Synchronization rules issue
Hi Folks,
Is is possible to recover from this without deleting and re-creating the sync rule? This is seen when viewing the synchronization rules.
3cb7539a-5693-432a-bc33-c7cc32150033(The referenced Management Agent has been deleted. Please delete this Synchronization Rule, update the external system field or re-import the deleted Management Agent)
thanks, Frank
January 7th, 2011 10:17pm
Have you tried to export the synchronization rule by using PowerShell yet?
Cheers,
Markus
Markus Vilcinskas, Knowledge Engineer, Microsoft Corporation
Free Windows Admin Tool Kit Click here and download it now
January 8th, 2011 10:22am
HI Markus,
No have not...can give some guidance/details on that?
thanks, Frank
January 8th, 2011 12:15pm
Try the script code below:
001
002
003
004
005
006
007
008
009
010
011
012
013
014
015
#--------------------------------------------------------------------------------------------------------------------
if(@(get-pssnapin | where-object {$_.Name -eq "FIMAutomation"} ).count -eq 0) {add-pssnapin FIMAutomation}
$data = export-fimconfig -uri http://localhost:5725/resourcemanagementservice -customconfig ("/SynchronizationRule")
if($data -eq $null) {throw "The
are no objects with this object type configured on your FIM server"}
$data | convertfrom-fimresource -file "c:\sr.xml"
Write-Host "`nCommand completed successfully"
#--------------------------------------------------------------------------------------------------------------------
trap
{
$exMessage = $_.Exception.Message
write-host "`nError: " $exMessage "`n" -foregroundcolor white -backgroundcolor darkred
Exit
}
#--------------------------------------------------------------------------------------------------------------------
Cheers,
Markus
Markus Vilcinskas, Knowledge Engineer, Microsoft Corporation
Free Windows Admin Tool Kit Click here and download it now
January 8th, 2011 2:28pm
Try the script code below:
001
002
003
004
005
006
007
008
009
010
011
012
013
014
015
#--------------------------------------------------------------------------------------------------------------------
if(@(get-pssnapin | where-object {$_.Name -eq "FIMAutomation"} ).count -eq 0) {add-pssnapin FIMAutomation}
$data = export-fimconfig -uri http://localhost:5725/resourcemanagementservice -customconfig ("/SynchronizationRule")
if($data -eq $null) {throw "The
are no objects with this object type configured on your FIM server"}
$data | convertfrom-fimresource -file "c:\sr.xml"
Write-Host "`nCommand completed successfully"
#--------------------------------------------------------------------------------------------------------------------
trap
{
$exMessage = $_.Exception.Message
write-host "`nError: " $exMessage "`n" -foregroundcolor white -backgroundcolor darkred
Exit
}
#--------------------------------------------------------------------------------------------------------------------
Cheers,
Markus
Markus Vilcinskas, Knowledge Engineer, Microsoft Corporation
January 8th, 2011 2:28pm
Try the script code below:
#--------------------------------------------------------------------------------------------------------------------
if(@(get-pssnapin |
where-object {$_.Name
-eq
"FIMAutomation"} ).count
-eq
0) {add-pssnapin
FIMAutomation}
$data
= export-fimconfig -uri http://localhost:5725/resourcemanagementservice -customconfig ("/SynchronizationRule")
if($data
-eq
$null) {throw
"The are no objects with this object type configured on your FIM server"}
$data | convertfrom-fimresource
-file
"c:\sr.xml"
Write-Host
"`nCommand completed successfully"
#--------------------------------------------------------------------------------------------------------------------
trap
{
$exMessage
= $_.Exception.Message
write-host
"`nError:
" $exMessage
"`n"
-foregroundcolor
white
-backgroundcolor
darkred
Exit
}
#--------------------------------------------------------------------------------------------------------------------
Cheers,
Markus
Markus Vilcinskas, Knowledge Engineer, Microsoft Corporation
Free Windows Admin Tool Kit Click here and download it now
January 8th, 2011 2:29pm
Hi Markus,
Here is what got..
Error: The are no objects with this object type configured on your FIM server
-Frank
January 8th, 2011 6:54pm
Hi Markus,
Here is what got..
Error: The are no objects with this object type configured on your FIM server
-Frank
Free Windows Admin Tool Kit Click here and download it now
January 8th, 2011 6:54pm
What happened to your server? Sounds like you have objects in the FIM MA that refer to a Management Agent that no longer exists.
Based on the output of Markus' script it looks like the Synchronization Rules in the FIM Service have also been whacked.
CraigMartin Edgile, Inc. http://identitytrench.com
January 10th, 2011 1:24pm
What happened to your server? Sounds like you have objects in the FIM MA that refer to a Management Agent that no longer exists.
Based on the output of Markus' script it looks like the Synchronization Rules in the FIM Service have also been whacked.
CraigMartin Edgile, Inc. http://identitytrench.com
Free Windows Admin Tool Kit Click here and download it now
January 10th, 2011 1:24pm
Where you somehow editing the FIM DB directly in SQL Server?Paul Loonen (Avanade) | MCM: Directory 2008 | MVP: ILM
January 10th, 2011 4:39pm
Ok looks like there was a permissons issue which when was running PS script...got that sorted and now am able to get the SR.XML file with data output now.
Free Windows Admin Tool Kit Click here and download it now
January 11th, 2011 2:01pm
I have the same error. I had to rebuild my MA to point to a new database, and when I run this script it completes fine. the portal has the same error.
(The referenced Management Agent has been deleted. Please delete this Synchronization Rule, update the external system field or re-import the deleted Management Agent)
Do I have to rebuild my Sync rule in the portal?
Thanks,
Dan
May 27th, 2011 12:27pm
In short - yes, you need to create a new Sync Rule to point to the new MA. Not sure if you can modify the SR but assume that is some serious off-roading.
The sync rule object in the FIM Service points to the ma-data object in the FIM Service. If you look through the Requests in the FIM Service, you'll probably see that an ma-data object got deleted then added. the new ma-data object probably has
a new guid, which invalidates the Sync Rule.
CraigMartin Edgile, Inc. http://identitytrench.com
Free Windows Admin Tool Kit Click here and download it now
May 27th, 2011 1:08pm
Thanks Craig. Then this leads me to my next question, How do you move from Dev to Test to Prod. Do you have to create every sync rule, each time for each
environment? I've restored the entire solution thru sql backups and MA's, I still would have to recreate some sync rules.
thanks,
May 29th, 2011 12:16pm
The advised way to move from dev -> test -> prod us using the scripts/methods described in the
Configuration Migration Deployment Guide
They work pretty well.http://setspn.blogspot.com
Free Windows Admin Tool Kit Click here and download it now
May 29th, 2011 3:50pm
Thanks Thomas.
May 29th, 2011 5:28pm