Bugs
0
Not a bug
Office Connector Export fails with ma-extension-error - The dimage indicates an add attrib operation, but the attrib already exists on the object
Bob Bradley 7 years ago
in UNIFYBroker/Microsoft Identity Manager
•
updated by anonymous 7 years ago •
5
Using
- Identity Broker Service 5.0.5
- Identity Broker for Office Enterprise 5.0.1.5
- Identity Broker for FIM 5.1.0 DEV
The following 2 entries appeared this morning in the Application event log on an IMPORT from the License Assignments MA:
Log Name: Application?Source: FIMSynchronizationService?Date: 27/01/2017 9:09:34 AM?Event ID: 6301?Task Category: Server?Level: Error?Keywords: Classic?User: N/A?Computer: AUHBSMIMWP0001.corp.qbe.com?Description:?The server encountered an unexpected error in the synchronization engine:? ? "BAIL: MMS(28072): ..\tripleholo.cpp(2413): 0x8023030a (The dimage indicates an add attrib operation, but the attrib already exists on the object.)?BAIL: MMS(28072): ..\tower.cpp(1313): 0x8023030a (The dimage indicates an add attrib operation, but the attrib already exists on the object.)?BAIL: MMS(28072): ..\tower.cpp(12030): 0x8023030a (The dimage indicates an add attrib operation, but the attrib already exists on the object.)?<delta operation="update" dn="UID=GRS-GeneralInformation@us.qbe.com,OU=AADUsers,DC=IdentityBroker">? <anchor encoding="base64">iAAAAHUAaQBkAD0AZwByAHMALQBnAGUAbgBlAHIAYQBsAGkAbgBmAG8AcgBtAGEAdABpAG8AbgBAAHUAcwAuAHEAYgBlAC4AYwBvAG0ALABvAHUAPQBhAGEAZAB1AHMAZQByAHMALABkAGMAPQBpAGQAZQBuAHQAaQB0AHkAYgByAG8AawBlAHIAAAA=</anchor>? <primary-objectclass>Licensee</primary-objectclass>? <objectclass>? <oc-value>Licensee</oc-value>? </objectclass>? <attr name="AADUserLicensingMail" operation="add" type="string" multivalued="false">? <value>GRS-GeneralInformation@us.qbe.com</value>? </attr>? <attr name="AADUserLicensingUserPrincipalName" operation="replace" type="string" multivalued="false">? <value>GRS-GeneralInformation@us.qbe.com</value>? </attr>? <attr name="accountEnabled" operation="replace" type="boolean" multivalued="false">? <value>true</value>? </attr>?</delta>?<tower><unapplied-export><delta operation="none" dn="UID=GRS-GeneralInformation@us.qbe.com,OU=AADUsers,DC=IdentityBroker"><anchor encoding="base64">iAAAAHUAaQBkAD0AZwByAHMALQBnAGUAbgBlAHIAYQBsAGkAbgBmAG8AcgBtAGEAdABpAG8AbgBAAHUAcwAuAHEAYgBlAC4AYwBvAG0ALABvAHUAPQBhAGEAZAB1AHMAZQByAHMALABkAGMAPQBpAGQAZQBuAHQAaQB0AHkAYgByAG8AawBlAHIAAAA=</anchor></delta></unapplied-export><escrowed-export><delta operation="none" dn="UID=GRS-GeneralInformation@us.qbe.com,OU=AADUsers,DC=IdentityBroker"><anchor encoding="base64">iAAAAHUAaQBkAD0AZwByAHMALQBnAGUAbgBlAHIAYQBsAGkAbgBmAG8AcgBtAGEAdABpAG8AbgBAAHUAcwAuAHEAYgBlAC4AYwBvAG0ALABvAHUAPQBhAGEAZAB1AHMAZQByAHMALABkAGMAPQBpAGQAZQBuAHQAaQB0AHkAYgByAG8AawBlAHIAAAA=</anchor></delta></escrowed-export><unconfirmed-export><delta operation="none" dn="UID=GRS-GeneralInformation@us.qbe.com,OU=AADUsers,DC=IdentityBroker"><anchor encoding="base64">iAAAAHUAaQBkAD0AZwByAHMALQBnAGUAbgBlAHIAYQBsAGkAbgBmAG8AcgBtAGEAdABpAG8AbgBAAHUAcwAuAHEAYgBlAC4AYwBvAG0ALABvAHUAPQBhAGEAZAB1AHMAZQByAHMALABkAGMAPQBpAGQAZQBuAHQAaQB0AHkAYgByAG8AawBlAHIAAAA=</anchor></delta></unconfirmed-export><pending-import><delta operation="add" dn="UID=GRS-GeneralInformation@us.qbe.com,OU=AADUsers,DC=IdentityBroker"><anchor encoding="base64">iAAAAHUAaQBkAD0AZwByAHMALQBnAGUAbgBlAHIAYQBsAGkAbgBmAG8AcgBtAGEAdABpAG8AbgBAAHUAcwAuAHEAYgBlAC4AYwBvAG0ALABvAHUAPQBhAGEAZAB1AHMAZQByAHMALABkAGMAPQBpAGQAZQBuAHQAaQB0AHkAYgByAG8AawBlAHIAAAA=</anchor><primary-objectclass>Licensee</primary-objectclass><objectclass><oc-value>Licensee</oc-value></objectclass><attr name="AADUserLicensingMail" type="string" multivalued="false"><value>GRS-GeneralInformation@us.qbe.com</value></attr><attr name="AADUserLicensingUserPrincipalName" type="string" multivalued="false"><value>GRS-GeneralInformation@us.qbe.com</value></attr><attr name="accountEnabled" type="boolean" multivalued="false"><value>true</value></attr><attr name="dirSyncEnabled" type="boolean" multivalued="false"><value>true</value></attr><attr name="displayName" type="string" multivalued="false"><value>US-BOX-GRS-GeneralInformation</value></attr><attr name="immutableId" type="string" multivalued="false"><value>CSE8gkANXU2N9pcjqwbMgQ==</value></attr><attr name="mailNickname" type="string" multivalued="false"><value>GRS-GeneralInformati</value></attr><attr name="objectClass" type="string" multivalued="true"><value>Licensee</value></attr></delta></pending-import><synchronized-hologram></synchronized-hologram><anchor encoding="base64">iAAAAHUAaQBkAD0AZwByAHMALQBnAGUAbgBlAHIAYQBsAGkAbgBmAG8AcgBtAGEAdABpAG8AbgBAAHUAcwAuAHEAYgBlAC4AYwBvAG0ALABvAHUAPQBhAGEAZAB1AHMAZQByAHMALABkAGMAPQBpAGQAZQBuAHQAaQB0AHkAYgByAG8AawBlAHIAAAA=</anchor><connector>0</connector><connector-state>normal</connector-state><seen-by-import>1</seen-by-import><rebuild-in-progress>0</rebuild-in-progress><obsoletion>0</obsoletion><need-full-sync>0</need-full-sync><placeholder-parent>0</placeholder-parent><placeholder-link>0</placeholder-link><placeholder-delete>0</placeholder-delete><pending>1</pending><ref-retry>0</ref-retry><rename-retry>0</rename-retry><sequencers><current><batch-number>0</batch-number><sequence-number>0</sequence-number></current><unapplied><batch-number>0</batch-number><sequence-number>0</sequence-number></unapplied><original><batch-number>0</batch-number><sequence-number>0</sequence-number></original></sequencers><import-delta-operation>add</import-delta-operation><export-delta-operation>none</export-delta-operation></tower>BAIL: MMS(28072): d:\bt\48066\sources\dev\sync\server\sqlstore\csobj.h(1256): 0x8023030a (The dimage indicates an add attrib operation, but the attrib already exists on the object.)?BAIL: MMS(28072): ..\syncstage.cpp(2071): 0x8023030a (The dimage indicates an add attrib operation, but the attrib already exists on the object.)?BAIL: MMS(28072): ..\syncstage.cpp(665): 0x8023030a (The dimage indicates an add attrib operation, but the attrib already exists on the object.)?Forefront Identity Manager 4.3.2195.0"?Event Xml:?<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">? <System>? <Provider Name="FIMSynchronizationService" />? <EventID Qualifiers="49152">6301</EventID>? <Level>2</Level>? <Task>3</Task>? <Keywords>0x80000000000000</Keywords>? <TimeCreated SystemTime="2017-01-26T22:09:34.000000000Z" />? <EventRecordID>5451582</EventRecordID>? <Channel>Application</Channel>? <Computer>AUHBSMIMWP0001.corp.qbe.com</Computer>? <Security />? </System>? <EventData>? <Data>BAIL: MMS(28072): ..\tripleholo.cpp(2413): 0x8023030a (The dimage indicates an add attrib operation, but the attrib already exists on the object.)?BAIL: MMS(28072): ..\tower.cpp(1313): 0x8023030a (The dimage indicates an add attrib operation, but the attrib already exists on the object.)?BAIL: MMS(28072): ..\tower.cpp(12030): 0x8023030a (The dimage indicates an add attrib operation, but the attrib already exists on the object.)?<delta operation="update" dn="UID=GRS-GeneralInformation@us.qbe.com,OU=AADUsers,DC=IdentityBroker">? <anchor encoding="base64">iAAAAHUAaQBkAD0AZwByAHMALQBnAGUAbgBlAHIAYQBsAGkAbgBmAG8AcgBtAGEAdABpAG8AbgBAAHUAcwAuAHEAYgBlAC4AYwBvAG0ALABvAHUAPQBhAGEAZAB1AHMAZQByAHMALABkAGMAPQBpAGQAZQBuAHQAaQB0AHkAYgByAG8AawBlAHIAAAA=</anchor>? <primary-objectclass>Licensee</primary-objectclass>? <objectclass>? <oc-value>Licensee</oc-value>? </objectclass>? <attr name="AADUserLicensingMail" operation="add" type="string" multivalued="false">? <value>GRS-GeneralInformation@us.qbe.com</value>? </attr>? <attr name="AADUserLicensingUserPrincipalName" operation="replace" type="string" multivalued="false">? <value>GRS-GeneralInformation@us.qbe.com</value>? </attr>? <attr name="accountEnabled" operation="replace" type="boolean" multivalued="false">? <value>true</value>? </attr>?</delta>?<tower><unapplied-export><delta operation="none" dn="UID=GRS-GeneralInformation@us.qbe.com,OU=AADUsers,DC=IdentityBroker"><anchor encoding="base64">iAAAAHUAaQBkAD0AZwByAHMALQBnAGUAbgBlAHIAYQBsAGkAbgBmAG8AcgBtAGEAdABpAG8AbgBAAHUAcwAuAHEAYgBlAC4AYwBvAG0ALABvAHUAPQBhAGEAZAB1AHMAZQByAHMALABkAGMAPQBpAGQAZQBuAHQAaQB0AHkAYgByAG8AawBlAHIAAAA=</anchor></delta></unapplied-export><escrowed-export><delta operation="none" dn="UID=GRS-GeneralInformation@us.qbe.com,OU=AADUsers,DC=IdentityBroker"><anchor encoding="base64">iAAAAHUAaQBkAD0AZwByAHMALQBnAGUAbgBlAHIAYQBsAGkAbgBmAG8AcgBtAGEAdABpAG8AbgBAAHUAcwAuAHEAYgBlAC4AYwBvAG0ALABvAHUAPQBhAGEAZAB1AHMAZQByAHMALABkAGMAPQBpAGQAZQBuAHQAaQB0AHkAYgByAG8AawBlAHIAAAA=</anchor></delta></escrowed-export><unconfirmed-export><delta operation="none" dn="UID=GRS-GeneralInformation@us.qbe.com,OU=AADUsers,DC=IdentityBroker"><anchor encoding="base64">iAAAAHUAaQBkAD0AZwByAHMALQBnAGUAbgBlAHIAYQBsAGkAbgBmAG8AcgBtAGEAdABpAG8AbgBAAHUAcwAuAHEAYgBlAC4AYwBvAG0ALABvAHUAPQBhAGEAZAB1AHMAZQByAHMALABkAGMAPQBpAGQAZQBuAHQAaQB0AHkAYgByAG8AawBlAHIAAAA=</anchor></delta></unconfirmed-export><pending-import><delta operation="add" dn="UID=GRS-GeneralInformation@us.qbe.com,OU=AADUsers,DC=IdentityBroker"><anchor encoding="base64">iAAAAHUAaQBkAD0AZwByAHMALQBnAGUAbgBlAHIAYQBsAGkAbgBmAG8AcgBtAGEAdABpAG8AbgBAAHUAcwAuAHEAYgBlAC4AYwBvAG0ALABvAHUAPQBhAGEAZAB1AHMAZQByAHMALABkAGMAPQBpAGQAZQBuAHQAaQB0AHkAYgByAG8AawBlAHIAAAA=</anchor><primary-objectclass>Licensee</primary-objectclass><objectclass><oc-value>Licensee</oc-value></objectclass><attr name="AADUserLicensingMail" type="string" multivalued="false"><value>GRS-GeneralInformation@us.qbe.com</value></attr><attr name="AADUserLicensingUserPrincipalName" type="string" multivalued="false"><value>GRS-GeneralInformation@us.qbe.com</value></attr><attr name="accountEnabled" type="boolean" multivalued="false"><value>true</value></attr><attr name="dirSyncEnabled" type="boolean" multivalued="false"><value>true</value></attr><attr name="displayName" type="string" multivalued="false"><value>US-BOX-GRS-GeneralInformation</value></attr><attr name="immutableId" type="string" multivalued="false"><value>CSE8gkANXU2N9pcjqwbMgQ==</value></attr><attr name="mailNickname" type="string" multivalued="false"><value>GRS-GeneralInformati</value></attr><attr name="objectClass" type="string" multivalued="true"><value>Licensee</value></attr></delta></pending-import><synchronized-hologram></synchronized-hologram><anchor encoding="base64">iAAAAHUAaQBkAD0AZwByAHMALQBnAGUAbgBlAHIAYQBsAGkAbgBmAG8AcgBtAGEAdABpAG8AbgBAAHUAcwAuAHEAYgBlAC4AYwBvAG0ALABvAHUAPQBhAGEAZAB1AHMAZQByAHMALABkAGMAPQBpAGQAZQBuAHQAaQB0AHkAYgByAG8AawBlAHIAAAA=</anchor><connector>0</connector><connector-state>normal</connector-state><seen-by-import>1</seen-by-import><rebuild-in-progress>0</rebuild-in-progress><obsoletion>0</obsoletion><need-full-sync>0</need-full-sync><placeholder-parent>0</placeholder-parent><placeholder-link>0</placeholder-link><placeholder-delete>0</placeholder-delete><pending>1</pending><ref-retry>0</ref-retry><rename-retry>0</rename-retry><sequencers><current><batch-number>0</batch-number><sequence-number>0</sequence-number></current><unapplied><batch-number>0</batch-number><sequence-number>0</sequence-number></unapplied><original><batch-number>0</batch-number><sequence-number>0</sequence-number></original></sequencers><import-delta-operation>add</import-delta-operation><export-delta-operation>none</export-delta-operation></tower>BAIL: MMS(28072): d:\bt\48066\sources\dev\sync\server\sqlstore\csobj.h(1256): 0x8023030a (The dimage indicates an add attrib operation, but the attrib already exists on the object.)?BAIL: MMS(28072): ..\syncstage.cpp(2071): 0x8023030a (The dimage indicates an add attrib operation, but the attrib already exists on the object.)?BAIL: MMS(28072): ..\syncstage.cpp(665): 0x8023030a (The dimage indicates an add attrib operation, but the attrib already exists on the object.)?Forefront Identity Manager 4.3.2195.0</Data>? </EventData>?</Event> Log Name: Application?Source: FIMSynchronizationService?Date: 27/01/2017 9:09:34 AM?Event ID: 6301?Task Category: Server?Level: Error?Keywords: Classic?User: N/A?Computer: AUHBSMIMWP0001.corp.qbe.com?Description:?The server encountered an unexpected error in the synchronization engine:? ? "BAIL: MMS(28072): ..\tripleholo.cpp(2413): 0x8023030a (The dimage indicates an add attrib operation, but the attrib already exists on the object.)?BAIL: MMS(28072): ..\tower.cpp(1313): 0x8023030a (The dimage indicates an add attrib operation, but the attrib already exists on the object.)?BAIL: MMS(28072): ..\tower.cpp(12030): 0x8023030a (The dimage indicates an add attrib operation, but the attrib already exists on the object.)?<delta operation="update" dn="UID=GRS-AS-Impairment@us.qbe.com,OU=AADUsers,DC=IdentityBroker">? <anchor encoding="base64">fgAAAHUAaQBkAD0AZwByAHMALQBhAHMALQBpAG0AcABhAGkAcgBtAGUAbgB0AEAAdQBzAC4AcQBiAGUALgBjAG8AbQAsAG8AdQA9AGEAYQBkAHUAcwBlAHIAcwAsAGQAYwA9AGkAZABlAG4AdABpAHQAeQBiAHIAbwBrAGUAcgAAAA==</anchor>? <primary-objectclass>Licensee</primary-objectclass>? <objectclass>? <oc-value>Licensee</oc-value>? </objectclass>? <attr name="AADUserLicensingMail" operation="add" type="string" multivalued="false">? <value>GRS-AS-Impairment@us.qbe.com</value>? </attr>? <attr name="AADUserLicensingUserPrincipalName" operation="replace" type="string" multivalued="false">? <value>GRS-AS-Impairment@us.qbe.com</value>? </attr>? <attr name="accountEnabled" operation="replace" type="boolean" multivalued="false">? <value>true</value>? </attr>?</delta>?<tower><unapplied-export><delta operation="none" dn="UID=GRS-AS-Impairment@us.qbe.com,OU=AADUsers,DC=IdentityBroker"><anchor encoding="base64">fgAAAHUAaQBkAD0AZwByAHMALQBhAHMALQBpAG0AcABhAGkAcgBtAGUAbgB0AEAAdQBzAC4AcQBiAGUALgBjAG8AbQAsAG8AdQA9AGEAYQBkAHUAcwBlAHIAcwAsAGQAYwA9AGkAZABlAG4AdABpAHQAeQBiAHIAbwBrAGUAcgAAAA==</anchor></delta></unapplied-export><escrowed-export><delta operation="none" dn="UID=GRS-AS-Impairment@us.qbe.com,OU=AADUsers,DC=IdentityBroker"><anchor encoding="base64">fgAAAHUAaQBkAD0AZwByAHMALQBhAHMALQBpAG0AcABhAGkAcgBtAGUAbgB0AEAAdQBzAC4AcQBiAGUALgBjAG8AbQAsAG8AdQA9AGEAYQBkAHUAcwBlAHIAcwAsAGQAYwA9AGkAZABlAG4AdABpAHQAeQBiAHIAbwBrAGUAcgAAAA==</anchor></delta></escrowed-export><unconfirmed-export><delta operation="none" dn="UID=GRS-AS-Impairment@us.qbe.com,OU=AADUsers,DC=IdentityBroker"><anchor encoding="base64">fgAAAHUAaQBkAD0AZwByAHMALQBhAHMALQBpAG0AcABhAGkAcgBtAGUAbgB0AEAAdQBzAC4AcQBiAGUALgBjAG8AbQAsAG8AdQA9AGEAYQBkAHUAcwBlAHIAcwAsAGQAYwA9AGkAZABlAG4AdABpAHQAeQBiAHIAbwBrAGUAcgAAAA==</anchor></delta></unconfirmed-export><pending-import><delta operation="add" dn="UID=GRS-AS-Impairment@us.qbe.com,OU=AADUsers,DC=IdentityBroker"><anchor encoding="base64">fgAAAHUAaQBkAD0AZwByAHMALQBhAHMALQBpAG0AcABhAGkAcgBtAGUAbgB0AEAAdQBzAC4AcQBiAGUALgBjAG8AbQAsAG8AdQA9AGEAYQBkAHUAcwBlAHIAcwAsAGQAYwA9AGkAZABlAG4AdABpAHQAeQBiAHIAbwBrAGUAcgAAAA==</anchor><primary-objectclass>Licensee</primary-objectclass><objectclass><oc-value>Licensee</oc-value></objectclass><attr name="AADUserLicensingMail" type="string" multivalued="false"><value>GRS-AS-Impairment@us.qbe.com</value></attr><attr name="AADUserLicensingUserPrincipalName" type="string" multivalued="false"><value>GRS-AS-Impairment@us.qbe.com</value></attr><attr name="accountEnabled" type="boolean" multivalued="false"><value>true</value></attr><attr name="dirSyncEnabled" type="boolean" multivalued="false"><value>true</value></attr><attr name="displayName" type="string" multivalued="false"><value>US-BOX GRS-AS-Impairment</value></attr><attr name="immutableId" type="string" multivalued="false"><value>QfKC/JeKAUm1iIbIsMJivg==</value></attr><attr name="mailNickname" type="string" multivalued="false"><value>GRS-AS-Impairment</value></attr><attr name="objectClass" type="string" multivalued="true"><value>Licensee</value></attr></delta></pending-import><synchronized-hologram></synchronized-hologram><anchor encoding="base64">fgAAAHUAaQBkAD0AZwByAHMALQBhAHMALQBpAG0AcABhAGkAcgBtAGUAbgB0AEAAdQBzAC4AcQBiAGUALgBjAG8AbQAsAG8AdQA9AGEAYQBkAHUAcwBlAHIAcwAsAGQAYwA9AGkAZABlAG4AdABpAHQAeQBiAHIAbwBrAGUAcgAAAA==</anchor><connector>0</connector><connector-state>normal</connector-state><seen-by-import>1</seen-by-import><rebuild-in-progress>0</rebuild-in-progress><obsoletion>0</obsoletion><need-full-sync>0</need-full-sync><placeholder-parent>0</placeholder-parent><placeholder-link>0</placeholder-link><placeholder-delete>0</placeholder-delete><pending>1</pending><ref-retry>0</ref-retry><rename-retry>0</rename-retry><sequencers><current><batch-number>0</batch-number><sequence-number>0</sequence-number></current><unapplied><batch-number>0</batch-number><sequence-number>0</sequence-number></unapplied><original><batch-number>0</batch-number><sequence-number>0</sequence-number></original></sequencers><import-delta-operation>add</import-delta-operation><export-delta-operation>none</export-delta-operation></tower>BAIL: MMS(28072): d:\bt\48066\sources\dev\sync\server\sqlstore\csobj.h(1256): 0x8023030a (The dimage indicates an add attrib operation, but the attrib already exists on the object.)?BAIL: MMS(28072): ..\syncstage.cpp(2071): 0x8023030a (The dimage indicates an add attrib operation, but the attrib already exists on the object.)?BAIL: MMS(28072): ..\syncstage.cpp(665): 0x8023030a (The dimage indicates an add attrib operation, but the attrib already exists on the object.)?Forefront Identity Manager 4.3.2195.0"?Event Xml:?<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">? <System>? <Provider Name="FIMSynchronizationService" />? <EventID Qualifiers="49152">6301</EventID>? <Level>2</Level>? <Task>3</Task>? <Keywords>0x80000000000000</Keywords>? <TimeCreated SystemTime="2017-01-26T22:09:34.000000000Z" />? <EventRecordID>5451581</EventRecordID>? <Channel>Application</Channel>? <Computer>AUHBSMIMWP0001.corp.qbe.com</Computer>? <Security />? </System>? <EventData>? <Data>BAIL: MMS(28072): ..\tripleholo.cpp(2413): 0x8023030a (The dimage indicates an add attrib operation, but the attrib already exists on the object.)?BAIL: MMS(28072): ..\tower.cpp(1313): 0x8023030a (The dimage indicates an add attrib operation, but the attrib already exists on the object.)?BAIL: MMS(28072): ..\tower.cpp(12030): 0x8023030a (The dimage indicates an add attrib operation, but the attrib already exists on the object.)?<delta operation="update" dn="UID=GRS-AS-Impairment@us.qbe.com,OU=AADUsers,DC=IdentityBroker">? <anchor encoding="base64">fgAAAHUAaQBkAD0AZwByAHMALQBhAHMALQBpAG0AcABhAGkAcgBtAGUAbgB0AEAAdQBzAC4AcQBiAGUALgBjAG8AbQAsAG8AdQA9AGEAYQBkAHUAcwBlAHIAcwAsAGQAYwA9AGkAZABlAG4AdABpAHQAeQBiAHIAbwBrAGUAcgAAAA==</anchor>? <primary-objectclass>Licensee</primary-objectclass>? <objectclass>? <oc-value>Licensee</oc-value>? </objectclass>? <attr name="AADUserLicensingMail" operation="add" type="string" multivalued="false">? <value>GRS-AS-Impairment@us.qbe.com</value>? </attr>? <attr name="AADUserLicensingUserPrincipalName" operation="replace" type="string" multivalued="false">? <value>GRS-AS-Impairment@us.qbe.com</value>? </attr>? <attr name="accountEnabled" operation="replace" type="boolean" multivalued="false">? <value>true</value>? </attr>?</delta>?<tower><unapplied-export><delta operation="none" dn="UID=GRS-AS-Impairment@us.qbe.com,OU=AADUsers,DC=IdentityBroker"><anchor encoding="base64">fgAAAHUAaQBkAD0AZwByAHMALQBhAHMALQBpAG0AcABhAGkAcgBtAGUAbgB0AEAAdQBzAC4AcQBiAGUALgBjAG8AbQAsAG8AdQA9AGEAYQBkAHUAcwBlAHIAcwAsAGQAYwA9AGkAZABlAG4AdABpAHQAeQBiAHIAbwBrAGUAcgAAAA==</anchor></delta></unapplied-export><escrowed-export><delta operation="none" dn="UID=GRS-AS-Impairment@us.qbe.com,OU=AADUsers,DC=IdentityBroker"><anchor encoding="base64">fgAAAHUAaQBkAD0AZwByAHMALQBhAHMALQBpAG0AcABhAGkAcgBtAGUAbgB0AEAAdQBzAC4AcQBiAGUALgBjAG8AbQAsAG8AdQA9AGEAYQBkAHUAcwBlAHIAcwAsAGQAYwA9AGkAZABlAG4AdABpAHQAeQBiAHIAbwBrAGUAcgAAAA==</anchor></delta></escrowed-export><unconfirmed-export><delta operation="none" dn="UID=GRS-AS-Impairment@us.qbe.com,OU=AADUsers,DC=IdentityBroker"><anchor encoding="base64">fgAAAHUAaQBkAD0AZwByAHMALQBhAHMALQBpAG0AcABhAGkAcgBtAGUAbgB0AEAAdQBzAC4AcQBiAGUALgBjAG8AbQAsAG8AdQA9AGEAYQBkAHUAcwBlAHIAcwAsAGQAYwA9AGkAZABlAG4AdABpAHQAeQBiAHIAbwBrAGUAcgAAAA==</anchor></delta></unconfirmed-export><pending-import><delta operation="add" dn="UID=GRS-AS-Impairment@us.qbe.com,OU=AADUsers,DC=IdentityBroker"><anchor encoding="base64">fgAAAHUAaQBkAD0AZwByAHMALQBhAHMALQBpAG0AcABhAGkAcgBtAGUAbgB0AEAAdQBzAC4AcQBiAGUALgBjAG8AbQAsAG8AdQA9AGEAYQBkAHUAcwBlAHIAcwAsAGQAYwA9AGkAZABlAG4AdABpAHQAeQBiAHIAbwBrAGUAcgAAAA==</anchor><primary-objectclass>Licensee</primary-objectclass><objectclass><oc-value>Licensee</oc-value></objectclass><attr name="AADUserLicensingMail" type="string" multivalued="false"><value>GRS-AS-Impairment@us.qbe.com</value></attr><attr name="AADUserLicensingUserPrincipalName" type="string" multivalued="false"><value>GRS-AS-Impairment@us.qbe.com</value></attr><attr name="accountEnabled" type="boolean" multivalued="false"><value>true</value></attr><attr name="dirSyncEnabled" type="boolean" multivalued="false"><value>true</value></attr><attr name="displayName" type="string" multivalued="false"><value>US-BOX GRS-AS-Impairment</value></attr><attr name="immutableId" type="string" multivalued="false"><value>QfKC/JeKAUm1iIbIsMJivg==</value></attr><attr name="mailNickname" type="string" multivalued="false"><value>GRS-AS-Impairment</value></attr><attr name="objectClass" type="string" multivalued="true"><value>Licensee</value></attr></delta></pending-import><synchronized-hologram></synchronized-hologram><anchor encoding="base64">fgAAAHUAaQBkAD0AZwByAHMALQBhAHMALQBpAG0AcABhAGkAcgBtAGUAbgB0AEAAdQBzAC4AcQBiAGUALgBjAG8AbQAsAG8AdQA9AGEAYQBkAHUAcwBlAHIAcwAsAGQAYwA9AGkAZABlAG4AdABpAHQAeQBiAHIAbwBrAGUAcgAAAA==</anchor><connector>0</connector><connector-state>normal</connector-state><seen-by-import>1</seen-by-import><rebuild-in-progress>0</rebuild-in-progress><obsoletion>0</obsoletion><need-full-sync>0</need-full-sync><placeholder-parent>0</placeholder-parent><placeholder-link>0</placeholder-link><placeholder-delete>0</placeholder-delete><pending>1</pending><ref-retry>0</ref-retry><rename-retry>0</rename-retry><sequencers><current><batch-number>0</batch-number><sequence-number>0</sequence-number></current><unapplied><batch-number>0</batch-number><sequence-number>0</sequence-number></unapplied><original><batch-number>0</batch-number><sequence-number>0</sequence-number></original></sequencers><import-delta-operation>add</import-delta-operation><export-delta-operation>none</export-delta-operation></tower>BAIL: MMS(28072): d:\bt\48066\sources\dev\sync\server\sqlstore\csobj.h(1256): 0x8023030a (The dimage indicates an add attrib operation, but the attrib already exists on the object.)?BAIL: MMS(28072): ..\syncstage.cpp(2071): 0x8023030a (The dimage indicates an add attrib operation, but the attrib already exists on the object.)?BAIL: MMS(28072): ..\syncstage.cpp(665): 0x8023030a (The dimage indicates an add attrib operation, but the attrib already exists on the object.)?Forefront Identity Manager 4.3.2195.0</Data>? </EventData>?</Event>
The delta import in MIM itself shows no errors on the Operations tab for the DI run profile, but the error was thrown to the event log at the exact time the DI operation completed.
The DI shows the 2 identities in the above XML error text in a delete/add scenario (3 adds and 2 deletes - where the 2 deletes appear as renamed user objects) as follows:
- UID=GRS-AS-Impairment@QBE.onmicrosoft.com => UID=GRS-AS-Impairment@us.qbe.com
- UID=GRS-GeneralImformati@QBE.onmicrosoft.com => UID=GRS-GeneralImformatiion@us.qbe.com
Both of the above renames look legitimate scenarios due to the way the AAD object is provisioned and subsequently an O365 mailbox is created as a part of the license assignment process. The cloud UPN was chosen as anchor for the FIM MA in lieu of the immutableId (Base64 of AD guid) for readibility reasons, and hence the delete/add scenario is not undesirable in this case. However there shouldn't be an exception being thrown here.
There are 27 instances of this error in the past 3 days - however there is no obvious impact on the MA in MIM (objects do not show as being in error) - hence I am assigning this a low priority.
Cross reference to JIRA issue QBE-73.
Answer
Under review
The error from MIM appears to be that the delta is adding a value to a single valued field that already contains a value. Are the delta's incorrect, if so how?
Yes the AADUserLicensingMail attribute is supposed to be a single value, and yes there probably already was a value there - so the "add" should have been a "replace". Checking the connector confirmed there is only a single value there too.
I'm not sure how you'd be able to check, but wouldn't it matter what the state of the attribute was before the update was seen?
Yeah I can't check, but what I do know is that this was a delete/add (the CS object in MIM shows that the JOIN occurred at the end of this sync cycle (and the old CS object was deleted at the same time). So by rights everything should have been an add in this case ... but MIM seems to process the object OK regardless apart from throwing the exception (as if it was a warning).
I think this scenario is specifically when the primary SMTP address is changed - what I don't understand is why the AADUserLicensingUserPrincipalName operation shows as a replace, and the AADUserLicensingMail operation an add. Looking at the 46K objects in the CS, only half of them actually have a value in the AADUserLicensingMail property, but all have a AADUserLicensingUserPrincipalName value (as you would expect). I also can't correlate those with licenses and those without to the presence of a value here - they don't line up at all. The MIM CS declares the attribute in the schema but does not use it ... so this is purely a CS integrity issue (the AADUserLicensingMail attribute is neither used in the DN, nor is it mapped in MIM). Therefore something about the LDAP record MIM is processing is obviously unexpected.
I've just checked the other errors and found they are not isolated to just the AAD adapter - here's one from the AD adapter:
Log Name: Application Source: FIMSynchronizationService Date: 26/01/2017 7:42:22 PM Event ID: 6301 Task Category: Server Level: Error Keywords: Classic User: N/A Computer: AUHBSMIMWP0001.corp.qbe.com Description: The server encountered an unexpected error in the synchronization engine: "BAIL: MMS(15196): ..\tripleholo.cpp(2735): 0x8023030a (The dimage indicates an add attrib operation, but the attrib already exists on the object.) BAIL: MMS(15196): ..\tower.cpp(1313): 0x8023030a (The dimage indicates an add attrib operation, but the attrib already exists on the object.) BAIL: MMS(15196): ..\tower.cpp(12030): 0x8023030a (The dimage indicates an add attrib operation, but the attrib already exists on the object.) <delta operation="update" dn="CN=200856@corp.qbe.com,OU=LicensedUsers,DC=IdentityBroker"> <anchor encoding="base64">dAAAAGMAbgA9ADIAMAAwADgANQA2AEAAYwBvAHIAcAAuAHEAYgBlAC4AYwBvAG0ALABvAHUAPQBsAGkAYwBlAG4AcwBlAGQAdQBzAGUAcgBzACwAZABjAD0AaQBkAGUAbgB0AGkAdAB5AGIAcgBvAGsAZQByAAAA</anchor> <primary-objectclass>ADUser</primary-objectclass> <objectclass> <oc-value>ADUser</oc-value> </objectclass> <attr name="mail" operation="add" type="string" multivalued="false"> <value>Betsy.Lee@qbe.com.my</value> </attr> </delta> <tower><unapplied-export><delta operation="none" dn="CN=200856@corp.qbe.com,OU=LicensedUsers,DC=IdentityBroker"><anchor encoding="base64">dAAAAGMAbgA9ADIAMAAwADgANQA2AEAAYwBvAHIAcAAuAHEAYgBlAC4AYwBvAG0ALABvAHUAPQBsAGkAYwBlAG4AcwBlAGQAdQBzAGUAcgBzACwAZABjAD0AaQBkAGUAbgB0AGkAdAB5AGIAcgBvAGsAZQByAAAA</anchor></delta></unapplied-export><escrowed-export><delta operation="none" dn="CN=200856@corp.qbe.com,OU=LicensedUsers,DC=IdentityBroker"><anchor encoding="base64">dAAAAGMAbgA9ADIAMAAwADgANQA2AEAAYwBvAHIAcAAuAHEAYgBlAC4AYwBvAG0ALABvAHUAPQBsAGkAYwBlAG4AcwBlAGQAdQBzAGUAcgBzACwAZABjAD0AaQBkAGUAbgB0AGkAdAB5AGIAcgBvAGsAZQByAAAA</anchor></delta></escrowed-export><unconfirmed-export><delta operation="none" dn="CN=200856@corp.qbe.com,OU=LicensedUsers,DC=IdentityBroker"><anchor encoding="base64">dAAAAGMAbgA9ADIAMAAwADgANQA2AEAAYwBvAHIAcAAuAHEAYgBlAC4AYwBvAG0ALABvAHUAPQBsAGkAYwBlAG4AcwBlAGQAdQBzAGUAcgBzACwAZABjAD0AaQBkAGUAbgB0AGkAdAB5AGIAcgBvAGsAZQByAAAA</anchor></delta></unconfirmed-export><pending-import><delta operation="update" dn="CN=200856@corp.qbe.com,OU=LicensedUsers,DC=IdentityBroker"><anchor encoding="base64">dAAAAGMAbgA9ADIAMAAwADgANQA2AEAAYwBvAHIAcAAuAHEAYgBlAC4AYwBvAG0ALABvAHUAPQBsAGkAYwBlAG4AcwBlAGQAdQBzAGUAcgBzACwAZABjAD0AaQBkAGUAbgB0AGkAdAB5AGIAcgBvAGsAZQByAAAA</anchor><objectclass><oc-value>ADUser</oc-value></objectclass></delta></pending-import><synchronized-hologram><entry dn="CN=200856@corp.qbe.com,OU=LicensedUsers,DC=IdentityBroker"><anchor encoding="base64">dAAAAGMAbgA9ADIAMAAwADgANQA2AEAAYwBvAHIAcAAuAHEAYgBlAC4AYwBvAG0ALABvAHUAPQBsAGkAYwBlAG4AcwBlAGQAdQBzAGUAcgBzACwAZABjAD0AaQBkAGUAbgB0AGkAdAB5AGIAcgBvAGsAZQByAAAA</anchor><primary-objectclass>ADUser</primary-objectclass><objectclass><oc-value>ADUser</oc-value></objectclass><dn-attr name="AssignedLicenseEntitlements" multivalued="true"><dn-value><dn>CN=POWER_BI_STANDARD</dn></dn-value><dn-value><dn>CN=ENTERPRISEPACK:MCOSTANDARD\;EXCHANGE_S_ENTERPRISE</dn></dn-value></dn-attr><attr name="entryUUID" type="string" multivalued="false"><value>d015db9d-0e2f-4d6c-8228-c5b2484a6681</value></attr><attr name="extensionAttribute12" type="string" multivalued="false"><value>HzeymFdOokiHVvwmvi0PfA==</value></attr><attr name="extensionAttribute13" type="string" multivalued="false"><value>Betsy.Lee@qbe.com.my</value></attr><attr name="extensionAttribute14" type="string" multivalued="false"><value>AO-AU</value></attr><attr name="mail" type="string" multivalued="false"><value>Betsy.Lee@qbe.com.my</value></attr><attr name="objectClass" type="string" multivalued="true"><value>ADUser</value></attr><attr name="userAccountControl" type="integer" multivalued="false"><value>0x202</value></attr><attr name="userPrincipalName" type="string" multivalued="false"><value>200856@corp.qbe.com</value></attr></entry></synchronized-hologram><anchor encoding="base64">dAAAAGMAbgA9ADIAMAAwADgANQA2AEAAYwBvAHIAcAAuAHEAYgBlAC4AYwBvAG0ALABvAHUAPQBsAGkAYwBlAG4AcwBlAGQAdQBzAGUAcgBzACwAZABjAD0AaQBkAGUAbgB0AGkAdAB5AGIAcgBvAGsAZQByAAAA</anchor><connector>1</connector><connector-state>normal</connector-state><seen-by-import>1</seen-by-import><rebuild-in-progress>0</rebuild-in-progress><obsoletion>0</obsoletion><need-full-sync>0</need-full-sync><placeholder-parent>0</placeholder-parent><placeholder-link>0</placeholder-link><placeholder-delete>0</placeholder-delete><pending>0</pending><ref-retry>0</ref-retry><rename-retry>0</rename-retry><sequencers><current><batch-number>0</batch-number><sequence-number>0</sequence-number></current><unapplied><batch-number>0</batch-number><sequence-number>0</sequence-number></unapplied><original><batch-number>0</batch-number><sequence-number>0</sequence-number></original></sequencers><import-delta-operation>none</import-delta-operation><export-delta-operation>none</export-delta-operation></tower>BAIL: MMS(15196): d:\bt\48066\sources\dev\sync\server\sqlstore\csobj.h(1256): 0x8023030a (The dimage indicates an add attrib operation, but the attrib already exists on the object.) BAIL: MMS(15196): ..\syncstage.cpp(2071): 0x8023030a (The dimage indicates an add attrib operation, but the attrib already exists on the object.) BAIL: MMS(15196): ..\syncstage.cpp(665): 0x8023030a (The dimage indicates an add attrib operation, but the attrib already exists on the object.) Forefront Identity Manager 4.3.2195.0" Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="FIMSynchronizationService" /> <EventID Qualifiers="49152">6301</EventID> <Level>2</Level> <Task>3</Task> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2017-01-26T08:42:22.000000000Z" /> <EventRecordID>5441405</EventRecordID> <Channel>Application</Channel> <Computer>AUHBSMIMWP0001.corp.qbe.com</Computer> <Security /> </System> <EventData> <Data>BAIL: MMS(15196): ..\tripleholo.cpp(2735): 0x8023030a (The dimage indicates an add attrib operation, but the attrib already exists on the object.) BAIL: MMS(15196): ..\tower.cpp(1313): 0x8023030a (The dimage indicates an add attrib operation, but the attrib already exists on the object.) BAIL: MMS(15196): ..\tower.cpp(12030): 0x8023030a (The dimage indicates an add attrib operation, but the attrib already exists on the object.) <delta operation="update" dn="CN=200856@corp.qbe.com,OU=LicensedUsers,DC=IdentityBroker"> <anchor encoding="base64">dAAAAGMAbgA9ADIAMAAwADgANQA2AEAAYwBvAHIAcAAuAHEAYgBlAC4AYwBvAG0ALABvAHUAPQBsAGkAYwBlAG4AcwBlAGQAdQBzAGUAcgBzACwAZABjAD0AaQBkAGUAbgB0AGkAdAB5AGIAcgBvAGsAZQByAAAA</anchor> <primary-objectclass>ADUser</primary-objectclass> <objectclass> <oc-value>ADUser</oc-value> </objectclass> <attr name="mail" operation="add" type="string" multivalued="false"> <value>Betsy.Lee@qbe.com.my</value> </attr> </delta> <tower><unapplied-export><delta operation="none" dn="CN=200856@corp.qbe.com,OU=LicensedUsers,DC=IdentityBroker"><anchor encoding="base64">dAAAAGMAbgA9ADIAMAAwADgANQA2AEAAYwBvAHIAcAAuAHEAYgBlAC4AYwBvAG0ALABvAHUAPQBsAGkAYwBlAG4AcwBlAGQAdQBzAGUAcgBzACwAZABjAD0AaQBkAGUAbgB0AGkAdAB5AGIAcgBvAGsAZQByAAAA</anchor></delta></unapplied-export><escrowed-export><delta operation="none" dn="CN=200856@corp.qbe.com,OU=LicensedUsers,DC=IdentityBroker"><anchor encoding="base64">dAAAAGMAbgA9ADIAMAAwADgANQA2AEAAYwBvAHIAcAAuAHEAYgBlAC4AYwBvAG0ALABvAHUAPQBsAGkAYwBlAG4AcwBlAGQAdQBzAGUAcgBzACwAZABjAD0AaQBkAGUAbgB0AGkAdAB5AGIAcgBvAGsAZQByAAAA</anchor></delta></escrowed-export><unconfirmed-export><delta operation="none" dn="CN=200856@corp.qbe.com,OU=LicensedUsers,DC=IdentityBroker"><anchor encoding="base64">dAAAAGMAbgA9ADIAMAAwADgANQA2AEAAYwBvAHIAcAAuAHEAYgBlAC4AYwBvAG0ALABvAHUAPQBsAGkAYwBlAG4AcwBlAGQAdQBzAGUAcgBzACwAZABjAD0AaQBkAGUAbgB0AGkAdAB5AGIAcgBvAGsAZQByAAAA</anchor></delta></unconfirmed-export><pending-import><delta operation="update" dn="CN=200856@corp.qbe.com,OU=LicensedUsers,DC=IdentityBroker"><anchor encoding="base64">dAAAAGMAbgA9ADIAMAAwADgANQA2AEAAYwBvAHIAcAAuAHEAYgBlAC4AYwBvAG0ALABvAHUAPQBsAGkAYwBlAG4AcwBlAGQAdQBzAGUAcgBzACwAZABjAD0AaQBkAGUAbgB0AGkAdAB5AGIAcgBvAGsAZQByAAAA</anchor><objectclass><oc-value>ADUser</oc-value></objectclass></delta></pending-import><synchronized-hologram><entry dn="CN=200856@corp.qbe.com,OU=LicensedUsers,DC=IdentityBroker"><anchor encoding="base64">dAAAAGMAbgA9ADIAMAAwADgANQA2AEAAYwBvAHIAcAAuAHEAYgBlAC4AYwBvAG0ALABvAHUAPQBsAGkAYwBlAG4AcwBlAGQAdQBzAGUAcgBzACwAZABjAD0AaQBkAGUAbgB0AGkAdAB5AGIAcgBvAGsAZQByAAAA</anchor><primary-objectclass>ADUser</primary-objectclass><objectclass><oc-value>ADUser</oc-value></objectclass><dn-attr name="AssignedLicenseEntitlements" multivalued="true"><dn-value><dn>CN=POWER_BI_STANDARD</dn></dn-value><dn-value><dn>CN=ENTERPRISEPACK:MCOSTANDARD\;EXCHANGE_S_ENTERPRISE</dn></dn-value></dn-attr><attr name="entryUUID" type="string" multivalued="false"><value>d015db9d-0e2f-4d6c-8228-c5b2484a6681</value></attr><attr name="extensionAttribute12" type="string" multivalued="false"><value>HzeymFdOokiHVvwmvi0PfA==</value></attr><attr name="extensionAttribute13" type="string" multivalued="false"><value>Betsy.Lee@qbe.com.my</value></attr><attr name="extensionAttribute14" type="string" multivalued="false"><value>AO-AU</value></attr><attr name="mail" type="string" multivalued="false"><value>Betsy.Lee@qbe.com.my</value></attr><attr name="objectClass" type="string" multivalued="true"><value>ADUser</value></attr><attr name="userAccountControl" type="integer" multivalued="false"><value>0x202</value></attr><attr name="userPrincipalName" type="string" multivalued="false"><value>200856@corp.qbe.com</value></attr></entry></synchronized-hologram><anchor encoding="base64">dAAAAGMAbgA9ADIAMAAwADgANQA2AEAAYwBvAHIAcAAuAHEAYgBlAC4AYwBvAG0ALABvAHUAPQBsAGkAYwBlAG4AcwBlAGQAdQBzAGUAcgBzACwAZABjAD0AaQBkAGUAbgB0AGkAdAB5AGIAcgBvAGsAZQByAAAA</anchor><connector>1</connector><connector-state>normal</connector-state><seen-by-import>1</seen-by-import><rebuild-in-progress>0</rebuild-in-progress><obsoletion>0</obsoletion><need-full-sync>0</need-full-sync><placeholder-parent>0</placeholder-parent><placeholder-link>0</placeholder-link><placeholder-delete>0</placeholder-delete><pending>0</pending><ref-retry>0</ref-retry><rename-retry>0</rename-retry><sequencers><current><batch-number>0</batch-number><sequence-number>0</sequence-number></current><unapplied><batch-number>0</batch-number><sequence-number>0</sequence-number></unapplied><original><batch-number>0</batch-number><sequence-number>0</sequence-number></original></sequencers><import-delta-operation>none</import-delta-operation><export-delta-operation>none</export-delta-operation></tower>BAIL: MMS(15196): d:\bt\48066\sources\dev\sync\server\sqlstore\csobj.h(1256): 0x8023030a (The dimage indicates an add attrib operation, but the attrib already exists on the object.) BAIL: MMS(15196): ..\syncstage.cpp(2071): 0x8023030a (The dimage indicates an add attrib operation, but the attrib already exists on the object.) BAIL: MMS(15196): ..\syncstage.cpp(665): 0x8023030a (The dimage indicates an add attrib operation, but the attrib already exists on the object.) Forefront Identity Manager 4.3.2195.0</Data> </EventData> </Event>
Customer support service by UserEcho
Reopen if new information can be added.