The user is first deleted in Oracle Human Resources.

Troubleshooting the Oracle Directory Integration Platform E-5 E.2.2 Synchronization Errors and Problems This section provides solutions for synchronization errors and problems. Problem LDAP: error code 50 - Insufficient Access Rights; remaining name CN=Users,dc=mycompany,dc=com Solution The record target is not in a default container. Find the DST CHANGE RECORD. Check the ACIs for the target container. If they are blank, then use DIP Tester to apply a known set of ACIs to the new container. Problem LDAP: error code 50 - Insufficient Access Rights; ACTIVECHGIMP MAPPING IMPORT OPERATION FAILURE; Agent execution successful, Mappingimport operation failure Solution By default the cn=Users,default realm contains the proper ACIs. However, this error can occur when trying to synchronize into a different container within the default realm. Open the trace file, locate the change record that is causing the error, and then check the ACIs for the record’s parent container. Apply the same ACIs to the target container. Problem Log File Error: Not able to construct DN Output ChangeRecord : Changetype: 1 ChangeKey: cn=users, dc=us,dc=oracle,dc=com Exception javax.naming. ContextNotEmptyException: [LDAP: error code 66 - Not Allowed On Non-leaf]; remaining name ’cn=users,dc=us,dc=oracle,dc=com’ Missing mandatory attributes. Solution There is a problem with the mapping file. Refer to Note: 261342.1—Understanding DIP Mapping in My Oracle Support formerly MetaLink at http:metalink.oracle.com . Problem Trace File Error: IPlanetImport:Error in Mapping Enginejava.lang.NullPointerException java.lang.NullPointerException at oracle.ldap.odip.engine.Connector.setValuesConnector.java:101. Solution The orclcondirlastappliedchgnum attribute is null or has no value. This may occur if bootstrapping failed or if you manually populated Oracle Internet Directory and did not assign a value to the orclcondirlastappliedchgnum attribute. Verify that the orclcondirlastappliedchgnum attribute has a value. If it does not have a value, set it using the DIP Tester utility or using WLST to configure the DIP Mbean. See Also: Note: 276481.1—Troubleshooting OID DIP Synchronization Issues in My Oracle Support formerly MetaLink at http:metalink.oracle.com