<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body dir="auto">
Hi Yakov,
<div><br>
</div>
<div>No, unfortunately not. The Error still exists.</div>
<div><br>
</div>
<div>Regards,</div>
<div>Patrik
<div dir="ltr"><br>
<blockquote type="cite">Am 12.12.2024 um 09:27 schrieb Yakov Revyakin <yrevyakin@gmail.com>:<br>
<br>
</blockquote>
</div>
<blockquote type="cite">
<div dir="ltr">
<div dir="ltr">Hi Patrik,<br>
<div>Have you found a solution for this issue? I have the same..</div>
<div><br>
</div>
<div>Regards,</div>
<div>Yakov</div>
</div>
<br>
<div class="gmail_quote gmail_quote_container">
<div dir="ltr" class="gmail_attr">On Thu, 31 Oct 2024 at 15:41, Patrik Sidler via midPoint <<a href="mailto:midpoint@lists.evolveum.com">midpoint@lists.evolveum.com</a>> wrote:<br>
</div>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div class="msg2940085518273655977">
<div lang="DE-CH" style="overflow-wrap: break-word;">
<div class="m_2940085518273655977WordSection1">
<p class="MsoNormal">Hi Community,<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal"><span lang="EN-US">I am looking for a clarification with Active Directory LiveSync.<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"><u></u> <u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">We have a running midPoint 4.7.1 Installation with AdLdapConnector 3.6.1.<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">All works fine, but whenever I start the LiveSync it gets suspended with the following Error Message:<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"><u></u> <u></u></span></p>
<p class="MsoNormal"><i><span lang="EN-US">Got unexpected exception: org.identityconnectors.framework.common.exceptions.PermissionDeniedException: LDAP error during DirSync search: insufficientAccessRights: 00002105: LdapErr: DSID-0C090AD4, comment: Error processing
control, data 0, v3839? (50)<u></u><u></u></span></i></p>
<p class="MsoNormal"><span lang="EN-US"><u></u> <u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">We have configured the connection Account as described at:<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"><a href="https://docs.evolveum.com/connectors/resources/active-directory/active-directory-ldap/" target="_blank">https://docs.evolveum.com/connectors/resources/active-directory/active-directory-ldap/</a><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"><u></u> <u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">But our Account is not member of the “Domain Admin Group”.<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"><u></u> <u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">Do we have to add the Account to the “Domain Admin Group” or does it work without?<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"><u></u> <u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">Thank you in advance for your help.<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"><u></u> <u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">Regards,<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">Patrik<u></u><u></u></span></p>
</div>
</div>
_______________________________________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="https://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">https://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
</div>
</blockquote>
</div>
</div>
</blockquote>
</div>
</body>
</html>