戻る
-
タイトル
First initial ARS sync fails in Production -
説明
The ARS sync project creation succeeds, but when running first ARS initial sync, the sync fails with the error below:
ErrorMessages = (2018-10-07 21:08:54.087) [2134003] Error executing synchronization.
[1777018] Error executing synchronization project (Active Roles Synchronization for domain CE.DST.com)'s workflow (Initial Synchronization). [1777026] Error determining schema type (user (user)) revision!
[System.ArgumentOutOfRangeException] Index was out of range. Must be non-negative and less than the size of the collection. Parameter name: index
However when running ARS sync project in simulation mode, it works fine with no issue. The same configuration and sync project have been executed in DEV & QA many times with no issue. The difference in PROD is that the ARS service account in PROD does not have the same permissions granted to DEV and QA. -
原因
Permissions issue. -
対策
The message "Error determining schema type" normally indicates a permissions issue.
The required permissions are here:
https://support.oneidentity.com/technical-documents/identity-manager/8.0.1/administration-guide-for-active-roles-integration/2#TOPIC-910937
Note that the reg key provided in the documentation is incorrect: HKEY_Local_Machine\Software\Aelita\Enterprise Directory Manager.
The correct key is HKEY_LOCAL_MACHINE\Software\One Identity\Active Roles.
Adding the service account to the Active Roles administrator group resolves the issue.