Hi,
Is there a way of logging verbosely what Adamsync is doing? I use the /log command line, but this only gives summary information by the look of it.
The problem I have is that Adamsync is not importing all the data that I expect it to...
If I run this command against the domain controller that Adamsync normally talks to,
csvde -f data4.csv -s b06721 -d "dc=xxxx,dc=root,dc=local"
-p subtree -v -l "DN, userPrincipalName" -r "(&(objectClass=User)(objectCategor
y=person))"
then the export has about 3500 entries, and includes the user that I'm interested in.
The AD LDS instance has this configuration file
<?xml version="1.0"?>
<doc>
<configuration>
<description>sample Adamsync configuration file</description>
<security-mode>object</security-mode>
<source-ad-name>xxxx.root.local</source-ad-name>
<source-ad-partition>dc=xxxx,dc=root,dc=local</source-ad-partition>
<source-ad-account>servicenowldap</source-ad-account>
<account-domain>xxxx-ad</account-domain>
<target-dn>dc=xxxx,dc=co,dc=uk</target-dn>
<query>
<base-dn>dc=xxxx,dc=root,dc=local</base-dn>
<object-filter>(&(objectClass=User)(objectCategory=person))</object-filter>
<attributes>
<include>objectSID</include>
<include>userPrincipalName</include>
<include>sAMAccountName</include>
<include>displayName</include>
<include>givenName</include>
<include>sn</include>
<include>physicalDeliveryOfficeName</include>
<include>telephoneNumber</include>
<include>mail</include>
<include>title</include>
<include>department</include>
<include>manager</include>
<include>mobile</include>
<include>company</include>
<exclude></exclude>
</attributes>
</query>
<schedule>
<aging>
<frequency>0</frequency>
<num-objects>0</num-objects>
</aging>
<schtasks-cmd></schtasks-cmd>
</schedule>
<user-proxy>
<source-object-class>user</source-object-class>
<target-object-class>userProxyFull</target-object-class>
</user-proxy>
</configuration>
<synchronizer-state>
<dirsync-cookie></dirsync-cookie>
<status></status>
<authoritative-adam-instance></authoritative-adam-instance>
<configuration-file-guid></configuration-file-guid>
<last-sync-attempt-time></last-sync-attempt-time>
<last-sync-success-time></last-sync-success-time>
<last-sync-error-time></last-sync-error-time>
<last-sync-error-string></last-sync-error-string>
<consecutive-sync-failures></consecutive-sync-failures>
<user-credentials></user-credentials>
<runs-since-last-object-update></runs-since-last-object-update>
<runs-since-last-full-sync></runs-since-last-full-sync>
</synchronizer-state>
</doc>
When I run the sync command,
adamsync /sync v0153 "dc=xxxx,dc=co,dc=uk" /log sync1.log
The import runs successfully without any ldap errors, and will produce the summary output such as
Updating the configuration file DirSync cookie with a new value.
Beginning processing of deferred dn references.
Finished processing of deferred dn references.
Finished (successful) synchronization run.
Number of entries processed via dirSync: 19
Number of entries processed via ldap: 2
Processing took 0 seconds (0, 0).
Number of object additions: 2
Number of object modifications: 17
Number of object deletions: 0
Number of object renames: 2
Number of references processed / dropped: 0, 0
Maximum number of attributes seen on a single object: 12
Maximum number of values retrieved via range syntax: 0
Beginning aging run.
Aging requested every 0 runs. We last aged 2 runs ago.
Saving Configuration File on DC=xxxx,DC=co,DC=uk
Saved configuration file.
But the new user I need is missing from AD LDS instance. There are no replication issues on the source AD, and the csvde command proves that the data I need can be found. I'm using the same ldap filter for both the csvde command and adamsync.
Any suggestions would be very welcome. The AD LDS instance is running on a Windows 2008 R2 server, and is importing from a Windows 2003 domain.
Regards,
John