This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Identity Manager Version 6.1.3: Set-Up a further AD-Domain failed

Hi,

I got this error message:

ErrorMessages = Creating provider object using VI.JobService.NSProvider.ADSProvider,ADSProvider successful.
The connection mode of the provider was set to Default.
Definition rule for object properties and relation memberships was changed by the definition loaded from table Domain column MappingInfo.
Error parsing XML structure : <?xml version="1.0" encoding="utf-8"?>
<Configurations>
<Configuration Name="AD synchronization - XXX-XX" Namespace="ADS">
<Layout />
<Task>
<ControlParameters>
<Option Name="SyncSystemContainer" Value="1" />
<Option Name="SyncAdvancedFeaturesContainer" Value="" />
<Option Name="DisableRAS" Value="1" />
<Option Name="DisableTerminal" Value="1" />
<Option Name="LookUpDomainNames" Value="" />
</ControlParameters>
</Task>
</Configuration>
</Configurations>
Processing task FullSync failed.

Any ideas why this error coming up?

Many thanks in advance,

Murat

Parents
  • Hi Murat<

    We have seen this issue before and the resolution was to delete the synchronization configuration and create a new one (from within Manager).

    I hope that helps.

    Trevor

  • Hi Trevor,

    thanks

    This error happened if no object types (classes) are checked in the synchronization configuration. I would expect no error but anyway 

    I enabled domainDNS, organization, container and user.

    Just one more question:

    I could imported with the fullsync all containers etc. but not all user-objects.

    Example:

    ou = ABC

          ou = GAdmins

               UserObject1 (CN=UserObject1, OU=GAdmins,OU=ABC,DC=ema,DC=xxx,DC=com)

               UserObject2 (CN=UserObject2, OU=GAdmins,OU=ABC,DC=ema,DC=xxx,DC=com) 

               ,,,,,

         ou = Users

              UserObjectA1 (CN=UserObjectA1,OU=Users,OU=ABC,DC=ema,DC=xxx,DC=com)

              UserObjectA2 (CN=UserObjectA2,OU=Users,OU=ABC,DC=ema,DC=xxx,DC=com)

              .....

    I have all users in "ou = GAdmins", but no users from "ou = Users" in the identity manager?

    I checked the permissions and object classes, everything looks fine.

    Does anyone have an idea why this happened?

    Many thanks in advance.

    Murat

  • If would check if your sync user has the correct permissions to read the users in the users OU.

  • As I wrote before, I checked it already.

    When I access this AD-Domain with the same user (sync user) and a tool like AD-Explorer I can read those users.

  • Sorry missed that. Do you use any filter in your sync XML definition?

  • No problem.

    No any filters in the sync configuration defined.

  • Btw following logs I figured out:

    NsProviderTrace.log

    [...]

    2018-11-05 16:50:25 +01:00 - Info - Get property maxPwdAge.
    2018-11-05 16:50:25 +01:00 - Info - Get property minPwdAge.
    2018-11-05 16:50:25 +01:00 - Info - Get property minPwdLength.
    2018-11-05 16:50:25 +01:00 - Info - Get property msDS-deletedObjectLifetime.
    2018-11-05 16:50:25 +01:00 - Info - DirectoryLookup
    2018-11-05 16:50:25 +01:00 - Serious - Exception occured
    [System.NullReferenceException] Object reference not set to an instance of an object.
    2018-11-05 16:50:25 +01:00 - Info - DirectoryLookup
    2018-11-05 16:50:25 +01:00 - Serious - Exception occured
    [System.NullReferenceException] Object reference not set to an instance of an object.
    2018-11-05 16:50:25 +01:00 - Info - GetObjectListImpl
    2018-11-05 16:50:40 +01:00 - Info - GetObjectListImpl
    2018-11-05 16:51:10 +01:00 - Info - Get property OBJECTGUID.
    2018-11-05 16:51:10 +01:00 - Info - Get property showInAdvancedViewOnly.
    2018-11-05 16:51:10 +01:00 - Info - Get property OBJECTGUID.

    [...]

    JobService.log

    [...]

    Validation of configured property set of object type contact initiated.
    Validation of configured property set of object type msDS-PasswordSettings initiated.
    Component is switched to single thread mode. Processing sequentially.
    Start synchronizing domainDNS ...
    Start processing objects / relation of type "domainDNS" using following settings:
    database amount : DELETE,
    intersection amount: UPDATEDB,
    namespace amount: IMPORT - USN optimization False.
    [921057] Object list from the target system has 1 elements.
    Start synchronizing organization ...
    Start processing objects / relation of type "organization" using following settings:
    database amount : DELETE,
    intersection amount: UPDATEDB,
    namespace amount: IMPORT - USN optimization False.
    [921057] Object list from the target system has 106 elements.
    Start synchronizing container ...
    Start processing objects / relation of type "container" using following settings:
    database amount : DELETE,
    intersection amount: UPDATEDB,
    namespace amount: IMPORT - USN optimization False.
    [921057] Object list from the target system has 370 elements.
    Start synchronizing user ...
    Start processing objects / relation of type "user" using following settings:
    database amount : DELETE,
    intersection amount: UPDATEDB,
    namespace amount: IMPORT - USN optimization False.
    [921057] Object list from the target system has 131 elements.
    [854008] Insert of object LDAP://XX-XXXXX:389/CN=Guest,CN=Users,DC=XX,DC=ema,DC=XXXXXX,DC=com, type ADSAccount into database failed.
    [System.NullReferenceException] Object reference not set to an instance of an object.
    Process task FullSync succeeded.

    Is there any clues to solve this issue?

    Many thanks,

    Murat 

Reply
  • Btw following logs I figured out:

    NsProviderTrace.log

    [...]

    2018-11-05 16:50:25 +01:00 - Info - Get property maxPwdAge.
    2018-11-05 16:50:25 +01:00 - Info - Get property minPwdAge.
    2018-11-05 16:50:25 +01:00 - Info - Get property minPwdLength.
    2018-11-05 16:50:25 +01:00 - Info - Get property msDS-deletedObjectLifetime.
    2018-11-05 16:50:25 +01:00 - Info - DirectoryLookup
    2018-11-05 16:50:25 +01:00 - Serious - Exception occured
    [System.NullReferenceException] Object reference not set to an instance of an object.
    2018-11-05 16:50:25 +01:00 - Info - DirectoryLookup
    2018-11-05 16:50:25 +01:00 - Serious - Exception occured
    [System.NullReferenceException] Object reference not set to an instance of an object.
    2018-11-05 16:50:25 +01:00 - Info - GetObjectListImpl
    2018-11-05 16:50:40 +01:00 - Info - GetObjectListImpl
    2018-11-05 16:51:10 +01:00 - Info - Get property OBJECTGUID.
    2018-11-05 16:51:10 +01:00 - Info - Get property showInAdvancedViewOnly.
    2018-11-05 16:51:10 +01:00 - Info - Get property OBJECTGUID.

    [...]

    JobService.log

    [...]

    Validation of configured property set of object type contact initiated.
    Validation of configured property set of object type msDS-PasswordSettings initiated.
    Component is switched to single thread mode. Processing sequentially.
    Start synchronizing domainDNS ...
    Start processing objects / relation of type "domainDNS" using following settings:
    database amount : DELETE,
    intersection amount: UPDATEDB,
    namespace amount: IMPORT - USN optimization False.
    [921057] Object list from the target system has 1 elements.
    Start synchronizing organization ...
    Start processing objects / relation of type "organization" using following settings:
    database amount : DELETE,
    intersection amount: UPDATEDB,
    namespace amount: IMPORT - USN optimization False.
    [921057] Object list from the target system has 106 elements.
    Start synchronizing container ...
    Start processing objects / relation of type "container" using following settings:
    database amount : DELETE,
    intersection amount: UPDATEDB,
    namespace amount: IMPORT - USN optimization False.
    [921057] Object list from the target system has 370 elements.
    Start synchronizing user ...
    Start processing objects / relation of type "user" using following settings:
    database amount : DELETE,
    intersection amount: UPDATEDB,
    namespace amount: IMPORT - USN optimization False.
    [921057] Object list from the target system has 131 elements.
    [854008] Insert of object LDAP://XX-XXXXX:389/CN=Guest,CN=Users,DC=XX,DC=ema,DC=XXXXXX,DC=com, type ADSAccount into database failed.
    [System.NullReferenceException] Object reference not set to an instance of an object.
    Process task FullSync succeeded.

    Is there any clues to solve this issue?

    Many thanks,

    Murat 

Children
No Data