Whenever I try to update to an Active Directory Connector during reconciliation, I always get an InvalidAttributeValueException. I have verified many times over that the value is a valid type (String). In fact if the value is synchronized (initially) from AD and I change even a single character the update will fail when I reconcile the other direction.
Has anyone seen this behaviour? I have verified the user account has full User Management delated control to Read/Create/Update/Manage users.