topic SAP - LDAP synchronization doubt in Application Development and Automation Discussions https://community.sap.com/t5/application-development-and-automation-discussions/sap-ldap-synchronization-doubt/m-p/1547324#M248744 <HTML><HEAD></HEAD><BODY><P>I have setup SAP - LDAP synchronization on WebAS 6.20 with Active Directory on W2k3. The mappings are default what SAP suggested me along with its standard schema extensions. When I run the RSLDAPSYNC_USERS, I m faced with 2 problems here, </P><P> </P><P>1) I have selected When users exists both in AD and DB it should compare the timestamp and update the values accordingly. If user doesn't exist in Active Directory then Create it . </P><P> </P><P>For this I created a user JLIN ( Jason Lin )in both active directory (created manually from AD - MMC ) and SAP using SU01. </P><P> </P><P>On sync it throws error :</P><P> </P><P>-</P><HR originaltext="---------------------------------------------------------------------" /><TABLE><TBODY><TR><TD><P>Type</P></TD><TD><P>Message text</P></TD></TR></TBODY></TABLE><P>-</P><HR originaltext="---------------------------------------------------------------------" /><TABLE><TBODY><TR><TD></TD><TD><P>Connection created to server MSAD</P></TD></TR><TR><TD></TD><TD><P>Number of Objects in Directory 0</P></TD></TR><TR><TD></TD><TD><P>Number of Objects in Database 1</P></TD></TR><TR><TD></TD><TD><P>Objects that Exist Both in the Directory and in the Database: 0</P></TD></TR><TR><TD></TD><TD><P>Successfully Bidirectionally Updated: 0</P></TD></TR><TR><TD></TD><TD><P>Updated Successfully in Database: 0</P></TD></TR><TR><TD></TD><TD><P>Successfully Updated in Directory: 0</P></TD></TR><TR><TD></TD><TD><P>Cannot Update: 0</P></TD></TR><TR><TD></TD><TD><P>No Synchronization Necessary: 0</P></TD></TR><TR><TD></TD><TD><P>Objects that Only Exist in the Directory: 0</P></TD></TR><TR><TD></TD><TD><P>Ignored: 0</P></TD></TR><TR><TD></TD><TD><P>Objects that Only Exist in the Database: 1</P></TD></TR></TBODY></TABLE><P>&lt;b&gt;| |Entry already exists |</P><TABLE><TBODY><TR><TD></TD><TD><P>LDAP_CREATE failed</P></TD></TR><TR><TD></TD><TD><P>Error while writing object JLIN to the directory &lt;/b&gt;</P></TD></TR><TR><TD></TD><TD><P>Successfully Created in Directory: 0</P></TD></TR><TR><TD></TD><TD><P>Cannot Create in Directory: 1</P></TD></TR><TR><TD></TD><TD><P>Total Time Required: 00:00:00</P></TD></TR><TR><TD></TD><TD><P>Connection to server MSAD terminated</P></TD></TR></TBODY></TABLE><P>-</P><HR originaltext="---------------------------------------------------------------------" /><P></P><P>This means that it is not able to recognize the user JLin in Active Directory as the same user as JLin in SAP. Any idea what could I be doing wrong ? When the user is created in by SAP into AD ( i.e. if jlin did not exists ) the sync etc happens perfectly well . Any pointers on this ? </P><P> </P><P> </P><P>2 ) On the other hand, we have 2 sets of users to be synchronized, one in active directory and the other in SAP. Since these systems are governed by different sets of userid policies the userid for a user in Active directory may not be same as that of SAP. So we need to map these userids for synchronization. is there a way to specify in SAP / Active directory which Active Directory / SAP user they map to ? </P><P> </P><P>What we want to achieve is When a user is deleted / disabled from active directory he should be deleted / disable in SAP too.</P><P></P><P></P><P>Message was edited by: Harsh Busa</P><P></P></BODY></HTML> Thu, 24 Aug 2006 21:38:51 GMT Former Member 2006-08-24T21:38:51Z SAP - LDAP synchronization doubt https://community.sap.com/t5/application-development-and-automation-discussions/sap-ldap-synchronization-doubt/m-p/1547324#M248744 <HTML><HEAD></HEAD><BODY><P>I have setup SAP - LDAP synchronization on WebAS 6.20 with Active Directory on W2k3. The mappings are default what SAP suggested me along with its standard schema extensions. When I run the RSLDAPSYNC_USERS, I m faced with 2 problems here, </P><P> </P><P>1) I have selected When users exists both in AD and DB it should compare the timestamp and update the values accordingly. If user doesn't exist in Active Directory then Create it . </P><P> </P><P>For this I created a user JLIN ( Jason Lin )in both active directory (created manually from AD - MMC ) and SAP using SU01. </P><P> </P><P>On sync it throws error :</P><P> </P><P>-</P><HR originaltext="---------------------------------------------------------------------" /><TABLE><TBODY><TR><TD><P>Type</P></TD><TD><P>Message text</P></TD></TR></TBODY></TABLE><P>-</P><HR originaltext="---------------------------------------------------------------------" /><TABLE><TBODY><TR><TD></TD><TD><P>Connection created to server MSAD</P></TD></TR><TR><TD></TD><TD><P>Number of Objects in Directory 0</P></TD></TR><TR><TD></TD><TD><P>Number of Objects in Database 1</P></TD></TR><TR><TD></TD><TD><P>Objects that Exist Both in the Directory and in the Database: 0</P></TD></TR><TR><TD></TD><TD><P>Successfully Bidirectionally Updated: 0</P></TD></TR><TR><TD></TD><TD><P>Updated Successfully in Database: 0</P></TD></TR><TR><TD></TD><TD><P>Successfully Updated in Directory: 0</P></TD></TR><TR><TD></TD><TD><P>Cannot Update: 0</P></TD></TR><TR><TD></TD><TD><P>No Synchronization Necessary: 0</P></TD></TR><TR><TD></TD><TD><P>Objects that Only Exist in the Directory: 0</P></TD></TR><TR><TD></TD><TD><P>Ignored: 0</P></TD></TR><TR><TD></TD><TD><P>Objects that Only Exist in the Database: 1</P></TD></TR></TBODY></TABLE><P>&lt;b&gt;| |Entry already exists |</P><TABLE><TBODY><TR><TD></TD><TD><P>LDAP_CREATE failed</P></TD></TR><TR><TD></TD><TD><P>Error while writing object JLIN to the directory &lt;/b&gt;</P></TD></TR><TR><TD></TD><TD><P>Successfully Created in Directory: 0</P></TD></TR><TR><TD></TD><TD><P>Cannot Create in Directory: 1</P></TD></TR><TR><TD></TD><TD><P>Total Time Required: 00:00:00</P></TD></TR><TR><TD></TD><TD><P>Connection to server MSAD terminated</P></TD></TR></TBODY></TABLE><P>-</P><HR originaltext="---------------------------------------------------------------------" /><P></P><P>This means that it is not able to recognize the user JLin in Active Directory as the same user as JLin in SAP. Any idea what could I be doing wrong ? When the user is created in by SAP into AD ( i.e. if jlin did not exists ) the sync etc happens perfectly well . Any pointers on this ? </P><P> </P><P> </P><P>2 ) On the other hand, we have 2 sets of users to be synchronized, one in active directory and the other in SAP. Since these systems are governed by different sets of userid policies the userid for a user in Active directory may not be same as that of SAP. So we need to map these userids for synchronization. is there a way to specify in SAP / Active directory which Active Directory / SAP user they map to ? </P><P> </P><P>What we want to achieve is When a user is deleted / disabled from active directory he should be deleted / disable in SAP too.</P><P></P><P></P><P>Message was edited by: Harsh Busa</P><P></P></BODY></HTML> Thu, 24 Aug 2006 21:38:51 GMT https://community.sap.com/t5/application-development-and-automation-discussions/sap-ldap-synchronization-doubt/m-p/1547324#M248744 Former Member 2006-08-24T21:38:51Z Re: SAP - LDAP synchronization doubt https://community.sap.com/t5/application-development-and-automation-discussions/sap-ldap-synchronization-doubt/m-p/1547325#M248745 <HTML><HEAD></HEAD><BODY><P>Figured out that SAP uses sapUsername attribute in Active directory user object <SPAN __jive_emoticon_name="happy"></SPAN></P><P></P><P>Harsh</P></BODY></HTML> Thu, 24 Aug 2006 22:56:46 GMT https://community.sap.com/t5/application-development-and-automation-discussions/sap-ldap-synchronization-doubt/m-p/1547325#M248745 Former Member 2006-08-24T22:56:46Z