Error received when updating attributes of Active Directory (AD) objects:
"Error: The server is unwilling to process the request"
Cause 1:
This issue is caused when Novell DirXML creates objects in AD. When DirXML creates objects in AD, it creates them with blank passwords, and sometimes takes some time to populate this.
Cause 2:
A constraint violation in Active Directory.
Resolution 1:
The Migrator for NDS database contains a match between a Novell object and an AD object created by DirXML, and not Migrator for NDS itself.
When updating the attributes of the AD object (that has a blank password or a password that has not been set by DirXML due to lag), Migrator for NDS fails because the Windows server does not allow this.
To resolve this issue, ensure that the objects created/synched using DirXML contain non-blank passwords.
Resolution 2:
This error may also be caused by a "constraint violation" from Active Directory. For example, the NDS "description" attribute can be multi-valued, allowing for more than one entry for this attribute. However, Active Directory only allows a single value in the "description" attribute. The product team has logged Enhancement Request, TFS 501672, to consider enhancing Migrator for NDS to better handle these types of "constraint violations". In the meantime, you may need to comment out the offending attribute in both the Global Options and Project Options.
