Interchange Error: 21 - Provisioning Okta User to LDAP
Last Updated:
Directories
Overview
Provisioning a user from Okta to OpenLDAP fails with the following error:
Interchange error: 21, title: value #0 invalid per syntax
Applies To
- Directories
- OpenLDAP
- Directory String
Cause
Okta is trying to pass a value with 0 characters to the data type Directory String in OpenLDAP.
OpenLDAP strings can either be of type Directory String (1.3.6.1.4.1.1466.115.121.1.15) or IA5 String (1.3.6.1.4.1.1466.115.121.1.26). Directory Strings are defined as a string with 1 or more characters. They cannot be zero-length empty strings. IA5 strings can be zero or more characters.
Solution
Ensure that a value with greater than 0 characters is mapped to any LDAP string of the Directory String type, or map the value to an attribute of the IA5 string type.
