Addressing AD empty string attributes
Been running into an issue where an attribute is set in Active Directory for a number of user objects; however, no value is actually set for the attribute. The empty string/value always wanting to be Imported, and hence never confirmed after an export. Therefore, a number of objects are continouely flowing around in the system as 'add' attribute. I'm using custom expression as part of Sync Rule, and here's a sample: IIF(IsPresent(facsimileTelephoneNumber),IIF(Eq(facsimileTelephoneNumber,""),Null(),facsimileTelephoneNumber),Null()) Reviewing the XML sinppest of the object in AD reveals that the attribute is available by not set i.e. <facsimileTelephoneNumber/> Any idea to prevent those attributes flowing around the system (i.e. stopping from coming to MV in the first place). Thank you.
August 20th, 2011 11:17pm

What version of FIM 2010 are you working with? The reason I ask is that if it's not the latest, you may be running into an old issue with flowing nulls/empty strings that has since been corrected. Also, have you turned on the "allow nulls" checkbox on this EAF?Bob Bradley (FIMBob @ http://thefimteam.com/) ... now using Event Broker 3.0 @ http://www.unifysolutions.net/ourSolutions.cfm?solution=event for just-in-time delivery of FIM 2010 policy via the sync engine
Free Windows Admin Tool Kit Click here and download it now
August 21st, 2011 1:40am

Hi, I'm running the latest version 4.0.3576.2. In addition, these attributes are flowing in the Inbound flow of the SR; thus there is no option for allowing nulls to flow inbound. I should also mention that the same attributes are in the outbound flow of the same SR, and they do have 'allow nulls to flow' set. Thank you.
August 27th, 2011 10:37am

Ah - OK. Then you're saying FIM isn't actually responsible for setting these attributes like this ... but you want to ignore them. I suggest you give this a go then: IIF(IsPresent(facsimileTelephoneNumber),IIF(Eq(Trim(facsimileTelephoneNumber),""),Null(),facsimileTelephoneNumber),Null()) ... i.e. it's possible that you've got empty space in these that is causing the problem.Bob Bradley (FIMBob @ http://thefimteam.com/) ... now using Event Broker 3.0 @ http://www.unifysolutions.net/ourSolutions.cfm?solution=event for just-in-time delivery of FIM 2010 policy via the sync engine
Free Windows Admin Tool Kit Click here and download it now
August 27th, 2011 11:23am

Hi Bob, Thanks for the suggestion. I've tried the custom expression and it doesn't seem to eliminate the flow of those attribute. Which is weird, because reviewing the object (using Full Sync Preview) should do an empty string Applied,,sync-rule-mapping - expression,facsimileTelephoneNumber,,(Unchanged) Thank you.
August 27th, 2011 11:33am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics