This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Identity Manager Version 6.1.3: Set-Up a further AD-Domain failed

Hi,

I got this error message:

ErrorMessages = Creating provider object using VI.JobService.NSProvider.ADSProvider,ADSProvider successful.
The connection mode of the provider was set to Default.
Definition rule for object properties and relation memberships was changed by the definition loaded from table Domain column MappingInfo.
Error parsing XML structure : <?xml version="1.0" encoding="utf-8"?>
<Configurations>
<Configuration Name="AD synchronization - XXX-XX" Namespace="ADS">
<Layout />
<Task>
<ControlParameters>
<Option Name="SyncSystemContainer" Value="1" />
<Option Name="SyncAdvancedFeaturesContainer" Value="" />
<Option Name="DisableRAS" Value="1" />
<Option Name="DisableTerminal" Value="1" />
<Option Name="LookUpDomainNames" Value="" />
</ControlParameters>
</Task>
</Configuration>
</Configurations>
Processing task FullSync failed.

Any ideas why this error coming up?

Many thanks in advance,

Murat

Parents

0 Trevor Pike over 5 years ago

Hi Murat<

We have seen this issue before and the resolution was to delete the synchronization configuration and create a new one (from within Manager).

I hope that helps.

Trevor
Cancel
Up 0 Down

Cancel
0 Murat Firat over 5 years ago in reply to Trevor Pike

Hi Trevor,

thanks

This error happened if no object types (classes) are checked in the synchronization configuration. I would expect no error but anyway

I enabled domainDNS, organization, container and user.

Just one more question:

I could imported with the fullsync all containers etc. but not all user-objects.

Example:

ou = ABC

ou = GAdmins

UserObject1 (CN=UserObject1, OU=GAdmins,OU=ABC,DC=ema,DC=xxx,DC=com)

UserObject2 (CN=UserObject2, OU=GAdmins,OU=ABC,DC=ema,DC=xxx,DC=com)

,,,,,

ou = Users

UserObjectA1 (CN=UserObjectA1,OU=Users,OU=ABC,DC=ema,DC=xxx,DC=com)

UserObjectA2 (CN=UserObjectA2,OU=Users,OU=ABC,DC=ema,DC=xxx,DC=com)

.....

I have all users in "ou = GAdmins", but no users from "ou = Users" in the identity manager?

I checked the permissions and object classes, everything looks fine.

Does anyone have an idea why this happened?

Many thanks in advance.

Murat
Cancel
Up 0 Down

Cancel
0 Markus Weiss-Ehlers over 5 years ago in reply to Murat Firat

If would check if your sync user has the correct permissions to read the users in the users OU.
Cancel
Up 0 Down

Cancel
0 Murat Firat over 5 years ago in reply to Markus Weiss-Ehlers

As I wrote before, I checked it already.

When I access this AD-Domain with the same user (sync user) and a tool like AD-Explorer I can read those users.
Cancel
Up 0 Down

Cancel
0 Markus Weiss-Ehlers over 5 years ago in reply to Murat Firat

Sorry missed that. Do you use any filter in your sync XML definition?
Cancel
Up 0 Down

Cancel
0 Murat Firat over 5 years ago in reply to Markus Weiss-Ehlers

No problem.

No any filters in the sync configuration defined.
Cancel
Up 0 Down

Cancel
0 Trevor Pike over 5 years ago in reply to Murat Firat

I would suggest to open a Service Request and provide the complete logs to Support, as per https://support.oneidentity.com/identity-manager/kb/115851/available-logging-options-for-the-identity-manager-job-service.

Thanks
Cancel
Up 0 Down

Cancel

Reply

0 Trevor Pike over 5 years ago in reply to Murat Firat

I would suggest to open a Service Request and provide the complete logs to Support, as per https://support.oneidentity.com/identity-manager/kb/115851/available-logging-options-for-the-identity-manager-job-service.

Thanks
Cancel
Up 0 Down

Cancel

Children

0 Murat Firat over 5 years ago in reply to Trevor Pike

Btw following logs I figured out:

NsProviderTrace.log

[...]

2018-11-05 16:50:25 +01:00 - Info - Get property maxPwdAge.
2018-11-05 16:50:25 +01:00 - Info - Get property minPwdAge.
2018-11-05 16:50:25 +01:00 - Info - Get property minPwdLength.
2018-11-05 16:50:25 +01:00 - Info - Get property msDS-deletedObjectLifetime.
2018-11-05 16:50:25 +01:00 - Info - DirectoryLookup
2018-11-05 16:50:25 +01:00 - Serious - Exception occured
[System.NullReferenceException] Object reference not set to an instance of an object.
2018-11-05 16:50:25 +01:00 - Info - DirectoryLookup
2018-11-05 16:50:25 +01:00 - Serious - Exception occured
[System.NullReferenceException] Object reference not set to an instance of an object.
2018-11-05 16:50:25 +01:00 - Info - GetObjectListImpl
2018-11-05 16:50:40 +01:00 - Info - GetObjectListImpl
2018-11-05 16:51:10 +01:00 - Info - Get property OBJECTGUID.
2018-11-05 16:51:10 +01:00 - Info - Get property showInAdvancedViewOnly.
2018-11-05 16:51:10 +01:00 - Info - Get property OBJECTGUID.

[...]

JobService.log

[...]

Validation of configured property set of object type contact initiated.
Validation of configured property set of object type msDS-PasswordSettings initiated.
Component is switched to single thread mode. Processing sequentially.
Start synchronizing domainDNS ...
Start processing objects / relation of type "domainDNS" using following settings:
database amount : DELETE,
intersection amount: UPDATEDB,
namespace amount: IMPORT - USN optimization False.
[921057] Object list from the target system has 1 elements.
Start synchronizing organization ...
Start processing objects / relation of type "organization" using following settings:
database amount : DELETE,
intersection amount: UPDATEDB,
namespace amount: IMPORT - USN optimization False.
[921057] Object list from the target system has 106 elements.
Start synchronizing container ...
Start processing objects / relation of type "container" using following settings:
database amount : DELETE,
intersection amount: UPDATEDB,
namespace amount: IMPORT - USN optimization False.
[921057] Object list from the target system has 370 elements.
Start synchronizing user ...
Start processing objects / relation of type "user" using following settings:
database amount : DELETE,
intersection amount: UPDATEDB,
namespace amount: IMPORT - USN optimization False.
[921057] Object list from the target system has 131 elements.
[854008] Insert of object LDAP://XX-XXXXX:389/CN=Guest,CN=Users,DC=XX,DC=ema,DC=XXXXXX,DC=com, type ADSAccount into database failed.
[System.NullReferenceException] Object reference not set to an instance of an object.
Process task FullSync succeeded.

Is there any clues to solve this issue?

Many thanks,

Murat
Cancel
Up 0 Down

Cancel