Return
-
Title
Active Roles Web Interface returning a different value for mS-DS-ConsistencyGuid attribute -
Description
Active Roles Web Interface is returning a different value for the mS-DS-ConsistencyGuid attribute and it is not formatting the output of the hexadecimal value of the attribute correctly.
-
Cause
This issue has been identified as a product defect and is being tracked by defect ID #648453
-
Resolution
WORKAROUND
- Create a Virtual Attribute named edsva-mS-DSConsistencyGuidString with the type "DirectoryString" for "User" objects;
- Create a script module as per the code below, create a Policy with Script execution, and add the script to it;
- Scope the Policy to the required OU(s);
- In the Web Interface, add the edsva-mS-DSConsistencyGuidString VA to the form to see it on (IIS restart might be required to see the VA);
Note: Make sure the Active Directory PowerShell Module is installed on the Active Roles server running the script.
<script>
function onPostGet($Request){if ($Request.class -ne "user"){ return }if ($Request.IsAttributeRequested("edsva-mS-DSConsistencyGuidString")){$ConsistencyGuid = [GUID](Get-ADUser $Request.Get("distinguishedName") -Properties "ms-ds-consistencyguid")."ms-ds-consistencyguid"$value = $ConsistencyGuid.ToString()$Request.Put("edsva-mS-DSConsistencyGuidString",$value)}}</script>STATUS
The following defect ID 648453 has been created to address this issue and it will be fixed in a feature release version. Please refer to this article for updates or contact support referencing the Product defect ID: 648453.
-
Change Request
648453