This rule uses a script to check the status of Active Roles replication. The script is intended to run on the Publisher Administration Service so as to verify the replication status of the Publisher and Subscribers. By default, this rule is scheduled to run every 30 minutes. The schedule can be adjusted by managing rule properties in the Operations Manager console.
This rule generates an alert when the Replication monitoring script detects that the Active Roles replication status indicates a replication failure.
Possible causes of the alert include:
For more information, and details on how resolve replication-related problems, refer to the “Troubleshooting” section in the Replication: Best Practices and Troubleshooting document, which is part of the Active Roles product documentation set.
This category includes the event-based processing rules to monitor health of the connection to the configuration database:
The following sub-sections elaborate on each of these processing rules.
This rule generates an alert indicating that the Administration Service has lost a connection to the configuration database, and is making attempts to restore the connection. For details, refer to the alert description generated by this rule. Losing the connection to the database does not affect the directory management functions of the Administration Service. All operations related to Active Directory management continue to work as expected.
Until after the connection has been restored, unavailable are the functions of the Administration Service that require access to the database. These include:
This rule generates an alert indicating that the Administration Service has restored the connection to the configuration database. For details, refer to the alert description generated by this rule. Once the connection has been restored, available are all the functions of the Administration Service that require access to the database.
This category includes the event-based processing rules to monitor the background activities of Active Roles related to Dynamic Groups:
The following sub-sections elaborate on each of these processing rules.
This rule generates an alert indicating that an administrator has forced Active Roles to re-calculate (rebuild) the membership list of a Dynamic Group. For details, refer to the alert description generated by this rule.
The administrator could start the rebuilding of a Dynamic Group from the Members tab in the Properties dialog box for that Dynamic Group, in the Active Roles console.
This rule generates an alert indicating that the Administration Service failed to add an object to a Dynamic Group due to a certain problem. The object is missing from the Dynamic Group until after the problem has been resolved. For details, refer to the alert description generated by this rule.
Try to force rebuilding of the Dynamic Group from the Members tab in the Properties dialog box for that Dynamic Group, in the Active Roles console.
This rule generates an alert indicating that the Administration Service failed to remove an object from a Dynamic Group due to a certain problem. The object remains in the Dynamic Group until after the problem has been resolved. For details, refer to the alert description generated by this rule.
Try to force rebuilding of the Dynamic Group from the Members tab in the Properties dialog box for that Dynamic Group, in the Active Roles console.
This rule generates an alert indicating that the Administration Service failed to apply a query-based membership rule when updating the membership list of a Dynamic Group. The failed rule is not taken into account, so the membership list may be incompliant with the membership rules. For details, refer to the alert description generated by this rule.
Try to force rebuilding of the Dynamic Group from the Members tab in the Properties dialog box for that Dynamic Group, in the Active Roles console. Check membership rules by using the Membership Rules tab in that dialog box.
This rule generates an alert indicating that the Administration Service failed to update the membership list of a Dynamic Group in accordance with the membership rules. The membership list may be incompliant with the membership rules. For details, refer to the alert description generated by this rule.
Try to force rebuilding of the Dynamic Group from the Members tab in the Properties dialog box for that Dynamic Group, in the Active Roles console.
This rule generates an alert indicating that the Administration Service failed to update the membership list of an additional (nested) group generated to accommodate extra members of a Dynamic Group. The membership list of the nested group may be incompliant with the membership rules. For details, refer to the alert description generated by this rule.
Try to force rebuilding of the Dynamic Group from the Members tab in the Properties dialog box for that Dynamic Group, in the Active Roles console.
This rule generates an alert indicating that the Administration Service failed to delete or update a membership rule of a Dynamic Group upon deletion of a certain object. The membership rule could be one of the following:
For details, refer to the alert description generated by this rule.
To resolve these issues, delete or update membership rules by using the Membership Rules tab in the Properties dialog box for that Dynamic Group, in the Active Roles console. Then, force rebuilding of the Dynamic Group from the Members tab in that dialog box.
This rule generates an alert indicating that the Administration Service failed to locate an object when updating the membership list of a Dynamic Group in accordance with the membership rules. The object may have been deleted. The object could be referred to by:
For details, refer to the alert description generated by this rule.
The membership rules referring to that object are inoperative and are not taken into account when updating the Dynamic Group, so the membership list may be incompliant with the membership rules.
To prevent issues with the membership list of the Dynamic Group, check membership rules by using the Membership Rules tab in the Properties dialog box for that Dynamic Group, in the Active Roles console. Then, force rebuilding of the Dynamic Group from the Members tab in that dialog box.
This rule generates an alert indicating that the Administration Service failed to retrieve information about Dynamic Groups from a certain domain. The Dynamic Groups contained in that domain are inoperative until after the problem has been resolved. For details, refer to the alert description generated by this rule.
This rule generates an alert indicating that Active Roles failed to update the members list of the Dynamic Group in accordance with one of the membership rules. The failed membership rule applies to a domain that is currently unavailable. The membership rule is disregarded, so the members list of the Dynamic Group may be incompliant with the membership rules. For details, refer to the alert description generated by this rule.
Ensure that the domain is available on the network, and then update the Dynamic Group by clicking Rebuild on the Members tab in the Properties dialog box for that group in the Active Roles console or wait for Active Roles to update the Dynamic Group on a schedule.
This rule generates an alert indicating that Active Roles failed to update the members list of the Dynamic Group in accordance with one of the membership rules. As one of the membership rules failed, no membership rules are applied until the issue is resolved, so the members list of this Dynamic Group remains unchanged. For details, refer to the alert description generated by this rule.
Try forcing update of the Dynamic Group by clicking Rebuild on the Members tab in the Properties dialog box for that group in the Active Roles console. Check the membership rules on the Membership Rules tab in that dialog box.
© 2024 One Identity LLC. ALL RIGHTS RESERVED. Feedback Terms of Use Privacy Cookie Preference Center
