Zurück
-
Titel
Active Roles Collector fails with the error: "Value cannot be null. Parameter name: edsaAPEList" -
Beschreibung
When attempting to run the Active Roles Collector, the process fails and the following errors are observed:
- Unable to find attribute edsaAPEList
- Value cannot be null. Parameter name: edsaAPEList
Verbose logging for the Active Roles Collector shows something similar to the following:
[2020-11-17T00:57:07.889] [8]: [DirectoryObjectGatherer.ProcessSpecifiedClassObjects]: 142 objects of 'edsPolicyObject' processed[2020-11-17T00:57:07.889] [8]: [DirectoryObjectGatherer.ProcessSpecifiedClassObjects]: End.[2020-11-17T00:57:07.892] [8]: [DirectoryObjectGatherer.ParsePolicyObjects]: Begin...[2020-11-17T00:57:07.902] [8]: [Error] [DirectoryObjectGatherer.ParsePolicyObjects]: unable to find attribute EdsaApeList.[2020-11-17T00:57:07.911] [8]: [Error] [DirectoryObjectGatherer.GatherDirectoryObjects]: Value cannot be null.Parameter name: edsaAPEListat ActiveRoles.Collector.Core.Service.DirectoryObjectGatherer.ParsePolicyObjects(IEnumerable`1 policyObjects, IList`1& apeObjects, IList`1& apeParameters)at ActiveRoles.Collector.Core.Service.DirectoryObjectGatherer.GatherPolicyObjects(ServiceConnection svcConnection, DatabaseSettings database, PolicyGatheringSettings gatherPolicyObjects, Int32 parentId)at ActiveRoles.Collector.Core.Service.DirectoryObjectGatherer.GatherDirectoryObjects(DatabaseSettings database, ServiceSettings service, DirectoryObjectGatheringSettings settings) -
Ursache
A Policy object in the environment is malformed and has an empty edsaAPEList attribute value. -
Lösung
Verify the edsaAPEList attribute for each custom policy is populated in the environment to attempt to locate the Policy object with an empty attribute value. Once the Policy has been located, any of the following actions can be taken to resolve the issue:
- Delete the Policy if not in use
- Recreate the Policy, ensuring to add Policy Settings
The following query can be executed to display any policies that have the edsaAPEList attribute as blank or null:
Execute the following cmdlets as an Active Roles Admin:- Open the Active Roles Management Shell
- Connect to the Active Roles Service: Connect-QADService -proxy
- Find the malformed policy: Get-QADObject -Type edsPolicyObject -SearchRoot 'CN=Policies,CN=Configuration' -IncludedProperties EdsaApeList,distinguishedName | where {$_.EdsaApeList -eq $NULL} | select distinguishedName