IDM 3.6 - LDAP Driver fails on binary attributes

  • 7002116
  • 08-Dec-2008
  • 27-Apr-2012


Novell Identity Manager 3.6
Novell Identity Manager Driver - LDAP


When synchronizing binary attributes (like photo, or jpegPhoto) the driver fails with:

Message: Code(-9010) An exception occurred: java.lang.IllegalArgumentException: Attribute value cannot be null
   at com.novell.ldap.LDAPAttribute.addBase64Value(Unknown Source)
   at com.novell.nds.dirxml.driver.ldap.LDAPSubscriber.performModifyOperation(
   at com.novell.nds.dirxml.driver.ldap.LDAPSubscriptionShim.execute(
   at com.novell.nds.dirxml.engine.Subscriber.execute(
   at com.novell.nds.dirxml.engine.Subscriber.execute(
   at com.novell.nds.dirxml.engine.Subscriber$ModifyProcessor.process(



The workaround is to manually maintain these attribtues.

On the Subscriber Command Transformation, or Subscriber Output Transformation add the following policy (the photo attribute is used as an example):
        <description>is photo</description>
                <if-op-attr name="photo" op="available"/>
            <do-strip-xpath expression="*//value/@type"/>

That way the Shim will not try to Base64 encode the attribute.

This might not work with all ldapservers, in which case contact Novell Support.

Additional Information

This have been reported to engineering.