Quantcast
Channel: Directory Services forum
Viewing all articles
Browse latest Browse all 31638

AdamSync logging

$
0
0

Hi,

Is there a way of logging verbosely what Adamsync is doing?    I use the /log command line,  but this only gives summary information by the look of it.

The problem I have is that Adamsync is not importing all the data that I expect it to...

If I run this command against the domain controller that Adamsync normally talks to,  

csvde -f data4.csv -s b06721 -d "dc=xxxx,dc=root,dc=local"
 -p subtree -v -l "DN, userPrincipalName" -r "(&(objectClass=User)(objectCategor
y=person))"

then the export has about 3500 entries,   and includes the user that I'm interested in.

The AD LDS instance has this configuration file

<?xml version="1.0"?>
<doc>    
 <configuration>        
  <description>sample Adamsync configuration file</description>        
  <security-mode>object</security-mode>            
  <source-ad-name>xxxx.root.local</source-ad-name>        
  <source-ad-partition>dc=xxxx,dc=root,dc=local</source-ad-partition>
  <source-ad-account>servicenowldap</source-ad-account>                
  <account-domain>xxxx-ad</account-domain>
  <target-dn>dc=xxxx,dc=co,dc=uk</target-dn>        
  <query>            
   <base-dn>dc=xxxx,dc=root,dc=local</base-dn>
   <object-filter>(&amp;(objectClass=User)(objectCategory=person))</object-filter>            
   <attributes>                
     <include>objectSID</include>
     <include>userPrincipalName</include>
     <include>sAMAccountName</include>
     <include>displayName</include>
     <include>givenName</include>
     <include>sn</include>
     <include>physicalDeliveryOfficeName</include>
     <include>telephoneNumber</include>
     <include>mail</include>
     <include>title</include>
     <include>department</include>
     <include>manager</include>
     <include>mobile</include>
     <include>company</include>
     <exclude></exclude>                
   </attributes>        
  </query>        
  <schedule>            
   <aging>                
    <frequency>0</frequency>                
    <num-objects>0</num-objects>            
   </aging>            
   <schtasks-cmd></schtasks-cmd>        
  </schedule>
  <user-proxy>
  <source-object-class>user</source-object-class>
  <target-object-class>userProxyFull</target-object-class>
  </user-proxy>    
 </configuration>    
 <synchronizer-state>        
  <dirsync-cookie></dirsync-cookie>        
  <status></status>        
  <authoritative-adam-instance></authoritative-adam-instance>        
  <configuration-file-guid></configuration-file-guid>        
  <last-sync-attempt-time></last-sync-attempt-time>        
  <last-sync-success-time></last-sync-success-time>        
  <last-sync-error-time></last-sync-error-time>        
  <last-sync-error-string></last-sync-error-string>        
  <consecutive-sync-failures></consecutive-sync-failures>        
  <user-credentials></user-credentials>        
  <runs-since-last-object-update></runs-since-last-object-update>        
  <runs-since-last-full-sync></runs-since-last-full-sync>    
 </synchronizer-state>
</doc>

When I run the sync command, 

adamsync /sync v0153 "dc=xxxx,dc=co,dc=uk" /log sync1.log

The import runs successfully without any ldap errors,  and will produce the summary output such as

Updating the configuration file DirSync cookie with a new value.



Beginning processing of deferred dn references.

Finished processing of deferred dn references.



Finished (successful) synchronization run.

Number of entries processed via dirSync: 19

Number of entries processed via ldap: 2

Processing took 0 seconds (0, 0).

Number of object additions: 2

Number of object modifications: 17

Number of object deletions: 0

Number of object renames: 2

Number of references processed / dropped: 0, 0

Maximum number of attributes seen on a single object: 12

Maximum number of values retrieved via range syntax: 0



Beginning aging run.

Aging requested every 0 runs. We last aged 2 runs ago.

Saving Configuration File on DC=xxxx,DC=co,DC=uk

Saved configuration file.

But the new user I need is missing from AD LDS instance.    There are no replication issues on the source AD,  and the csvde command proves that the data I need can be found.   I'm using the same ldap filter for both the csvde command and adamsync.

Any suggestions would be very welcome.    The AD LDS instance is running on a Windows 2008 R2 server,  and is importing from a  Windows 2003 domain.

Regards,

John


Viewing all articles
Browse latest Browse all 31638

Trending Articles