Provisioning AD Account Fails with "No such object" Error - Identity Manager

Products

• CA Identity Manager
• CA Identity Governance
• CA Identity Portal

Issue/Introduction

When running the provisioning process to create Active Directory (AD) accounts, the operation fails with the following error: creation failed: Connector Server Add failed: No such object (ldaps://server:20403). This indicates that the Provisioning Server cannot locate the destination path defined in the Identity Manager configuration.

Environment

Identity Manager 14.5

Cause

The error occurs because the Organizational Unit (OU) specified in the "Matched Account Container" rule does not exist in the target Active Directory environment. The Provisioning Server attempts to place the account in a non-existent container, resulting in the "No such object" failure.

Resolution

To resolve this issue, reconcile the Identity Manager container rule with the actual directory structure in Active Directory:

1. Identify the destination OU defined in the Identity Manager Account Container Rule.
2. Verify whether the target OU exists within your Active Directory environment.
3. Choose one of the following methods to correct the mismatch:
   • Option 1: Create the missing OU in Active Directory to match the path defined in your Identity Manager rule.
   • Option 2: Update the destination OU in the Identity Manager Account Container Rule to match an existing, valid OU in Active Directory.
4. Retry the account provisioning task.

Additional Information

To speak with a customer representative or a Support Engineer see Contact Support. Scroll to the bottom of the page and click on your respective region.