deprovision.delte do not stage a pending export - delete

Заблокировано deprovision.delte do not stage a pending export - delete

  • 31 января 2012 г. 5:53
     
     

    Hi,

     

    rescently I am facing the following problem.

    a DeprovisionAction.Delete will not be exported to the Connected Data Source even though the CS-Object being removed.

    the deprovisionCode is as followed

       Public Function Deprovision(ByVal csentry As CSEntry) As DeprovisionAction Implements IMASynchronization.Deprovision
            Dim sDisplayName As String

            Select Case csentry.ObjectType
                'If csentry.ObjectClass.ToString.ToLower.Equals("user") Or csentry.ObjectType.ToLower.Equals("user") Then
                Case "user"
                    sDisplayName = csentry("DisplayName").Value
                    sDisplayName = "zz_" & sDisplayName & Date.Today.Date
                    csentry("DisplayName").Value = sDisplayName

                    'csentry(MAIL_NICKNAME).Delete()
                    'csentry(MAIL).Delete()
                    'csentry(LEGACY_EXCHANGE_DN).Delete()
                    'csentry(PROXY_ADDRESSES).Delete()
                    'csentry(TARGET_ADDRESS).Delete()
                    Return DeprovisionAction.Disconnect
                    'Else
                Case "contact", "group"
                    Return DeprovisionAction.Delete
                    '   End If
                Case Else
                    Throw New EntryPointNotImplementedException()
            End Select
            ' TODO: Remove this throw statement if you implement this method
            'Throw New EntryPointNotImplementedException()
        End Function

    and the deprovision action is set to determine by rules extension.

    Debugging shows, the deprovision code is being entered and since the CS-Entry disappears it obviously does it.

    But why is there no delte exported to the CDS?

     

    many thanks for the help

    Matthias

Все ответы

  • 31 января 2012 г. 19:00
     
     

    Check the settings on the Configure Deprovisioning tab of your MA properties.  If you want the code to run, you must select the radio button for "Determine with a rules extension".  If you select one of the other options, that is what will happen for all disconnected objects on a deprovision.

    If that is set, then try attaching your Visual Studio debugger to the process, or deliberately throw exceptions in your code that tells you what branch is executing. 

    Chris

  • 1 февраля 2012 г. 6:16
     
     

    Chris, many thanks for the reply.

    the radio button is selected.

    debugging showed it was performing the deprovisionaction and the CSentry disappeared. But no export was staged 

    regards

    Matthias


    • Изменено Mad_Mat1975 1 февраля 2012 г. 6:18
    •  
  • 1 февраля 2012 г. 8:10
     
     

    Chris, many thanks for the reply.

    the radio button is selected.

    debugging showed it was performing the deprovisionaction and the CSentry disappeared. But no export was staged 

    regards

    Matthias


    Hi,

    It sounds like something is preventing the MA from actually exporting to the target?

     

    What kind of MA is it?

     

    Also, do you see any errors in the Event viewer on either the ILM machine, or on the machine on which the target repository is running?

     

    Jim

  • 3 февраля 2012 г. 13:02
     
     

    Jim,

    they are all Active Directory MA's

    the routine seems to work fo 2 of 3 MA's but not for the one serving a 2008 AD with Exchange 2007.

    I couldn't find any event for the objects to be deleted and since do delete was staged for the export I assume the error to be found at the ILM2007FP1

    However the CSentry gets deleted as called in the function.

    kind regards

     

    Matthias

  • 9 февраля 2012 г. 4:39
     
     

    what wonders me most, it deletes the CSentry but does not stage a delete to the connected data source. the same routine works for a different management agent with equat settings on the deprovisioning page.

    the only difference is within the data sources. One AD is Windows 2008 and a Exchange 2007 Schema while the working MA is connected to a Windows 2003 AD and a 2003 Exchange Schema

    many thanks

    Matthias

  • 11 марта 2012 г. 9:48
     
     

    So this is for the contact or group objects, correct (since the user is object is set for disconnect only)?

    Otherwise, I don't see anything obviously wrong

    Perhaps looking at 'search connector space' to make sure it looks correct for a deletion?


    Frank C. Drewes III - Senior Consultant: Oxford Computer Group

  • 12 марта 2012 г. 5:34
     
     

    Frank,

    yes, that is for contacts and groups only! We do not want to delete user objects for archiving and other purposes

    When searching the Connectorspace for pending exports, there is no delete for those contacts. However, I did see deletions for some contacts sometimes but not for all. Many conatacts remain in the directory even though there is no Connectorspace abject anymore.

    It all looks little weired to me.

    Still trying to figure why (maybe because we cannot enable the Exchange 2007 extensions for the forest?)

    Many thanks

    Matthias

  • 12 марта 2012 г. 10:58
     
     

    Well, it doesn't fix the problem, but at least you're doing the right things from your side.. All I can think of is checking for event log entries (which the previous posts mention)

    Wish I had more ideas. This is a stumper for sure..


    Frank C. Drewes III - Senior Consultant: Oxford Computer Group

  • 17 августа 2012 г. 5:31
     
     

    Did not find a solution yet, since EventLog did not show any Error related to that topic

    We finally raised a ticket with MS ....

    Many thanks for all your feedbacks

  • 17 августа 2012 г. 5:38
     
     
    Good luck with it. Let us know what they come up with.

    Frank C. Drewes III - Architect - Oxford Computer Group

  • 21 августа 2012 г. 7:23
     
     

    Did you try to switch on logging on your export run profile? In the resulting XML file (check the MAData folder for your MA) you might find some additional clues.

    Paul


    Paul Loonen (Avanade) | MCM: Directory 2008 | MVP: FIM2010

  • 14 сентября 2012 г. 13:46
     
     

    Paul, yes we log the exports and there is no delete in the log file neither.

    There isn't even a pending export of the Type "Delete" after synchronization

    many thanks

    Matthias