A request fails because one or more values cannot be changed

If you submit a request to change a user, account, or service, the entire request fails if any single value cannot be changed.

A potential scenario that causes a failure includes two users using separate browsers, concurrently attempting to add or remove the same value.

• You submit a request to change the given name and family name of a user.
• The family name cannot be changed.
• Neither change is made.
• The entire request fails.

A request can also fail when an inconsistent value that is not part of the current change task is already populated for one of the attributes in LDAP. For example, set the manager attribute of a person to a value similar to...

erglobalid:76542121221212,ou=users

...in IBM Security Directory Integrator. Because all SDI-based changes are submitted to IBM Security Identity Manager with System as the requester, the change is accepted. However, if an administrator makes a change to the email address or any other field for the same person, the change user task fails until you manually correct the manager attribute in LDAP to a value such as...

erglobalid=765421221212, ou=users

Parent topic: Troubleshooting ISIM Server problems