[midPoint] Active Directory LiveSync suspended

[Patrik Sidler]

Hi Community,

I am looking for a clarification with Active Directory LiveSync.

We have a running midPoint 4.7.1 Installation with AdLdapConnector 3.6.1.
All works fine, but whenever I start the LiveSync it gets suspended with the following Error Message:

Got unexpected exception: org.identityconnectors.framework.common.exceptions.PermissionDeniedException: LDAP error during DirSync search: insufficientAccessRights: 00002105: LdapErr: DSID-0C090AD4, comment: Error processing control, data 0, v3839? (50)

We have configured the connection Account as described at:
https://docs.evolveum.com/connectors/resources/active-directory/active-directory-ldap/

But our Account is not member of the "Domain Admin Group".

Do we have to add the Account to the "Domain Admin Group" or does it work without?

Thank you in advance for your help.

Regards,
Patrik
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20241031/ae9045df/attachment.htm>