Re: ADAMSync Issues.



Have you done the following pre-reqs?



-The schema in the ADAM instance must be extended to match schema objects in
the Windows Server 2003 Active Directory forest. (MS-AdamSchemaW2k3.ldf)

-The schema in the ADAM instance must be extended for schema objects that
are required by Active Directory to ADAM Synchronizer.
(MS-AdamSyncMetadata.ldf)



The other think I see in your query, you trying to synchronize everything.
Is that what you actually want. This may be the cause of the error you are
recieving.



Will not synchronize objects
CN=S-1-5-4,CN=ForeignSecurityPrincipals,DC=domestic,DC=mydomain,DC=com
with object class foreignsecurityprincipal. Skipping object.



Have you tried doing something simple first such synchronizing objects only
within the users container?



<base-dn>cn=users,dc=domestic,dc=mydomain,dc=com</base-dn>
<object-filter>(objectClass=person)</object-filter>



Chris Calderon



"ultragc" <chugene@xxxxxxxxx> wrote in message
news:1152136302.202230.282610@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Hi All,

Been reading the froum and tried many recommended steps to ADAM issues.
I am tring to sync up ADAM with AD. I am using ADAM R2 and the AD
server is running 2003. Here are my setup info:

====== config.xml ===============
<?xml version="1.0"?>
<doc>
<configuration>
<description>Active Directory Adamsync configuration
file</description>
<security-mode>object</security-mode>
<source-ad-name>ad.domestic.mydomain.com</source-ad-name>

<source-ad-partition>dc=domestic,dc=mydomain,dc=com</source-ad-partition>
<source-ad-account>admin</source-ad-account>
<account-domain>domestic</account-domain>
<target-dn>dc=domestic,dc=mydomain,dc=com</target-dn>
<query>
<base-dn>dc=domestic,dc=mydomain,dc=com</base-dn>
<object-filter>(objectClass=*)</object-filter>
<attributes>
<include></include>
<exclude>sourceobjectguid</exclude>
<exclude>objectClass</exclude>
<exclude>instanceType</exclude>
<exclude>displayName</exclude>
<exclude>userParameters</exclude>
<exclude>sAMAccountName</exclude>
<exclude>userPrincipalName</exclude>
<exclude>msNPAllowDialin</exclude>
<exclude>lastagedchange</exclude>
<exclude>extensionName</exclude>
<exclude>displayNamePrintable</exclude>
<exclude>flags</exclude>
<exclude>isPrivelegeHolder</exclude>
<exclude>msCom-UserLink</exclude>
<exclude>msCom-PartitionSetLink</exclude>
<exclude>reports</exclude>
<exclude>serviceprincipalname</exclude>
<exclude>accountExpires</exclude>
<exclude>adminCount</exclude>
<exclude>primarygroupid</exclude>
<exclude>userAccountControl</exclude>
<exclude>codePage</exclude>
<exclude>countryCode</exclude>
<exclude>logonhours</exclude>
<exclude>lockoutTime</exclude>
</attributes>
</query>
<schedule>
<aging>
<frequency>0</frequency>
<num-objects>0</num-objects>
</aging>
<schtasks-cmd></schtasks-cmd>
</schedule>
</configuration>
<synchronizer-state>
<dirsync-cookie></dirsync-cookie>
<status></status>
<authoritative-adam-instance></authoritative-adam-instance>
<configuration-file-guid></configuration-file-guid>
<last-sync-attempt-time></last-sync-attempt-time>
<last-sync-success-time></last-sync-success-time>
<last-sync-error-time></last-sync-error-time>
<last-sync-error-string></last-sync-error-string>
<consecutive-sync-failures></consecutive-sync-failures>
<user-credentials></user-credentials>
<runs-since-last-object-update></runs-since-last-object-update>
<runs-since-last-full-sync></runs-since-last-full-sync>
</synchronizer-state>
</doc>

======= Naming Context ========
0 - CN=Configuration,CN={FDE29...}
1 - CN=Schema,CN=Configuration,CN={FDE29...}
2 - DC=domestic,DC=mydomain,DC=com

========My Command Line======
adamsync /install localhost:389 Config.XML
adamsync /sync localhost:389 "dc=domestic,dc=mydomain,dc=com" /log -

======= Serveral Error Messages Appread ======================
Adamsync.exe v1.0 (5.2.3790.2075)

Establishing connection to target server localhost:389.

Saving Configuration File on DC=domestic,DC=mydomain,DC=com

Saved configuration file.

ADAMSync is querying for a writeable replica of
ad.domestic.mydomain.com.

Error: DCLocator call failed with error 1355. Attempting to bind
directly to string.

Establishing connection to source server
overdrive.domestic.mydomain.com:389.

Using file .\dam25.tmp as a store for deferred dn-references.

Populating the schema cache

Populating the well known objects cache

Starting synchronization run from dc=domestic,dc=mydomain,dc=com.

Starting DirSync Search with object mode security.

.
.
.





Processing Entry: Page 1, Frame 1, Entry 27, Count 1, USN 0

Processing source entry <guid=8feb3432f78a78409f90e8e1c56a1623>

Processing in-scope entry 8feb3432f78a78409f90e8e1c56a1623.

Will not synchronize objects
CN=S-1-5-4,CN=ForeignSecurityPrincipals,DC=domestic,DC=mydomain,DC=com
with object class foreignsecurityprincipal. Skipping object.

Unwilling to replicate the current object due to its object class.

Previous entry took 0 seconds (0, 0) to process

.
.
.



Processing Entry: Page 1, Frame 1, Entry 60, Count 1, USN 0

Processing source entry <guid=73cc9c37306b704ab7e16472b1027bd0>

Processing in-scope entry 73cc9c37306b704ab7e16472b1027bd0.

Adding target object CN=Asst Manager
\#VS,OU=VS,OU=Retail,DC=domestic,DC=mydomain,DC=com.

Adding attributes:

Unable to read attribute objectClass on CN=Asst Manager
\#VS,OU=VS,OU=Retail,DC=domestic,DC=mydomain,DC=com.

Saving Configuration File on DC=domestic,DC=mydomain,DC=com

Saved configuration file.

===================================

Not sure What else I need to do. Please help.

Thanks.



.



Relevant Pages

  • Re: Creating a Computer Object in ADAM
    ... I'm going to guess and say that the ADAM service account doesn't have the ... the name changed server and its partners to see status. ... Starting test: CrossRefValidation ... Running partition tests on: Schema ...
    (microsoft.public.windows.server.active_directory)
  • Re: Creating a Computer Object in ADAM
    ... the name changed server and its partners to see status. ... Source directory service address: ... I can't seem to get connected to my local instance of ADAM running ... Running partition tests on: Schema ...
    (microsoft.public.windows.server.active_directory)
  • Re: Creating a Computer Object in ADAM
    ... Using the ADAM Schema MMC Snap-In, I determined that the Schema Master ... Directory Server Diagnosis ...
    (microsoft.public.windows.server.active_directory)
  • Re: SMS 2003 SP1 Win2003 SP1 upgrade to SMS 2003 SP2 Schema issue.
    ... Systems Management Server cannot update the dNSHostName property for the ... used to publish fully qualified host names in Active Directory. ... latest version of the SMS Active Directory classes and attributes. ... Ensure the schema has been extended with the latest version of the ...
    (microsoft.public.sms.setup)
  • Re: Active Directory Schema Mismatch
    ... >particular Domain Controller install the Windows Server ... >Active Directory Replication Delayed When Indexed ... complaining about the active directory Schema has ...
    (microsoft.public.windows.server.active_directory)

Loading