This discussion is archived
4 Replies Latest reply: Nov 6, 2012 12:36 AM by user243865 RSS

MprAdminUserGetInfo fails... why?

user243865 Newbie
Currently Being Moderated
Hi,

When fields that concern Terminal Server attributes get's updated, the IdM system fails out with the message

MprAdminUserGetInfo() failed - User: S88893 Error:ں

This is NOT due to rights according to our AD team, since our gateway users is running in Domain Admin mode and has all access to all objects.

The AD team also says this is a special attribute that can only be set through API's, not by setting atributes in the AD...

I set the gateway to maxlevel trace and got this part for the above message... data has been "anonymized"

Log says it attempts to get the DN, then fails the TS stuff, and then it gets the DN?
07/26/2012 12.06.20.208000 [2444] (../../../../src/wps/agent/adsi/ADSIExtension.cpp,2929): Enter: updateObjectAttrs
07/26/2012 12.06.20.208000 [2444] (../../../../src/wps/agent/adsi/ADSIExtension.cpp,2942): Enabling Exchange2007 processing
07/26/2012 12.06.20.208000 [2444] (../../../../src/wps/agent/adsi/ADSIExtension.cpp,2958): Checking attribute, name: 'Terminal Services User Profile'
07/26/2012 12.06.20.208000 [2444] (../../../../src/wps/agent/adsi/ADSIExtension.cpp,13752): Enter: isUserObject
07/26/2012 12.06.20.208000 [2444] (../../../../src/wps/agent/adsi/ADSIExtension.cpp,13753): objClass = User
07/26/2012 12.06.20.208000 [2444] (../../../../src/wps/agent/adsi/ADSIExtension.cpp,13756): Exit: isUserObject: true
07/26/2012 12.06.20.208000 [2444] (../../../../src/wps/agent/adsi/ADSIExtension.cpp,3342): Setting password if not yet set
07/26/2012 12.06.20.208000 [2444] (../../../../src/wps/agent/adsi/ADSIExtension.cpp,3773): Enter: setOutOfOffice
07/26/2012 12.06.20.208000 [2444] (../../../../src/wps/agent/adsi/ADSIExtension.cpp,3784): OutOfOfficeEnabled not specified
07/26/2012 12.06.20.208000 [2444] (../../../../src/wps/agent/adsi/ADSIExtension.cpp,3806): OutOfOfficeMessage = 'null'

07/26/2012 12.06.20.208000 [2444] (../../../../src/wps/agent/adsi/ADSIExtension.cpp,3857): Exit: setOutOfOffice
07/26/2012 12.06.20.208000 [2444] (../../../../src/wps/agent/adsi/ADSIExtension.cpp,4871): Enter: createUserDirs
07/26/2012 12.06.20.208000 [2444] (../../../../src/wps/agent/adsi/ADSIExtension.cpp,4957): Exit: createUserDirs
07/26/2012 12.06.20.208000 [2444] (../../../../src/wps/agent/adsi/ADSIExtension.cpp,13752): Enter: isUserObject
07/26/2012 12.06.20.208000 [2444] (../../../../src/wps/agent/adsi/ADSIExtension.cpp,13753): objClass = User
07/26/2012 12.06.20.208000 [2444] (../../../../src/wps/agent/adsi/ADSIExtension.cpp,13756): Exit: isUserObject: true
07/26/2012 12.06.20.208000 [2444] (../../../../src/wps/agent/adsi/ADSIExtension.cpp,13077): Enter: setTerminalServicesAttrs
07/26/2012 12.06.20.208000 [2444] (../../../../src/wps/agent/adsi/ADSIExtension.cpp,4447): Enter: getUsersDomainAndName
07/26/2012 12.06.20.208000 [2444] (../../../../src/wps/agent/adsi/ADSIExtension.cpp,4497): Enter: getSID
07/26/2012 12.06.20.223000 [2444] (../../../../src/wps/agent/adsi/ADSIExtension.cpp,4516): Return: 0x2cf75d0
07/26/2012 12.06.20.223000 [2444] (../../../../src/wps/agent/adsi/ADSIExtension.cpp,4517): Exit: getSID
07/26/2012 12.06.20.223000 [2444] (../../../../src/wps/agent/adsi/ADSIExtension.cpp,4487): Exit: getUsersDomainAndName
07/26/2012 12.06.20.223000 [2444] (../../../../src/wps/agent/adsi/ADSIExtension.cpp,13253): Enter: getDC
07/26/2012 12.06.20.333000 [2444] (../../../../src/wps/agent/adsi/ADSIExtension.cpp,13319): Domain: ANON0 Domain Controller: \\ANON000C
07/26/2012 12.06.20.333000 [2444] (../../../../src/wps/agent/adsi/ADSIExtension.cpp,13323): getDC returns (null)
07/26/2012 12.06.20.333000 [2444] (../../../../src/wps/agent/adsi/ADSIExtension.cpp,13324): Exit: getDC
07/26/2012 12.06.20.333000 [2444] (../../../../src/wps/agent/adsi/ADSIExtension.cpp,12896): Enter: initRASUserInfo
07/26/2012 12.06.20.333000 [2444] (../../../../src/wps/agent/adsi/ADSIExtension.cpp,12905): Attempt to retreive User: S88893 on Server: \\NDRI000C
07/26/2012 12.06.20.380000 [2444] (../../../../src/wps/agent/adsi/ADSIExtension.cpp,12913): Following log message is truncated: max length reached
MprAdminUserGetInfo() failed - User: S88893 Error: 
07/26/2012 12.06.20.380000 [2444] (../../../../src/wps/agent/adsi/ADSIExtension.cpp,12930): Return: 0
07/26/2012 12.06.20.380000 [2444] (../../../../src/wps/agent/adsi/ADSIExtension.cpp,12931): Exit: initRASUserInfo
07/26/2012 12.06.20.380000 [2444] (../../../../src/wps/agent/adsi/ADSIExtension.cpp,13113): Exit: setTerminalServicesAttrs
07/26/2012 12.06.20.380000 [2444] (../../../../src/wps/agent/adsi/ADSIExtension.cpp,3766): Exit: updateObjectAttrs
07/26/2012 12.06.20.380000 [2444] (../../../../src/wps/agent/adsi/ADSIExtension.cpp,13752): Enter: isUserObject
07/26/2012 12.06.20.380000 [2444] (../../../../src/wps/agent/adsi/ADSIExtension.cpp,13753): objClass = User
07/26/2012 12.06.20.380000 [2444] (../../../../src/wps/agent/adsi/ADSIExtension.cpp,13756): Exit: isUserObject: true
07/26/2012 12.06.20.380000 [2444] (../../../../src/wps/agent/adsi/ADSIExtension.cpp,6666): Enter: addUserToGroups
07/26/2012 12.06.20.380000 [2444] (../../../../src/wps/agent/adsi/ADSIExtension.cpp,6779): Exit: addUserToGroups
07/26/2012 12.06.20.380000 [2444] (../../../../src/wps/agent/adsi/ADSIExtension.cpp,5748): Got DN for rename: 'CN=S88893,OU=Solid Users,OU=User Accounts,DC=anon0,DC=ad0,DC=anon,DC=net'
07/26/2012 12.06.20.380000 [2444] (../../../../src/wps/agent/adsi/ADSIExtension.cpp,5881): Enter: rename
07/26/2012 12.06.20.380000 [2444] (../../../../src/wps/agent/adsi/ADSIExtension.cpp,5960): Exit: rename
07/26/2012 12.06.20.380000 [2444] (../../../../src/wps/agent/object/RequestHandler.cpp,117): Enter: reply
07/26/2012 12.06.20.380000 [2444] (../../../../src/wps/agent/object/RequestHandler.cpp,75): Enter: sendBuffer
07/26/2012 12.06.20.380000 [2444] (../../../../src/wps/agent/object/RequestHandler.cpp,89): Sending buffer:
07/26/2012 12.06.20.380000 [2444] (../../../../src/wps/agent/object/RequestHandler.cpp,67): <?xml version='1.0' encoding='UTF-16'?>
07/26/2012 12.06.20.380000 [2444] (../../../../src/wps/agent/object/RequestHandler.cpp,67): <Response>
07/26/2012 12.06.20.380000 [2444] (../../../../src/wps/agent/object/RequestHandler.cpp,67):   <Result status='error'>
07/26/2012 12.06.20.380000 [2444] (../../../../src/wps/agent/object/RequestHandler.cpp,67):     <ResultItem type='message' status='error'>
07/26/2012 12.06.20.380000 [2444] (../../../../src/wps/agent/object/RequestHandler.cpp,67):       <Message>
07/26/2012 12.06.20.380000 [2444] (../../../../src/wps/agent/object/RequestHandler.cpp,67): Following log message is truncated: max length reached
        <Text>MprAdminUserGetInfo() failed - User: S88893 Error: 
07/26/2012 12.06.20.380000 [2444] (../../../../src/wps/agent/object/RequestHandler.cpp,67):       </Message>
07/26/2012 12.06.20.380000 [2444] (../../../../src/wps/agent/object/RequestHandler.cpp,67):     </ResultItem>
07/26/2012 12.06.20.380000 [2444] (../../../../src/wps/agent/object/RequestHandler.cpp,67):   </Result>
07/26/2012 12.06.20.380000 [2444] (../../../../src/wps/agent/object/RequestHandler.cpp,67): </Response>
AD team says it can be due to different versions of servers and clients, but we have a mix off all and the error seem to be on all.

Anyone seen it and knows what to do about it?
  • 1. Re: MprAdminUserGetInfo fails... why?
    Boomer Newbie
    Currently Being Moderated
    We have recently been having this same issues. Any solutions?
  • 2. Re: MprAdminUserGetInfo fails... why?
    user243865 Newbie
    Currently Being Moderated
    Not really, we know they are connected to the terminal server variables and it seems like it might be connected to them taking time to complete and not being ready for "action" at once...
    for now we have removed that variable at creation time of the AD account and hope that will solve things.
  • 3. Re: MprAdminUserGetInfo fails... why?
    Boomer Newbie
    Currently Being Moderated
    Have you seen this error since you removed the terminal services from account creation?
  • 4. Re: MprAdminUserGetInfo fails... why?
    user243865 Newbie
    Currently Being Moderated
    Nope, not once...

    It seems that it is cause by a delay between the DC the Gateway is talking to and where ever the actual terminal server info is stored...
    if one tries again a bit later, it will work saving the same info on the existing user, just not at creation time

    But our terminal server group says they don't need this anymore so we just disabled the automatic setting of it at creation.


    To be more exact, we have disabled the Terminal Server Profile variable from getting a value at creation time.
    we still can edit all the variables if need be, and if we just wait for a minute after AD account creation, it apparently works fine.

    Edited by: Dhurgan on Nov 6, 2012 9:34 AM

Legend

  • Correct Answers - 10 points
  • Helpful Answers - 5 points