Delete custom attribute and binding in FIM 2010 RC1
I am using FIM 2010 RC1. I have create a custom attribute and binding (to user resource). Documentation indicates I should be able to delete this custom attribute. MPRs indicate I should be able to delete. I am getting a "Request Failed" error when attempting to delete the attribute or binding. Not an access denied mind you, but a "Request Failed". Any ideas?
January 19th, 2010 3:33am

In case it helps, below is the "Request Parameters"<RequestParameter xmlns:q1="http://microsoft.com/wsdl/types/" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="DeleteRequestParameter"><Target>1d94bd07-7b3f-469c-aaaf-ace8cb4abdb0</Target><Calculated>true</Calculated><Operation>Delete</Operation></RequestParameter>------------------------------------------------------------
Free Windows Admin Tool Kit Click here and download it now
January 19th, 2010 4:02am

Are there any resources in the system that have attribute values for that attribute? If so, I do not believe you can delete the schema until the data is cleared.AhmadAW
January 19th, 2010 9:44pm

Good thought. I will see if I can flow an empty string into it for all users just to be sure, then attempt delete. I will update as soon as I know.
Free Windows Admin Tool Kit Click here and download it now
January 19th, 2010 10:24pm

Short Answer: Nulling out all values allowed me to delete the binding but not the attribute. But you were still on the right track with that too.Long Answer: To flow the empty string or null value into this attribute and validate the result, I had added the attribute to Filter Permissions (admin and non-admin), I had added it to a sync rule, I had added it to an MPR (sync acct controls users is syncs), and I had added it to a view (search scope > all users). I'm not sure which one did the trick, but after removing the attribute from each one of these, I was successfully able to delete the attribute.Thanks for the help!Phil
January 19th, 2010 11:12pm

Hi, I'm having this exact issue, but can't seem to track down what is making the delete request fail. By any chance is there a way to get more details about the cause of the failure? I've checked the event viewer and the request itself which don't have much helpful information. I'm still new to FIM so maybe I am overlooking a place to check? Thanks, Sami
Free Windows Admin Tool Kit Click here and download it now
August 18th, 2010 1:01am

Wish I could provide more assistance to you but the event logs, etc did not help me either. All I can tell you is that after flowing a null value into the attribute, I reversed everything I did step by step. That means removing the attribute from MPRs, removing from search scope, etc and then deleting it.
August 18th, 2010 1:34am

Deleting the attributes in FIM can be a bit of a fun experience. There are many different areas where you may have used the attribute and until all the uses are gone, you cannot delete them: 1. Check things like MPR's that are configured to look for the specific attribute. 2. Remove any references in set definitions that may be looking for the attribute. 3. Remove any values from the attribute. (This can be really fun as deletions are a pain unless you allow nulls in the sync engine). 4. Remove any references in group definitions. 5. Remove any bindings. 6. Remove the attribute. There isn't really an easy way to find where the attributes are used. You can do some searches for bindings and such but sometimes you just have to go back to the documentation you made with the environment. Thanks B
Free Windows Admin Tool Kit Click here and download it now
August 18th, 2010 5:13am

Thank you both! At least I'm not overlooking the easy way. :)
August 18th, 2010 3:11pm

Hi All! I'm having the same issue and clearing out values etc. does work. I've done it using Powershell for string values but I'm not able to clear out boolean attributes i.e. set it to null instead of true or false. Is this even possible? //HenrikHenrik Nilsson, ILM/FIM MVP Blog: http://www.idmcrisis.com Company: Cortego (http://www.cortego.se)
Free Windows Admin Tool Kit Click here and download it now
October 14th, 2010 8:16am

AD has FALSE, TRUE and NOT SET FIM has something similar. When you create an object with a boolean attrib tit looks like it is not set. As soon as you edit the object (e.g. description), in the summary you see that boolean attributes are being set to FALSE which appears to be the default initial value -- Cheers, (HOPEFULLY THIS INFORMATION HELPS YOU!) # Jorge de Almeida Pinto # MVP Identity & Access - Directory Services # BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx ------------------------------------------------------------------------------------------ * This posting is provided "AS IS" with no warranties and confers no rights! * Always test ANY suggestion in a test environment before implementing! ------------------------------------------------------------------------------------------ ################################################# ################################################# ------------------------------------------------------------------------------------------ "Henrik Nilsson" wrote in message news:00f5ff7e-3ec6-49d8-a92d-e4e0201af035... Hi All! I'm having the same issue and clearing out values etc. does work. I've done it using Powershell for string values but I'm not able to clear out boolean attributes i.e. set it to null instead of true or false. Is this even possible? //Henrik Henrik Nilsson, ILM/FIM MVP Blog: http://www.idmcrisis.com Company: Cortego (http://www.cortego.se)Jorge de Almeida Pinto [MVP-DS / AD DS TechNet Forums Moderator] [Sr. Technical Consultant @ Oxford Computer Group] (http://blogs.dirteam.com/blogs/jorge/default.aspx) (http://www.oxfordcomputergroup.com/)
October 14th, 2010 8:59am

Thanks Jorge! I've noticed this but as long as the value is set to either true or false I can't remove the binding. I've tried to set it to null using Powershell but this only results in: "Microsoft.ResourceManagement.WebServices.Faults.ServiceFaultException: The request message contains errors that prevent processing the request. " ...The same Powershell script works on string attributes. My question is if it's possible to set a boolean value to null and in that case how? Henrik Nilsson, ILM/FIM MVP Blog: http://www.idmcrisis.com Company: Cortego (http://www.cortego.se)
Free Windows Admin Tool Kit Click here and download it now
October 14th, 2010 6:06pm

I just wanted to add that the most effective way I found of tracking down the use of attributes and bindings was to export the schema and policy xml and search in there. There's a utility product awaiting development here ... :)Bob Bradley, www.unifysolutions.net (FIMBob?)
October 18th, 2010 7:24am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics