IT Process Automation

  • Private Community

  • 1.  Add User to Active Directory Group

    Posted Apr 13, 2017 03:47 AM

    hi i am trying to use the "Add User to Group" operator to perform the task of adding user to a AD group. the login credential i am using for the operator is already added as the manager for the group and i am able to perform the move via GUI on AD console. 

    this is the error i am getting. 

    [LDAP: error code 53 - 0000054F: SvcErr: DSID-031A12D2, problem 5003 (WILL_NOT_PERFORM), data 0]

     

    this is the config:



  • 2.  Re: Add User to Active Directory Group
    Best Answer

    Broadcom Employee
    Posted Apr 13, 2017 08:15 AM

    LDAP error code 53:

    Indicates that the LDAP server cannot process the request because of server-defined restrictions. This error is returned for the following reasons: The add entry request violates the server's structure rules...OR...The modify attribute request specifies attributes that users cannot modify...OR...Password restrictions prevent the action...OR...Connection restrictions prevent the action.

     

    Have you checked with your Active Directory Administrator on this?



  • 3.  Re: Add User to Active Directory Group

    Posted Apr 15, 2017 06:53 AM

    Hi Andrew i have confirm with AD administrator about the Id have permission to perform this task. Like to check if there is any post or document indicating what is the input sample for user DN.



  • 4.  Re: Add User to Active Directory Group

    Broadcom Employee
    Posted Apr 18, 2017 09:04 AM

    The following knowledge doc should help:

    How to translate your LDAP URL to the CA Process Automation LDAP operator properties