MIM Event Broker Forum

Welcome to the community forum for MIM Event Broker.

Browse the knowledge base, ask questions directly to the product group, or leverage the community to get answers. Leave ideas for new features and vote for the features or bug fixes you want most.

0
Fixed

Operation lists configured for EvB version 3.2.1.3 fail on first run after upgrade to 4.0.0.0

Bob Bradley 7 years ago updated by anonymous 7 years ago 18

On running the EvB 4.0.0.0 scheduler for the first time for an upgraded 3.2.1.3 configuration, each operation with a MIM run profile began failing with the following error:

Operation faulted: Attempting to check for exports in non-existent management agent with id xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx - Please see the log viewer for more details. 
20170814,05:22:04,UNIFY MIM Event Broker,Operations,Error,"Operation Pending Export for Management Agent REDACTED with id REDACTED failed
in the operation list FIM Agent REDACTED with id REDACTED for the following reason. This is retry number 0:
Unify.Framework.UnifyConfigurationException: Attempting to check for exports in non-existent management agent with id REDACTED
   at Unify.Product.EventBroker.MIMAgent.ExportsPendingForManagementAgent(Guid managementAgentKey)
   at Unify.EventBroker.Agents.Audit.MIMAgentAuditingDecorator.ExportsPendingForManagementAgent(Guid managementAgentId)
   at Unify.Product.EventBroker.OutgoingPendingPlugIn.Check()
   at Unify.EventBroker.PlugIn.Audit.CheckOperationAuditingDecorator.Check()
   at Unify.Product.EventBroker.OperationListExecutorBase.RunCheck(ICheckOperationFactoryInformation checkOperation)",Normal
Answer
anonymous 7 years ago

Fixed from v4.0.1 onwards. For v4.0.0, please unzip Services.zip into the Services directory and restart the service.

0
Not a bug

Reference to unsecure cdn.userecho.com site

Bob Bradley 7 years ago updated by anonymous 7 years ago 4

When running the EvB 4.0.0.0 console for the first time in a secure environment, the IE 11 browser raises a dialog saying that http://cdn.userecho.com is untrusted - instead it should be referencing https://cdn.userecho.com

Answer
anonymous 7 years ago

The HTTP v HTTPS point is not relevant to the dialogue, it is simply whether the domain the script is loaded from is one trusted by the server. Even if we were to bundle the script with the installation, any web requests made to UNIFY Voice to search/submit issues would trigger the dialogue as well.

If you want to enable the widget you must add the domain (http://cdn.userecho.com or https://cdn.userecho.com) to the Trusted sites zone. If you do not trust the domain, simply click Close or add it to the Restricted sites zone to prevent the dialogue from showing each time.

0
Answered

What is a FIMAgentRefreshRequest and how is it scheduled?

Bob Bradley 7 years ago updated by anonymous 7 years ago 3

The Event Broker 3.2.1.3 service is logging the following every 2 hours, but I don't have a corresponding schedule configured so I am thinking it must be built-in (???):

20170810,23:54:23,UNIFY FIM Event Broker,Agent Engine,Information,Scheduled job to perform a FIMAgentRefreshRequest on agent FIM Agent succeeded.,Normal

The reason I ask is that every day at the same time (and ONLY at this time) I am getting the following shortly afterwards (which happens to be just before the log rolls over):

20170810,23:54:33,UNIFY FIM Event Broker,OpenLDAPTriggerPlugIn.ResultsCallback.Error,Error,"System.DirectoryServices.Protocols:
System.DirectoryServices.Protocols.DirectoryOperationException: The server cannot handle directory requests.
   at System.DirectoryServices.Protocols.LdapPartialResultsProcessor.GetPartialResults(LdapPartialAsyncResult asyncResult)
   at Unify.Product.EventBroker.OpenLDAPListenPlugIn.ResultsCallback(IAsyncResult result)",Normal ... 20170810,23:56:42,UNIFY FIM Event Broker,OpenLDAPTriggerPlugIn.ResultsCallback.Error,Error,"System.DirectoryServices.Protocols:
System.DirectoryServices.Protocols.LdapException: The LDAP server is unavailable.
   at System.DirectoryServices.Protocols.LdapPartialResultsProcessor.GetPartialResults(LdapPartialAsyncResult asyncResult)
   at Unify.Product.EventBroker.OpenLDAPListenPlugIn.ResultsCallback(IAsyncResult result)",Normal

Every day for as long as the log files are retained, I get exactly the same sequence at almost exactly the same timestamps.

This is confusing because the agents all appear to be working fine for all of the dependent operations, with no errors reported that I can see otherwise.

Answer
anonymous 7 years ago

Please try with MIM Event Broker v4. There were some improvements in the way the LDAP listen operation recycles.

0
Completed

The LDAP server is unavailable LdapException cannot be identified

Bob Bradley 7 years ago updated by anonymous 7 years ago 3

The following log entry (EvB service version 3.2.1.3) cannot be used to identify the faulting agent:

20170809,23:56:43,UNIFY FIM Event Broker,OpenLDAPTriggerPlugIn.ResultsCallback.Error,Error,"System.DirectoryServices.Protocols:
System.DirectoryServices.Protocols.LdapException: The LDAP server is unavailable.
   at System.DirectoryServices.Protocols.LdapPartialResultsProcessor.GetPartialResults(LdapPartialAsyncResult asyncResult)
   at Unify.Product.EventBroker.OpenLDAPListenPlugIn.ResultsCallback(IAsyncResult result)",Normal

Can the message please be enhanced to identify the agent and/or operation and/or operation list by GUID AND NAME (identification by guid alone creates more unnecessary work in troubleshooting)?

Answer
anonymous 7 years ago

Thanks for the feedback, Bob. I've created a backlog item to improve this error message.

0
Answered

If a task is queued, how long after the blocking task has finished executing should the queued task start?

Matthew Woolnough 7 years ago updated by anonymous 7 years ago 11

As per the subject, iIf a task is queued, how long after the blocking task has finished executing should the queued? I am seeing instances where the MIM MA Incoming Run Profile runs, blocks the export Run Profile, the Incoming Run Profile run finishes but the export never starts.

Answer
anonymous 7 years ago

Thanks, I've created an item in the backlog.

0
Answered

EVB 4.0 Issue with IDB Changes Operation

Richard Green 7 years ago updated by anonymous 7 years ago 2

Hi Gents,

Here's a new one - i'm having issues with the IDB Changes operation between EVB 4.0 and IDB 5.2

I have the default configuration.

Initially i was getting the following error:

Operation Check for changes in the External AD Events Adapter with id 331db65e-4d4d-48a0-b09f-a7247c7d3f15 failed in the operation list MIM - External AD Events MA - Incoming with id ddde4bd5-4173-419b-9388-92df3f10d705 for the following reason. This is retry number 0: System.InvalidOperationException: Could not find endpoint element with name 'IdentityBroker' and contract 'IChangesAvailableCollector' in the ServiceModel client configuration section. This might be because no configuration file was found for your application, or because no endpoint element matching this name could be found in the client element.
 at System.ServiceModel.Description.ConfigLoader.LoadChannelBehaviors(ServiceEndpoint serviceEndpoint, String configurationName)
 at System.ServiceModel.ChannelFactory.ApplyConfiguration(String configurationName, Configuration configuration)
 at System.ServiceModel.ChannelFactory.InitializeEndpoint(String configurationName, EndpointAddress address)
 at System.ServiceModel.ChannelFactory`1..ctor(String endpointConfigurationName, EndpointAddress remoteAddress)
 at Unify.Product.EventBroker.IdentityBroker50ChangesCommunicator.ChangesAvailable(Guid adapterId)
 at Unify.Product.EventBroker.IdentityBroker50ChangesPlugIn.Check()
 at Unify.EventBroker.PlugIn.Audit.CheckOperationAuditingDecorator.Check()
 at Unify.Product.EventBroker.OperationListExecutorBase.RunCheck(ICheckOperationFactoryInformation checkOperation)

So I added the following endpoint config in the service.event.exe.config:

<endpoint binding="basicHttpBinding" contract="IChangesAvailableCollector" bindingconfiguration="StreamingFileTransferServicesBinding" name="IdentityBroker"></endpoint>


Now, i'm getting the following:

Operation Check for changes in the External AD Events Adapter with id 331db65e-4d4d-48a0-b09f-a7247c7d3f15 failed in the operation list MIM - External AD Events MA - Incoming with id ddde4bd5-4173-419b-9388-92df3f10d705 for the following reason. This is retry number 0: System.ServiceModel.Security.MessageSecurityException: The HTTP request is unauthorized with client authentication scheme 'Anonymous'. The authentication header received from the server was 'Negotiate'. ---> System.Net.WebException: The remote server returned an error: (401) Unauthorized.

Not something i've seen before...


Answer
anonymous 7 years ago

I thought this had come up before (there's a matching ticket in VSO), but can't find it in UserEcho...

Please change the endpoint element to this:

<endpoint binding="basicHttpBinding" contract="IChangesAvailableCollector" bindingconfiguration="IdentityBroker4Binding" name="IdentityBroker" />

It'll be in the next release, not sure how it was missed. Thanks.

0
Fixed

EVB - IDB API Issue

Richard Green 7 years ago updated by anonymous 7 years ago 6

Hi Guys,

I'm currently having an issue communicating with the IDB API from Event Broker. Not sure if this is IDB or EVB.

I'm getting the following error trying to run an API operation:

Operation Full Import - DAMS Contact Connector with id a1508248-0161-46a0-a703-a1cad6cfc8ed failed in the operation list IDB - DAMS Contact - Full Import with id bae408b8-0b38-495f-a92a-4b1a8319f15b for the following reason. This is retry number 0: Unify.Product.EventBroker.RestAPIAgentUnexpectedStatusException: Response code NotFound doesn't match expected response code NoContent.
 at Unify.Product.EventBroker.RestAPIPlugIn.Execute()
 at Unify.EventBroker.PlugIn.Audit.OperationAuditingDecorator.Execute()
 at Unify.Product.EventBroker.OperationListExecutorBase.RunNextOperations(IEnumerator`1 operationEnumerator)

I have the following agent configured (Have tried IDB Port with no change):

Image 4432


And the following API config in IDB:

Image 4433


IDB v5.2.0 R2

EVB v4.0.0 R1

IDB and EVB are on the same box, and i can hit the swagger page for the rest API.

Nothing applicable in the IDB logs or Event Logs (even enabled diagnostic logging in IDB)

Answer
anonymous 7 years ago

Richard, the patch provided by Curtis should be removed when you upgrade to v5.2.0 RTM - as the URL format was fixed to be in line with the format in v5.1.

0
Won't fix

EVB 4.0 Assembly Load Issue

Richard Green 7 years ago updated by anonymous 7 years ago 7

Hi Gents,

I'm having an issue with event broker at the moment:

Image 4419
Image 4421
Stack trace from Event Log:

Event code: 3005 
Event message: An unhandled exception has occurred. 
Event time: 14/07/2017 10:36:36 AM 
Event time (UTC): 14/07/2017 12:36:36 AM 
Event ID: a852df8e00cb40e4a34b31600dea2fca 
Event sequence: 2 
Event occurrence: 1 
Event detail code: 0 
 
Application information: 
    Application domain: b7cf9837-1-131444661896298544 
    Trust level: Full 
    Application Virtual Path: / 
    Application Path: C:\Program Files\UNIFY Solutions\Event Broker\Web\ 
    Machine name: REDACTED
 
Process information: 
    Process ID: 5640 
    Process name: Unify.Service.Event.exe 
    Account name: REDACTED
 
Exception information: 
    Exception type: TypeInitializationException 
    Exception message: The type initializer for 'Unify.EventBroker.Web.EventServiceClientInstance' threw an exception.
   at Unify.EventBroker.Web.MvcApplication..ctor() in C:\agent\_work\23\s\Source\Unify.EventBroker.Web\Global.asax.cs:line 33
   at ASP.global_asax..ctor()
Could not load file or assembly 'Unify.Framework.Collections, Version=5.2.0.0, Culture=neutral, PublicKeyToken=84b9288cb2633de4' or one of its dependencies. The system cannot find the file specified.
   at Unify.Framework.TimingGenerator..ctor()
   at Unify.Framework.Logging.LoggingEngineClient..ctor(ILoggingEngineCollector collector) in C:\agent\_work\1\s\Source\Logging\Unify.Framework.Logging.Engine.Shared\LoggingEngineClient.cs:line 25
   at Unify.EventBroker.Web.EventServiceClientInstance.CreateComponent(EndpointAddress serviceEndpointAddress) in C:\agent\_work\23\s\Source\Unify.EventBroker.Web\Extensions\EventServiceClientInstance.cs:line 53
   at Unify.EventBroker.Web.EventServiceClientInstance..cctor() in C:\agent\_work\23\s\Source\Unify.EventBroker.Web\Extensions\EventServiceClientInstance.cs:line 32
 
 
Request information: 
    Request URL: http://localhost:8081/ 
    Request path: / 
    User host address: 127.0.0.1 
    User:  
    Is authenticated: False 
    Authentication Type:  
    Thread account name: REDACTED
 
Thread information: 
    Thread ID: 236 
    Thread account name: REDACTED
    Is impersonating: False 
    Stack trace:    at Unify.EventBroker.Web.MvcApplication..ctor() in C:\agent\_work\23\s\Source\Unify.EventBroker.Web\Global.asax.cs:line 33
   at ASP.global_asax..ctor()
 
 
Custom event details:

Not sure what's going on here. This worked previously as i was able to apply the license, however this is the first i have used it since.

I've restarted the browser, service and server with no change.

Service account is a local admin, so there should not be any permissions issues.

Running the latest version (4.0) 

Running on windows server 2016.

I note also that Unify.Framework.Collections.dll is present in the web\bin dir, and it is version 5.2.1.0 (different from the 5.2.0.0 in the error message, although i expect that's just the display...)


Cheers

Richard

Answer
anonymous 7 years ago

It is the recommended approach and the embedded web server has been deprecated (as per http://voice.unifysolutions.net/topics/2721-configuring-mim-event-broker-for-use-with-embedded-web-server/).

We're hoping IIS fixes the issue because it means that there's no further work to be done. If, however, the issue remains, we'll have to do some analysis. This issue has come up before, but was either fixed by IIS, or just stops without explanation.

0
Answered

Configuring IIS Security in 4.0

Matthew Woolnough 7 years ago updated by anonymous 7 years ago 3

The EvB IIS security page contains the following example:

<? xml version="1.0" encoding="utf-8" ?>
<ConnectEngine>
    <roleAuthorizations>
        <roleAuthorization role="Unify.Event.Service.Read">
            <anonymous action="Allow" />
        </roleAuthorization>
        <roleAuthorization role="Unify.Event.User">
            <group action="Allow" groupName="Users"/>
        <roleAuthorization>
        <roleAuthorization role="Unify.Event.Administrator">
            <user action="Allow" userName="ExampleAdministrator_01" />
        </roleAuthorization>
        <roleAuthorization role="Unify.Event.Agents.Write">
            <user action="Deny" userName="UserWithDeniedAccess_03" />
        </roleAuthorization>
    </roleAuthorizations>
</ConnectEngine>

However, the Unify.Product.EventBroker.EventBrokerPlugInKey.extensibility.config.xml file contains:

<?xml version="1.0" encoding="utf-8" ?> <EventEngine changeId="{025F5A02-200E-4BA3-B74F-72623FAD3731}" />


Has the XML structure changed in 4.0?


Answer
anonymous 7 years ago

In the web.config, update owin:AutomaticAppStartup = true and AuthorizeSetting = OpenId

Then add the following:

  • ida:ClientId = your client id
  • ida:AADInstance = the id for you instance of AAD
  • ida:TenantId = the id for your tenant
  • ida:PostLogoutRedirectUri = the redirect on sign-out url
As Matthew mentioned, the page will be updated to reflect this.
0
Answered

Event Broker Errors (DEV)

Tomasz Zukowski 7 years ago updated by anonymous 7 years ago 6

We are experiencing the following Event Broker errors in a customers DEV environment:

EB: v3.2.1 Revision #3



Operation faulted: The HTTP service located at http://wlgmimsynprod01:59990/IdentityBroker/ChangesAvailable.svc is unavailable. This could be because the service is too busy or because no endpoint was found listening at the specified address. Please ensure that the address is correct and try accessing the service again later. - Please see the log viewer for more details.

 

Management Agent: Active Directory Privileged User MA - Run Profile: Delta Import and Delta Sync

Operation faulted: Operation for management agent with id ffebd54f-016c-4acd-80ac-3b0e62e8fbe5 with name Delta Import and Delta Sync failed with result call-failure:0x8023063D - Please see the log viewer for more details.


 


Operation fee47c32-7550-4f72-a7d4-918dc2aa2e4e failed in operation list with id f1e97e4c-2a12-4b37-9cf5-02a5225f1678 for the following reason. This is retry number 0: System.ServiceModel.ServerTooBusyException: The HTTP service located at http://wlgmimsynprod01:59990/IdentityBroker/ChangesAvailable.svc is unavailable. This could be because the service is too busy or because no endpoint was found listening at the specified address. Please ensure that the address is correct and try accessing the service again later. ---> System.Net.WebException: The remote server returned an error: (503) Server Unavailable.
at System.Net.HttpWebRequest.GetResponse()
at System.ServiceModel.Channels.HttpChannelFactory`1.HttpRequestChannel.HttpChannelRequest.WaitForReply(TimeSpan timeout)
--- End of inner exception stack trace ---

Server stack trace:
at System.ServiceModel.Channels.HttpChannelUtilities.ProcessGetResponseWebException(WebException webException, HttpWebRequest request, HttpAbortReason abortReason)
at System.ServiceModel.Channels.HttpChannelFactory`1.HttpRequestChannel.HttpChannelRequest.WaitForReply(TimeSpan timeout)
at System.ServiceModel.Channels.RequestChannel.Request(Message message, TimeSpan timeout)
at System.ServiceModel.Dispatcher.RequestChannelBinder.Request(Message message, TimeSpan timeout)
at System.ServiceModel.Channels.ServiceChannel.Call(String action, Boolean oneway, ProxyOperationRuntime operation, Object[] ins, Object[] outs, TimeSpan timeout)
at System.ServiceModel.Channels.ServiceChannelProxy.InvokeService(IMethodCallMessage methodCall, ProxyOperationRuntime operation)
at System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage message)

Exception rethrown at [0]:
at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg)
at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type)
at Unify.Product.EventBroker.IdentityBrokerChanges.IChangesAvailableCollector.ChangesAvailable(Guid adapterId)
at Unify.Product.EventBroker.IdentityBroker41ChangesCommunicator.ChangesAvailable(Guid adapterId)
at Unify.Product.EventBroker.IdentityBroker41ChangesPlugIn.Check()
at Unify.Product.EventBroker.OperationListExecutorBase.RunCheck(ICheckOperationFactoryInformation checkOperation)


Thank you


Answer
anonymous 7 years ago

No response from Aneesh.