Dear community,

we are running the latest version of Forefront Identity Manager and eDirectory. When we run a delta import on our eDirectory (using the Generic LDAP connector) we get the following error: no-start-ma
When I take a look at the Global Parameters section of the Agent the server information is listed as follows: Directory Name: NetIQ Corporation (LDAP Agent for NetIQ eDirectory 8.8 SP8 (20806.01)). A full import is working without any problems.

The eventlog reveals:

The extensible extension returned an unsupported error. The stack trace is: "System.InvalidOperationException: Delta import is aborted as the access log DN is missing, Please mention the access log DN and re-run the delta import profile. at Microsoft.IdentityManagement.Connector.GenericLdap.GenericLdapConnector.OpenImportConnection(KeyedCollection`2 configParameters, Schema types, OpenImportConnectionRunStep importRunStep) Forefront Identity Manager 4.1.3627.0" 

From the documentation, the agent should use the modifyTimestamp to import the changed entries for eDirectory or am I wrong?

Best regards, Rainer

You read the doc correctly. On the Global parameters page is the Change Log DN: textbox grayed out or available for edit?

According to the doc it shouldn't be available. If it is then you could try cn=changelog just to see what happens. You shouldn't need to do this.

Failing that I would open a support ticket -- this could be a bug in the MA

Thank you for your reply. Obviously MS released a hotfix where you can now chose manually if you want timestamp based synchronization, accesslog, changelog or USN. It can be downloaded here. Unfortunately it still does not work (especially I could not even finish the full import on an eDirectory with more than 100.000 entries... it stops at around 70k objects and then cpu raises to nearly 100% for hours).