Use case: As an admin, the ability to onboard new users and set the user's manager in AD using one APM provisioning job would greatly improve the consistency within our environment.
Currently, if attempted via a Global Variable in the Synchronization to Active Directory section of a Site Template, the job gets stuck on "Provisioning..." and this error is seen in the APM logs:
Queue\BeanStalk\Jobs\ProvisionJob::Queue\BeanStalk\Jobs\ProvisionJob::run::62::Exception::(2) ldap_modify_batch(): Batch Modify: Constraint violationFILE TRACE:1: /var/www/html/pme/application/classes/Queue/BeanStalk/BeanstalkQueue.php (0) run2: /var/www/html/pme/application/classes/Queue/Queue.php (0) consumeMessage3: /var/www/html/pme/worker.php (0) consume
Since this attribute is populated with another AD user's Distinguished Name, it looks like it's in a format (example: CN=WillPowers,OU=Support,OU=Users,OU=Demo,DC=demo,DC=al,DC=com
) that APM isn't expecting or prepared to deal with. Also, this format is not at all user friendly so perhaps an AD lookup would be a better approach.
Screenshots attached.