pwp-account-disabled" Operational Attribute via JNDI ConnectorXpress - Identity Manager

Products

• CA Identity Manager
• CA Identity Governance
• CA Identity Portal

Issue/Introduction

When configuring an Oracle Unified Directory (OUD) connector using the JNDI-DYN project type in ConnectorXpress, the operational attribute ds-pwp-account-disabled is not available in the drop-down attribute selection list. Consequently, this attribute cannot be mapped or managed through the standard UI configuration.

Environment

Identity Manager 14.5

ConnectorXpress managing Oracle Unified Directory (OUD)

Cause

Operational attributes are not part of standard object classes (e.g., inetOrgPerson) and are excluded from default LDAP schema discovery. ConnectorXpress does not automatically surface these attributes unless they are explicitly defined or requested during the LDAP search operation.

Resolution

To manage the ds-pwp-account-disabled attribute, you must manually define it within your ConnectorXpress mapping project:

1. Open the project in ConnectorXpress.
2. Navigate to the Attribute Mapping section.
3. Locate the desired mapping location.
4. Instead of selecting the attribute from the drop-down list, manually type ds-pwp-account-disabled into the attribute name field.
5. Save the configuration and regenerate the connector.
6. Verify that the JNDI connector is now successfully reading and writing the operational attribute during account management operations.

Additional Information

To speak with a customer representative or a Support Engineer see Contact Support. Scroll to the bottom of the page and click on your respective region.