1IM 8.1 DPRMemberShipAction and Frozen ADS Group Updates

I have 225 row in DPRMemberShipAction.  Two ADSGroups are not being updated

Error Message: 

ErrorMessages = (2018-04-13 13:01:52.200) [1777018] Error executing synchronization project (Active Directory Domain (DC=WCU,DC=EDU))'s workflow (Provisioning).
[1777124] Error executing projection step (group) of projection configuration (Provisioning (Provisioning)).
[1777219] Error executing synchronization step (group)!
[1777239] The mapping rule (Members OUT) was unable to execute synchronization between system objects (Student) and (CN=Student,OU=Managed,OU=Groups,DC=wcu,DC=edu) successfully!
[1777182] Error resolving references of property (vrtMembersAllObj@ADSGroup) for system object (Student)!
[System.AggregateException] One or more errors occurred.
[810029] Object of type Active Directory user accounts does not exist in database or you do not have the relevant viewing permissions.
at VI.Projector.JobComponent.ProjectorComponent._AdHocProjection()
at VI.Projector.Database.ProjectorExecutor.Project(ISession session, IProjectionConfiguration configuration, ProjectionOption options, ISystemObject adHocObject, CancellationToken cancellationToken)
at VI.Projector.Projection.Extensions.Execute(IProjectorEngine engine, IProjectionConfiguration configuration, ProjectionOption options, ISystemObject adHocObject, CancellationToken cancellationToken)
at System.Threading.Tasks.Task.Wait(Int32 millisecondsTimeout, CancellationToken cancellationToken)
at System.Threading.Tasks.Task.ThrowIfExceptional(Boolean includeTaskCanceledExceptions)
---- Start of Inner Exception ----
at VI.Projector.Projection.ProjectorEngine.<ExecuteAsync>d__3.MoveNext()
---- Start of Inner Exception ----
at VI.Projector.Projection.ProjectorEngine.<ExecuteAsync>d__3.MoveNext()
---- Start of Inner Exception ----
at VI.Projector.Projection.ProjectorEngine.<ExecuteAsync>d__3.MoveNext()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
--- End of stack trace from previous location where exception was thrown ---
at VI.Projector.Projection.ProjectionStrategy.<ExecuteStepAsync>d__2.MoveNext()
---- Start of Inner Exception ----
at VI.Projector.Projection.ProjectionStrategy.<ExecuteStepAsync>d__2.MoveNext()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
--- End of stack trace from previous location where exception was thrown ---
at VI.Projector.Projection.ProjectionStrategyBase.<OnExecuteStepAsync>d__2.MoveNext()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
--- End of stack trace from previous location where exception was thrown ---
at VI.Projector.Projection.ProjectionStrategyBase.<_ProcessIntersectionSetAsync>d__17.MoveNext()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
--- End of stack trace from previous location where exception was thrown ---
at VI.Projector.Projection.ProjectionStrategyBase.<_ProcessMappingOfSystemObjectPairsAsync>d__21.MoveNext()
at VI.Projector.Mapping.Extensions.MapObjects(ISystemMap map, IEnumerable`1 pairs, SystemMappingOptions options)
at System.Threading.Tasks.Parallel.ForEach[TSource](IEnumerable`1 source, ParallelOptions parallelOptions, Action`1 body)
at System.Threading.Tasks.Parallel.ForEachWorker[TSource,TLocal](IEnumerable`1 source, ParallelOptions parallelOptions, Action`1 body, Action`2 bodyWithState, Action`3 bodyWithStateAndIndex, Func`4 bodyWithStateAndLocal, Func`5 bodyWithEverything, Func`1 localInit, Action`1 localFinally)
at System.Threading.Tasks.Parallel.ForWorker[TLocal](Int32 fromInclusive, Int32 toExclusive, ParallelOptions parallelOptions, Action`1 body, Action`2 bodyWithState, Func`4 bodyWithLocal, Func`1 localInit, Action`1 localFinally)
at System.Threading.Tasks.Task.Wait(Int32 millisecondsTimeout, CancellationToken cancellationToken)
at System.Threading.Tasks.Task.ThrowIfExceptional(Boolean includeTaskCanceledExceptions)
---- Start of Inner Exception ----
at System.Threading.Tasks.Task.<>c__DisplayClass176_0.<ExecuteSelfReplicating>b__0(Object )
at System.Threading.Tasks.Task.InnerInvokeWithArg(Task childTask)
at System.Threading.Tasks.Parallel.<>c__DisplayClass17_0`1.<ForWorker>b__1()
at VI.Projector.Mapping.Extensions.<>c__DisplayClass6_0.<MapObjects>b__0(SystemObjectMatchingPair pair)
at VI.Projector.Mapping.SystemMappingRule.ApplyMapping(ISystemObject leftObject, ISystemObject rightObject, SystemMappingOptions options)
---- Start of Inner Exception ----
at VI.Projector.Mapping.SystemMappingRule.ApplyMapping(ISystemObject leftObject, ISystemObject rightObject, SystemMappingOptions options)
at VI.Projector.Mapping.Rules.MembersRule.OnApplyMapping(ISystemObject leftObject, ISystemObject rightObject, SystemMappingOptions options)
at VI.Projector.Mapping.Rules.MembersRule._ApplyPatch(ISystemObjectPatch patch, ISystemObject targetObject, ISchemaPropertyPatchSupport sourceProperty, ISchemaProperty targetProperty, SystemMappingOptions options, ProjectorProcessContextProxy processContext)
at VI.Projector.Schema.Properties.MNSchemaTypeToMembersProperty._GetPatchValues(ISystemObjectPatch patch, Object[] values)
at VI.Projector.Connection.SystemConnection.ResolveReference(ISystemObject systemObject, ISchemaProperty referenceProperty, IEnumerable`1 keyValues, ResolveReferenceOptions option)
---- Start of Inner Exception ----
at VI.Projector.Connection.SystemConnection.ResolveReference(ISystemObject systemObject, ISchemaProperty referenceProperty, IEnumerable`1 keyValues, ResolveReferenceOptions option)
at VI.Projector.Connection.Connectors.DistributionConnector.ResolveReference(ResolveReferenceRequest request)
at VI.Projector.Connection.SystemConnector.ResolveReference(ResolveReferenceRequest request)
at VI.Projector.Database.DatabaseConnector.OnResolveObjectsByReference(ResolveObjectsByReferenceRequest request)
at System.Threading.Tasks.Parallel.ForEach[TSource](IEnumerable`1 source, ParallelOptions parallelOptions, Action`1 body)
at System.Threading.Tasks.Parallel.ForEachWorker[TSource,TLocal](IEnumerable`1 source, ParallelOptions parallelOptions, Action`1 body, Action`2 bodyWithState, Action`3 bodyWithStateAndIndex, Func`4 bodyWithStateAndLocal, Func`5 bodyWithEverything, Func`1 localInit, Action`1 localFinally)
at System.Threading.Tasks.Parallel.ForWorker[TLocal](Int32 fromInclusive, Int32 toExclusive, ParallelOptions parallelOptions, Action`1 body, Action`2 bodyWithState, Func`4 bodyWithLocal, Func`1 localInit, Action`1 localFinally)
at System.Threading.Tasks.Task.Wait(Int32 millisecondsTimeout, CancellationToken cancellationToken)
at System.Threading.Tasks.Task.ThrowIfExceptional(Boolean includeTaskCanceledExceptions)
---- Start of Inner Exception ----
at System.Threading.Tasks.Task.<>c__DisplayClass176_0.<ExecuteSelfReplicating>b__0(Object )
at System.Threading.Tasks.Task.InnerInvokeWithArg(Task childTask)
at System.Threading.Tasks.Parallel.<>c__DisplayClass17_0`1.<ForWorker>b__1()
at VI.Projector.Database.DatabaseConnector.<>c__DisplayClass32_0.<OnResolveObjectsByReference>b__0(Object value)
at VI.Base.SyncActions.Do[T](Func`1 function)
at System.Threading.Tasks.Task`1.GetResultCore(Boolean waitCompletionNotification)
---- Start of Inner Exception ----
at VI.DB.Entities.PermissionsEntitySource.<GetAsync>d__14.MoveNext()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
--- End of stack trace from previous location where exception was thrown ---
at VI.DB.Entities.EntitySourceImpl.<GetAsync>d__11.MoveNext()
[2134002] Error running provisioning.
[2134028] The data of member property (vrtMembersSID@ADSGroup) was not transferred. Possible reasons are configuration issues or an invalid object state (Student).
at StdioProcessor.StdioProcessor._Execute(Job job)
at VI.Projector.JobComponent.ProjectorComponent.Activate(String task)
at VI.Projector.JobComponent.ProjectorComponent._AdHocProjection()
---- Start of Inner Exception ----
at VI.Projector.JobComponent.ProjectorComponent._AdHocProjection()

  • Could you describe the scenario with a little more details please? I assume you got the errors during a sycn from AD to OneIM?

    Did you check the AD group "Student" in your OneIM database? Does it exist? Is it marked as outstanding?

    As you system can not be version 8.1 as mentioned, what version are you using?
  • I saw this before when there is a DPRMemberSipAction to update a member of a group (delete, add), but the AD account/group was already removed.

    You can check by the following statement if the CN_Account, CN_Group is empty.

    select
    aa.cn CN_Account,
    ag.cn CN_Group,
    dmsa.* from DPRMemberShipAction dmsa
    left outer join ADSGroup ag on dmsa.ObjectKeyBase = ag.XObjectKey
    left join ADSAccount aa on aa.XObjectKey = dmsa.ObjectKeyMember
    left outer join ADSAccountInADSGroup aig on aig.XObjectKey = dmsa.ObjectKeyMN
    where (aa.cn is null or ag.cn is null)
    order by ag.cn, aa.cn
  • In reply to Andre.Vietmeier:

    Running the query did return 6 empty (Account and Group) with an operation of DEL. 12 objects empty (Account) with operation of ADD. -Thoughts?

  • In reply to Markus Weiss-Ehlers:

    It does exist not marked as outstanding ~17,000 accounts in this group. Version 8.0
  • In reply to Andre.Vietmeier:

    Do you have a recommendation about pushing these through or clearing out DPRMemberShipAction?
  • In reply to jbright:

    Ran a sync job on the groups. The 2 groups I'm getting the frozen jobs on get the following error. The object has pending M:N Provisioning tasks (Locked Objects)
  • In reply to jbright:

    Hi Josh,

    When we see the message, "The object has pending M:N provisioning tasks", it's normally because there is an existing provisioning task for the group in the job queue.

    Check the table DPRMemberShipAction. The XObjectKey of your groups should appear in the property ObjectKeyBase.

    Have you deleted any jobs from the job queue?

    Based on the initial error reported, "[810029] Object of type Active Directory user accounts does not exist in database or you do not have the relevant viewing permissions." there are membership actions containing entries for non existing objects.

    And this seems to be what the query Andre provided above is reporting.

    How many entries are there in DPRMembershipAction total?

    Trevor