Migration Manager for Active Directory

Forum QMM LDAP error 0x35. Unwilling To Perform user migration

State Not Answered
Locked Locked
Replies 15 replies
Subscribers 20 subscribers
Views 15498 views
Users 0 members are here

Options

Related

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

QMM LDAP error 0x35. Unwilling To Perform user migration

kanchan chhetri over 5 years ago

While doing user migration for a particular domain, we are getting below error:

LDAP error 0x35. Unwilling To Perform (0000052D: SvcErr: DSID-031A12D2, problem 5003 (WILL_NOT_PERFORM), data 0 ).

We have checked that accounts meets password complexity

tried resetting passwords in both target and source domain as same, but still it fails.

Top Replies

kanchan chhetri over 5 years ago in reply to Jeff Shahan +1

what is DSa.log ?? active directory logs you mean

Parents

0 Jeff Shahan over 5 years ago

There is normally a little more info. I.E. The attribute LDAP was unwilling to write. can you supply that?
Cancel
Up 0 Down

Cancel
0 kanchan chhetri over 5 years ago in reply to Jeff Shahan

this is the only error we see

user LDAP error 0x35. Unwilling To Perform (0000052D: SvcErr: DSID-031A12D2, problem 5003 (WILL_NOT_PERFORM), data 0
).
Cancel
Up 0 Down

Cancel
0 Jeff Shahan over 5 years ago in reply to kanchan chhetri

Look at the DSA.Log and find the error. Then look at the lines above that error and see what the DSA was doing.

Since you talked about passwords. Password history can cause this.
Cancel
Up 0 Down

Cancel
0 kanchan chhetri over 5 years ago in reply to Jeff Shahan

what is DSa.log ?? active directory logs you mean
Cancel
Up +1 Down

Cancel

Reply

0 kanchan chhetri over 5 years ago in reply to Jeff Shahan

what is DSa.log ?? active directory logs you mean
Cancel
Up +1 Down

Cancel

Children

0 Jeff Shahan over 5 years ago in reply to kanchan chhetri

https://support.quest.com/migration-manager-for-ad/kb/18024/log-files-most-commonly-used-for-troubleshooting-issues-in-migration-manager-for-ad-

DSA - Directory Synchronization Agent. Used by Migration sessions or when running Directory Synchronization.

Consists of 6 services, all on computer where DSA is installed:

Quest Directory Synchronization Agent Activation Service

Quest Directory Synchronization Agent ADProxy Service

Quest Directory Synchronization Agent Configurator Service

Quest Directory Synchronization Agent Controller Service

Quest Directory Synchronization Agent Link Resolving Service

Quest Directory Synchronization Agent Log Service

Log files:

Quest DSA (SERVER_NAME) Log available via Event Viewer

%ProgramFiles%\Quest Software\Migration Manager\DSA\CONFIGS

DSA.log and LinkResolver.log (DSA.log grows very rapidly, both are archived as .gz files under LogArchive folder)

Application Log on DSA machine and Domain Controller

Dump files - %ProgramFiles%\Quest Software\Migration Manager\DSA\Dump
Cancel
Up 0 Down

Cancel