IBM Verify

IBM Verify

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  Verify Access (IVIA) using NativeLDAPHelper class with auxiliary class

    Posted 09/24/25 11:36 AM
    Hi,
     
    I'm trying to create a user via a mapping rule, using the NativeLDAP Helper class (Package com.ibm.security.access.ldap.utils). However, when I try to create the user by adding an auxiliary class to the objectclass attribute (ex.: addAttrs.put(new BasicAttribute("objectclass", "myauxclass"));), JavaScript throws the following error:
     
    LDAP: error code 65 - Object Class Violation
     
    I have already created this auxiliary class in ISVD, and all added attributes are optional.
    I am able to create the user with this auxiliary class using the ldapadd command line and Apache Directory Studio.
     
    Any ideas on what might be causing this issue?


    ------------------------------
    Rudy Santos
    ------------------------------


  • 2.  RE: Verify Access (IVIA) using NativeLDAPHelper class with auxiliary class

    Posted 09/24/25 04:23 PM

    I do not know the how that class works but my guess is that you would need to list all objectclasses on the put request - that would explain the object class violation at least :-)  



    ------------------------------
    Franz Wolfhagen
    WW IAM Solution Architect - Certified Consulting IT Specialist
    IBM Expert Labs
    ------------------------------



  • 3.  RE: Verify Access (IVIA) using NativeLDAPHelper class with auxiliary class

    Posted 09/25/25 05:19 AM

    Hello Franz,

    I already inserted all object classes in the PUT request. Below is part of the code. If I comment out the auxiliary class, the user is created.

    I was wondering if it is necessary to update the schema into IVIA for this class, as I'm using the server connection, but I couldn't find anything related.

    I have created this class as an auxiliary class type, and all attributes are optional in ISVD.

        addAttrs.put(new BasicAttribute("objectclass", "top"));
        addAttrs.put(new BasicAttribute("objectclass", "person"));
        addAttrs.put(new BasicAttribute("objectclass", "organizationalPerson"));
        addAttrs.put(new BasicAttribute("objectclass", "inetorgperson"));
        //addAttrs.put(new BasicAttribute("objectclass", "myauxclass"));



    ------------------------------
    Rudy Santos
    ------------------------------

    Original Message


  • 4.  RE: Verify Access (IVIA) using NativeLDAPHelper class with auxiliary class

    Posted 09/25/25 06:10 AM

    I performed another test and I could add the auxiliary class, after creating the user:

        addAttrs.put(new BasicAttribute("objectclass", "top"));
        addAttrs.put(new BasicAttribute("objectclass", "person"));
        addAttrs.put(new BasicAttribute("objectclass", "organizationalPerson"));
        addAttrs.put(new BasicAttribute("objectclass", "inetorgperson"));
        var res4 = attrUtil.createSubContext(name,addAttrs);


        var res4 = attrUtil.addAttributeValue(name,"objectclass", "myauxclass");
        var res4 = attrUtil.addAttributeValue(name,"myauxAttribute", "attribute value");




    ------------------------------
    Rudy Santos
    ------------------------------

    Original Message


  • 5.  RE: Verify Access (IVIA) using NativeLDAPHelper class with auxiliary class

    Posted 09/25/25 09:21 AM

    Have a look to the isavd audit log, very helpful for understanding what really happens. 



    ------------------------------
    Jens Petersen
    ------------------------------



Related Content