ProvisioningBySyncRuleException: 0x80230405 - Synchronization between ADMA(CS) and MV
Hello, Need your help with this exception: Microsoft.MetadirectoryServices.ProvisioningBySyncRuleException: 0x80230405 during the Full Synchronization. Interestingly enough, in spite of this exception, I can see the connector objects being projected into the Metaverse. Any ideas? Thanks & Regards, Jameel Syed Principal Consultant, fimGuru - Your window into simplified identities jameel.syed@fimguru.com - http://www.fimguru.com
April 22nd, 2010 12:32am

That error message translates to "Object cannot be found" which isn't helping us in troubleshooting the problem. What will happen if you do a preview of this object? Preview is usually good to provide a more detailed error. This error is more common for outbound sync (from MV to AD) when it is trying to provision new objects and some key attribute is not present or incorrect (e.g. don't set dn when creating a new AD object). This posting is provided "AS IS" with no warranties, and confers no rights. Use of included script samples are subject to the terms specified at http://www.microsoft.com/info/copyright.htm
Free Windows Admin Tool Kit Click here and download it now
April 22nd, 2010 4:43am

Andreas, I will get you the information from the Preview screen. I have seen this error in the Inbound-sync. Thanks & Regards, Jameel Syed Principal Consultant, fimGuru - Your window into simplified identities jameel.syed@fimguru.com - http://www.fimguru.com
April 22nd, 2010 9:47pm

Hi Andreas, Here is an XML dump of the error I see from the Preview Mode: Appreciate any direction you can offer. Thanks, Jameel <preview> <cs-object cs-dn="a347cca9-3a9f-49dc-afd6-ec236c656890" id="{9D67B20A-14D9-449F-9298-C5C201D52F92}" object-type="Group"> <unapplied-export> <delta operation="add" dn="a347cca9-3a9f-49dc-afd6-ec236c656890"> <primary-objectclass>Group</primary-objectclass> <objectclass> <oc-value>Group</oc-value> </objectclass> <dn-attr name="DetectedRulesList" multivalued="true"> <dn-value> <dn>1f4d8fc6-7b6c-4026-ae9c-e13e480844c1</dn> </dn-value> </dn-attr> <attr name="DisplayName" type="string" multivalued="false"> <value>Test Sub Group-Jameel</value> </attr> <attr name="MVObjectID" type="string" multivalued="false"> <value>{E576482B-B8F1-43E3-B7D1-5788231CADAE}</value> </attr> <attr name="MailNickname" type="string" multivalued="false"> <value>TestSub</value> </attr> <attr name="ObjectSID" type="binary" multivalued="false"> <value encoding="base64">AQUAAAAAAAUVAAAAg1AtuSYDCWK2DKGE+gYAAA==</value> </attr> <attr name="Scope" type="string" multivalued="false"> <value>Universal</value> </attr> </delta> </unapplied-export> <escrowed-export> <delta operation="none" dn="a347cca9-3a9f-49dc-afd6-ec236c656890"> </delta> </escrowed-export> <unconfirmed-export> <delta operation="none" dn="a347cca9-3a9f-49dc-afd6-ec236c656890"> </delta> </unconfirmed-export> <pending-import> <delta operation="none" dn="a347cca9-3a9f-49dc-afd6-ec236c656890"> </delta> </pending-import> <synchronized-hologram> </synchronized-hologram> <unapplied-export-hologram> <entry dn="a347cca9-3a9f-49dc-afd6-ec236c656890"> <primary-objectclass>Group</primary-objectclass> <objectclass> <oc-value>Group</oc-value> </objectclass> <dn-attr name="DetectedRulesList" multivalued="true"> <dn-value> <dn>1f4d8fc6-7b6c-4026-ae9c-e13e480844c1</dn> </dn-value> </dn-attr> <attr name="DisplayName" type="string" multivalued="false"> <value>Test Sub Group-Jameel</value> </attr> <attr name="MVObjectID" type="string" multivalued="false"> <value>{E576482B-B8F1-43E3-B7D1-5788231CADAE}</value> </attr> <attr name="MailNickname" type="string" multivalued="false"> <value>TestSub</value> </attr> <attr name="ObjectSID" type="binary" multivalued="false"> <value encoding="base64">AQUAAAAAAAUVAAAAg1AtuSYDCWK2DKGE+gYAAA==</value> </attr> <attr name="Scope" type="string" multivalued="false"> <value>Universal</value> </attr> </entry> </unapplied-export-hologram> <escrowed-export-hologram> <entry dn="a347cca9-3a9f-49dc-afd6-ec236c656890"> </entry> </escrowed-export-hologram> <unconfirmed-export-hologram> <entry dn="a347cca9-3a9f-49dc-afd6-ec236c656890"> </entry> </unconfirmed-export-hologram> <pending-import-hologram> <entry dn="a347cca9-3a9f-49dc-afd6-ec236c656890"> </entry> </pending-import-hologram> <connector>1</connector> <connector-state>normal</connector-state> <seen-by-import>0</seen-by-import> <rebuild-in-progress>0</rebuild-in-progress> <obsoletion>0</obsoletion> <need-full-sync>0</need-full-sync> <placeholder-parent>0</placeholder-parent> <placeholder-link>0</placeholder-link> <placeholder-delete>0</placeholder-delete> <pending>0</pending> <ref-retry>0</ref-retry> <rename-retry>0</rename-retry> <sequencers> <current> <batch-number>465</batch-number> <sequence-number>74978</sequence-number> </current> <unapplied> <batch-number>465</batch-number> <sequence-number>74978</sequence-number> </unapplied> <original> <batch-number>465</batch-number> <sequence-number>74978</sequence-number> </original> </sequencers> <import-delta-operation>none</import-delta-operation> <export-delta-operation>add</export-delta-operation> <pending-ref-delete>0</pending-ref-delete> <ma-id>{67602862-7AC4-4A52-960A-BC0F3804A515}</ma-id> <ma-name>FIM-MA</ma-name> <partition-id>{8F044CBB-0F8F-4EF7-BBBA-D4C1F3137072}</partition-id> <import-errordetail first-occurred="2010-04-22 18:54:29.473" date-occurred="2010-04-22 19:01:17.727" retry-count="3" error-type="sync-rule-flow-provisioning-failed"> <import-status> <algorithm-step>provisioning</algorithm-step> <extension-error-info> <extension-name></extension-name> <extension-callsite>provision</extension-callsite> <extension-context></extension-context> <call-stack>Microsoft.MetadirectoryServices.ProvisioningBySyncRuleException: 0x80230405</call-stack> </extension-error-info> </import-status> </import-errordetail> <mv-link lineage-id="{F434C74C-B9B8-4BCD-858B-B221447E1FC7}" lineage-type="provisioning-rules" lineage-time="2010-04-22 18:29:39.713">{E576482B-B8F1-43E3-B7D1-5788231CADAE}</mv-link> <last-export-delta-time>2010-04-22 18:54:30.617</last-export-delta-time> </cs-object> <cs-operation>export-phantom</cs-operation> <mv> <mv-object id="{E576482B-B8F1-43E3-B7D1-5788231CADAE}"> <cs-mv-links> <cs-mv-value lineage-id="{F434C74C-B9B8-4BCD-858B-B221447E1FC7}" lineage-type="provisioning-rules" lineage-time="2010-04-22 18:29:39.713"> <cs-dn>a347cca9-3a9f-49dc-afd6-ec236c656890</cs-dn> <cs-guid>{9D67B20A-14D9-449F-9298-C5C201D52F92}</cs-guid> <ma-name>FIM-MA</ma-name> <ma-guid>{67602862-7AC4-4A52-960A-BC0F3804A515}</ma-guid> </cs-mv-value> </cs-mv-links> <entry dn="{E576482B-B8F1-43E3-B7D1-5788231CADAE}"> <primary-objectclass lineage-id="{CFA20DEE-EFC6-4397-8EB3-090D0B7E29BF}" lineage-ma-id="{21D3F01D-A512-41D2-A9C2-1BECC56D284F}" lineage-time="2010-04-22 18:20:21.390">group</primary-objectclass> <objectclass> <oc-value>group</oc-value> </objectclass> <attr name="accountName" type="string" multivalued="false"> <value lineage-id="{A378C03A-64E9-415D-85BA-A58F38F16C06}" lineage-ma-id="{21D3F01D-A512-41D2-A9C2-1BECC56D284F}" lineage-time="2010-04-22 18:20:21.390">Test Sub Group-Jameel</value> </attr> <attr name="cn" type="string" multivalued="false"> <value lineage-id="{F339BDFF-57CA-42B1-90F9-E3AB517F592C}" lineage-ma-id="{21D3F01D-A512-41D2-A9C2-1BECC56D284F}" lineage-time="2010-04-22 18:20:21.390">Test Sub Group-Jameel</value> </attr> <attr name="displayName" type="string" multivalued="false"> <value lineage-id="{61AEC2B7-336F-4657-86DA-F3BCFBAAA6EB}" lineage-ma-id="{21D3F01D-A512-41D2-A9C2-1BECC56D284F}" lineage-time="2010-04-22 18:20:21.390">Test Sub Group-Jameel</value> </attr> <attr name="domain" type="string" multivalued="false"> <value lineage-id="{57707E0C-25F6-48A4-9736-B2FC6488198D}" lineage-ma-id="{21D3F01D-A512-41D2-A9C2-1BECC56D284F}" lineage-time="2010-04-22 18:20:21.390">CORPLAB</value> </attr> <attr name="email" type="string" multivalued="false"> <value lineage-id="{D965C04C-307D-4137-9C8C-32FD57224FFC}" lineage-ma-id="{21D3F01D-A512-41D2-A9C2-1BECC56D284F}" lineage-time="2010-04-22 18:20:21.390">TestSub@emc.com</value> </attr> <attr name="mail" type="string" multivalued="false"> <value lineage-id="{EFBFF940-772A-4E46-88A2-751171A4B499}" lineage-ma-id="{21D3F01D-A512-41D2-A9C2-1BECC56D284F}" lineage-time="2010-04-22 18:20:21.390">TestSub@emc.com</value> </attr> <attr name="mailNickname" type="string" multivalued="false"> <value lineage-id="{CF12889B-8A4E-4FC6-844A-06BEE5DC743D}" lineage-ma-id="{21D3F01D-A512-41D2-A9C2-1BECC56D284F}" lineage-time="2010-04-22 18:20:21.390">TestSub</value> </attr> <attr name="memberFilter" type="string" multivalued="false"> <value lineage-id="{469A619A-3AEC-4C81-8EDB-538EC5FD34B2}" lineage-ma-id="{21D3F01D-A512-41D2-A9C2-1BECC56D284F}" lineage-time="2010-04-22 18:20:21.393"></value> </attr> <attr name="membershipAddWorkflow" type="string" multivalued="false"> <value lineage-id="{10EA55D3-31B4-4ED0-8831-B8A35A179E2F}" lineage-ma-id="{21D3F01D-A512-41D2-A9C2-1BECC56D284F}" lineage-time="2010-04-22 18:20:21.393">OwnerApproval</value> </attr> <attr name="membershipLocked" type="boolean" multivalued="false"> <value lineage-id="{40AF2B42-3639-4B5E-BE54-D53A69413913}" lineage-ma-id="{21D3F01D-A512-41D2-A9C2-1BECC56D284F}" lineage-time="2010-04-22 18:20:21.393">false</value> </attr> <attr name="objectSid" type="binary" multivalued="false"> <value lineage-id="{C5C705AE-270C-4343-9CE2-8884BFF004E5}" lineage-ma-id="{21D3F01D-A512-41D2-A9C2-1BECC56D284F}" lineage-time="2010-04-22 18:20:21.390" encoding="base64">AQUAAAAAAAUVAAAAg1AtuSYDCWK2DKGE+gYAAA==</value> </attr> <attr name="proxyAddressCollection" type="string" multivalued="true"> <value lineage-id="{5F747959-36CD-4BC7-BEE2-9777EC68B78D}" lineage-ma-id="{21D3F01D-A512-41D2-A9C2-1BECC56D284F}" lineage-time="2010-04-22 18:20:21.390">SMTP:__almtestfe355@mail.corp.emc.com</value> <value lineage-id="{5F747959-36CD-4BC7-BEE2-9777EC68B78D}" lineage-ma-id="{21D3F01D-A512-41D2-A9C2-1BECC56D284F}" lineage-time="2010-04-22 18:20:21.390">X400:c=US;a= ;p=CorpLabMSX;o=Exchange;s=TestSub;</value> <value lineage-id="{5F747959-36CD-4BC7-BEE2-9777EC68B78D}" lineage-ma-id="{21D3F01D-A512-41D2-A9C2-1BECC56D284F}" lineage-time="2010-04-22 18:20:21.390">smtp:TestSub@wissam.com</value> </attr> <attr name="scope" type="string" multivalued="false"> <value lineage-id="{ACA68B8C-871B-4A13-9CC7-FF8E379B779C}" lineage-ma-id="{21D3F01D-A512-41D2-A9C2-1BECC56D284F}" lineage-time="2010-04-22 18:20:21.393">Universal</value> </attr> <attr name="type" type="string" multivalued="false"> <value lineage-id="{FBE2F3D5-8F2D-4A23-A842-E017ED3F4AD2}" lineage-ma-id="{21D3F01D-A512-41D2-A9C2-1BECC56D284F}" lineage-time="2010-04-22 18:20:21.393">Distribution</value> </attr> </entry> </mv-object> <mv-changes id="{E576482B-B8F1-43E3-B7D1-5788231CADAE}"> <delta operation="none" dn="{E576482B-B8F1-43E3-B7D1-5788231CADAE}"> </delta> </mv-changes> </mv> <provisioning has-error="true"> <error type="sync-rule-flow-provisioning-failed"> <extension-error-info> <extension-name></extension-name> <extension-callsite>provision</extension-callsite> <extension-context></extension-context> <call-stack>Microsoft.MetadirectoryServices.ProvisioningBySyncRuleException: 0x80230405</call-stack> </extension-error-info> </error> </provisioning> <error type="sync-rule-flow-provisioning-failed" code="0x8023055d"> <diagnosis>CS to MV to CS synchronization failed 0x8023055d: [a347cca9-3a9f-49dc-afd6-ec236c656890]</diagnosis> </error> </preview> Thanks & Regards, Jameel Syed Principal Consultant, fimGuru - Your window into simplified identities jameel.syed@fimguru.com - http://www.fimguru.com
Free Windows Admin Tool Kit Click here and download it now
April 22nd, 2010 10:48pm

It looks like the object is already present in the FIM MA connector space but it hasn't been exported and the import confirmed. After you ran Full Sync on your AD MA the first time, did you run an export on the FIM MA and a confirming import?This posting is provided "AS IS" with no warranties, and confers no rights. Use of included script samples are subject to the terms specified at http://www.microsoft.com/info/copyright.htm
April 23rd, 2010 7:32am

I dont believe I did that . Will I be able to eliminate this condition by simply exporting it to FIM? Or do I need to delete the connector space and redo it again.Thanks & Regards, Jameel Syed Principal Consultant, fimGuru - Your window into simplified identities jameel.syed@fimguru.com - http://www.fimguru.com
Free Windows Admin Tool Kit Click here and download it now
April 25th, 2010 12:12am

I would try an export. You have an "export-phantom" and those should generally be fixed by running export/import/sync on the MA.This posting is provided "AS IS" with no warranties, and confers no rights. Use of included script samples are subject to the terms specified at http://www.microsoft.com/info/copyright.htm
April 28th, 2010 9:08pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics