-
Title
Active Roles Configuration Transfer Wizard error:7303 Exception (ArsReader.Get.OpenDSObjectFailed) -
Description
Attempting to use the Active Roles Configuration Transfer Wizard failed with the error:
'Configuration collection' cannot continue due to the following problem.- Administration Service is not running or cannot be contacted.- Problem encountered with Active Roles configuration objects or managed Active Directory objects.Additional diagnostic information.----------------------------------7303 Exception (ArsReader.Get.OpenDSObjectFailed)----------------------------------Request for object with the following DN failed: EDMS://localhost/<GUID=00000000-0000-0000-0000-000000000000>----------------------------------16387 Error----------------------------------Value cannot be null.Parameter name: key -
Cause
There are one or more orphaned Access Template or Policy linkages in the Active Roles Configuration.
Enhancement ID#: 286092 has been created to change existing functionality and allow the Active Roles Configuration Transfer Wizard to handle these orphaned linkages more gracefully.
-
Resolution
WORKAROUND
To report on orphaned Policy linkages, run the following cmdlet in the Active Roles Management Shell:
Get-QADObject -Type edsPolicyObjectLink -SearchRoot 'CN=AP Links,CN=Configuration' -proxy -IncludeAllProperties | where {$_.edsvaSecObjectDN -eq $NULL -or $_.edsvaAPODN -eq $NULL} | select distinguishedName
To remove any found objects, run the following cmdlet:
Get-QADObject -Type edsPolicyObjectLink -SearchRoot 'CN=AP Links,CN=Configuration' -proxy -IncludeAllProperties | where {$_.edsvaSecObjectDN -eq $NULL -or $_.edsvaAPODN -eq $NULL} | Remove-QADObject
To report on orphaned Access Template linkages, run the following cmdlet in the Active Roles Management Shell:
Get-QADObject -Type edsACE -SearchRoot 'CN=AT Links,CN=Configuration' -proxy -IncludeAllProperties | where {$_.edsvaSecObjectDN -eq $NULL -or $_.edsaTrusteeSID -eq $NULL} | select distinguishedName
To remove any found objects, run the following cmdlet:
Get-QADObject -Type edsACE -SearchRoot 'CN=AT Links,CN=Configuration' -proxy -IncludeAllProperties | where {$_.edsvaSecObjectDN -eq $NULL -or $_.edsaTrusteeSID -eq $NULL} | Remove-QADObject
STATUS
An Enhancement Request has been created to change existing Active Roles functionality.
Product Management will evaluate the request and this feature may become available in a future release of the product.
There are no guarantees that this specific enhancement request will be implemented in a future release. For more information regarding our Enhancement Request policy, refer to our Global Support Guide on the Support Portal at: https://support.oneidentity.com/essentials/support-guide/
-
Change Request
286092