Error: "[1777286] No matching member system object for the other target system side could be created for 1 system objects of type schema type (domainDNS)" (4320887)

While attempting a full synchronization, the following error message is received:

"[1777239] The mapping rule (Members by SID) was unable to execute the projection between system objects (CBMI AB-Obelix_USERS-S-D) and (CN= CBMI AB - Obelix _USERS-S-D,OU= CBMI AB Obelix Groups,OU= CBMI AB Groups,OU= CBMI AB,OU= CBMI,DC=RGUD,DC=ADROOT,DC=XYZ) successfully!"

"[1777286] No matching member system object for the other target system side could be created for 1 system objects of type schema type (domainDNS)."

This is caused by corrupt data in Active Directory (AD). A domain cannot be a member of a group.

This should be corrected in your AD environment.

Alternatively, a filter can be defined for this mapping rule, which causes the synchronization to ignore invalid memberships. Define an include-filter for computer, group, inetOrgPerson and users. This will cause a synchronization to ignore a membership of a domainDNS-Object.

There is a hotfix planned in order to include such a filter automatically (26016). This will be fixed on a future release of the product. If you require this immediately corrected, please contact Support for a hotfix referencing the defect ID 26016.