DirSync for AD: A value in the request does not comply with certain constraints. The attribute was: (userPrincipalName) Error during CreateObject (4314878)
DirSync for AD: A value in the request does not comply with certain constraints. The attribute was: (userPrincipalName) Error during CreateObject
说明
A number of users objects were not able to sync to the Target AD. The bellow error was received in the Sync Log. More details in the attached Message file. A value in the request does not comply with certain constraints. The attribute was: (userPrincipalName) Error during CreateObject Object DN: CN=John Doe,OU=Org1,OU=Org2,DC=ad,DC=ABC,DC=com Object ID: 12345 Result code: ConstraintViolation AD Exception: 000021C8: AtrErr: DSID-03200BE8, #1: 0: 000021C8: DSID-03200BE8, problem 1005 (CONSTRAINT_ATT_TYPE), data 0, Att 90290 (userPrincipalName)
原因
The users are not getting created due to AD Constraints in the Target AD and the attribute that looks like being the issue is UPN.
解决办法
Check in the Target if there is already an existing user with that UPN.
Make sure the profile is picking up the correct source and target OU.