User creation in AD fails with "rc: 0x0046 (Results too large)" in QA IDM Env

Products

• CA Identity Manager
• CA Identity Governance
• CA Identity Portal

Issue/Introduction

I am trying to create an employee type user and the user gets created in user store & provisioning store successfully, but the same on AD fails with below errors.

CreateAcct: FAILURE: Child CreateAcct (eTADSDirectoryName=[endpoint name]) CreateAcct F: rc: 0x0013 (Constraint violation)
FAILURE: Child Add (eTInclusionID=1) 2
rc: 0x0001 (Operations error) 

Environment

Release:
Component: IDMGR

Resolution

A Constraint Violation error is from the LDAP endpoint when provisioning sends a request to create a user to the endpoint but it rejects the operation due to violate constraints placed on the attribute. The constraint can be one of size or content (string only, no binary).  

To find out exactly what attribute causes the error, you would need to turn on the trace log on your endpoint and make sure you capture the log when you perform the create user activity.   The following knowledge doc explains logging. Check the section on endpoint logging: 

Adjusting logging levels in Identity Manager