Auxiliary Classes/Attributes within an LDAP Directory are not written to target

Question

I've connected an LDAP Directory which syncs correctly with the standard attributes. But the auxiliary attributes are not written back to the target System. Even with the target System browser from within the synchronization Editor the auxiliary attributes are not written back to the System. I've connected d1im v7.1 (current Version) with the same user as we had before with the v6.1.2 Version. Therefore I guess it can't be an Access Problem. To I miss something concerning auxiliary attributes/classes and an LDAP Directory? 
 Thanks in advance Regards, Rolf

Barry Jackson · Accepted Answer

Hi Rolf, 
 
Is the auxiliary class listed in the list of objectclasses in the objectclass attribute? If you set/update an attribute that is part of an auxiliary objectclass, the objectclass must be listed otherwise the update will be discarded. 
 
Barry.

Barry Jackson · Answer

Hi Sergei, 
 
The auxiliary objectclass needs to be listed in the multi-valued attribute 'ObjectClass@LDAPAccount'. 
 
So you might have: 
 
TOP 
PERSON (Structural) 
ORGANISATIONALPERSON (Structural) 
MYPERSON (Auxiliary) 
 
If 'MYPERSON' is NOT listed as one of the values of 'ObjectClass@LDAPAccount' ..... all updates to attributes of MYPERSON will be discarded. 
 
You don't need to do anything in the sync project/editor to get this to work. 
 
HTH, Barry.

Endpoint Privilege Management

Auxiliary Classes/Attributes within an LDAP Directory are not written to target