First User Created in a Metaverse Container Is Placed in the Wrong Location (291303)
The information in this article applies to:
- Microsoft Metadirectory Services 2.1
- Microsoft Metadirectory Services 2.2
This article was previously published under Q291303 SYMPTOMS
If you run a management agent that contains an MAScript that uses the -addparent switch on the Importt.exe program, the first user object in any container is displayed in the wrong organizational unit structure.
CAUSE
This issue occurs if you changed the way the object's distinguished name (also known as DN) is created in the construction template.
In this case, the -addparent switch on the Importt.exe program ignores the distinguished name location of the first user object in the location of the parent object. The following information can be seen in the logs.
0001-UPDATE PARENT[00]: o=mmstalk.com,ma=Netscape,DsaName=xforestdc,ou=Applications,dc=microsoft,dc=com
0001-UPDATE PARENT[00]: ou=People,o=mmstalk.com,ma=Netscape,DsaName=xforestdc,ou=Applications,dc=microsoft,dc=com
RESOLUTION
To work around this issue, use either of the methods described in this section:
Method One
To work around this issue:
- In the Compass utility, click the management agent.
- On the Action menu, click Configure MA.
- Click the Mode and Namespace management tab, click to select the Select this management agent as the "Prime Namespace" check box, and then click OK.
- Run the management agent twice.
After you complete this procedure, the user is moved to the correct location. If you click to select the Select this management agent as the "Prime Namespace" check box, this management agent is authorized to set the metaverse distinguished name of its connected objects to the value that this management agent defines.
Method Two
To work around this issue, you can remove the -addparent switch from the MAControl script on the affected management agent. However, when you use this workaround, the number of failed object imports may increase. Also, when you use this workaround, you may have to increase template administration to compensate for the missing -addparent switch. You should use this method with caution. NOTE: The procedure described in this section uses the Netscape management agent.
To remove the -addparent switch from the MAControl script:
- In the Compass utility, click the management agent.
- On the Action menu, click Design MA.
- In the Control MA Operations section, click the MA Control Script tab.
- Locate the following text:
echo Synchronizing Metadirectory Users
- Remove the -addparent switch on Importt from the following line in the execute command program:
EXECUTE importt -addParent -objectClass "zcLdapUser" -updateDib -currentDn "%dn%"
When you are finished, the line is similar to the following line:
EXECUTE importt -objectClass "zcLdapUser" -updateDib -currentDn "%dn%"
- Click OK.
- Run the management agent.
Modification Type: | Minor | Last Reviewed: | 1/25/2006 |
---|
Keywords: | kbenv kbprb KB291303 |
---|
|