-
Title
Matching attribute not being set, LDAP error 0x32. Insufficient Rights -
Description
The objects participating in the sync job are being synchronized (data updated in source will pass to target), but one of the matching extensionAttributes is NOT being set. Most if not all attributes are being synchronized to the target.
-
Cause
The possible causes of this is permissions, group policy settings, or attribute has been added to Attributes to be skipped.
-
Resolution
1. Verify service account has correct permissions to write this attribute by trying to set it manually on affected object using ADSIedit. If this can not be done, correct the permissions for the service account and retry.
2. Confirm if there are any group policies in the environment that are not allowing this to be set.
3. Verify that attribute is not being skipped:
a. Right-clicking a Domain Pair and select Properties | Object Matching.
b. Click on Attributes to Skip and confirm that the attribute being skipped is not listed.