Custodian Manager for Discovery Accelerator fails to synchronize with specific users in the Domino Name And Address Book.

Description

Error Message

Review of the Individual Custodians will show the following for each user that fails to synchronize.

*Note: The 'LDAP Path:' field is blank.

The Symantec Enterprise Vault Event log will show the following for each user that fails to synchronize.

Log Name:      Symantec Enterprise Vault
Source:        Accelerator AD Synchronizer
Date:          3/21/2014 9:35:53 AM
Event ID:      34
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      EVDG.EV.LOCAL
Description:
APP AT - Customer ID: 5 - An error occured in ProfileSynchroniser::SynchroniseEmployeeProfile while retrieving properties. System.Exception: Domino User has invalid format
   at KVS.Accelerator.ActiveDirectory.LotusProfileSynchroniser.GetUserPropertiesFromLotusUserIDOrCertificate(String ldapServer, String lotusUserID, String dominoCertificate, Boolean& maybeDeleted)
   at KVS.Accelerator.ActiveDirectory.LotusProfileSynchroniser.GetUserPropertiesFromLotusUserIDOrCertificate(String ldapServer, String lotusUserID, String dominoCertificate, Boolean& maybeDeleted)
   at KVS.Accelerator.ActiveDirectory.LotusProfileSynchroniser.SynchroniseLotusEmployeeProfile(ProfileRow profileRow, StringCollection& emailAddresses, StringCollection& allDisplayNameAddresses, ResultPropertyCollection& propCol, String& Domino_SyncError)
Event Xml:


    34
    2
    0
    0x80000000000000

    6156
    Symantec Enterprise Vault
    EVDG.EV.LOCAL


    APP AT - Customer ID: 5 - An error occured in ProfileSynchroniser::SynchroniseEmployeeProfile while retrieving properties. System.Exception: Domino User has invalid format
   at KVS.Accelerator.ActiveDirectory.LotusProfileSynchroniser.GetUserPropertiesFromLotusUserIDOrCertificate(String ldapServer, String lotusUserID, String dominoCertificate, Boolean& maybeDeleted)
   at KVS.Accelerator.ActiveDirectory.LotusProfileSynchroniser.GetUserPropertiesFromLotusUserIDOrCertificate(String ldapServer, String lotusUserID, String dominoCertificate, Boolean& maybeDeleted)
   at KVS.Accelerator.ActiveDirectory.LotusProfileSynchroniser.SynchroniseLotusEmployeeProfile(ProfileRow profileRow, StringCollection& emailAddresses, StringCollection& allDisplayNameAddresses, ResultPropertyCollection& propCol, String& Domino_SyncError)

DTrace of 'ADSynchroniser' will show the following for each user that fails to synchronize:

348 10:49:27.337 [2016] (ADSynchroniser) <3544> EV-H {-} {LOTUSPROFILESYNCHRONISER.EN_US} {C5.EN_US} The following Domino LDAP attributes appear to be empty or not enabled for anonymous access. Ensure that they are exposed: | member|

349 10:49:27.337 [2016] (ADSynchroniser) <3544> EV-L {-} {CENTRALPROFILESYNCHRONISER.EN_US} {C5.EN_US} ProcessItem: Processing item with type: KVS.Accelerator.ActiveDirectory.SyncProfileDS+ProfileRow

350 10:49:27.337 [2016] (ADSynchroniser) <3544> EV-M {-} {LOTUSPROFILESYNCHRONISER.EN_US} {C5.EN_US} Domino_Sync: LotusProfileSynchroniser.GetUserPropertiesFromLotusUserIDOrCertificate - Exception [Domino User has invalid format]

351 10:49:27.649 [2016] (ADSynchroniser) <3544> EV-H {-} Exception: Error ADSync_ProfileSync_RetrieveError Info:{ACCELERATOREVENT.EN_US} {C5.EN_US} An error occured in ProfileSynchroniser::SynchroniseEmployeeProfile while retrieving properties. System.Exception: Domino User has invalid format| at KVS.Accelerator.ActiveDirectory.LotusProfileSynchroniser.GetUserPropertiesFromLotusUserIDOrCertificate(String ldapServer, String lotusUserID, String dominoCertificate, Boolean& maybeDeleted)| at KVS.Accelerator.ActiveDirectory.LotusProfileSynchroniser.SynchroniseLotusEmployeeProfile(ProfileRow profileRow, StringCollection& emailAddresses, StringCollection& allDisplayNameAddresses, ResultPropertyCollection& propCol, String& Domino_SyncError) Diag: Type:System.Exception ST: Inner:None

352 10:49:27.649 [2016] (ADSynchroniser) <6504> EV-L {TRACETIMER.EN_US} {C5.EN_US} [ 343ms] Tracing the period for which we lock while updating employee profile

353 10:49:27.649 [2016] (ADSynchroniser) <6504> EV-L {-} {CENTRALPROFILESYNCHRONISER.EN_US} {C5.EN_US} Central_Sync: Domino Synchronised 'Domino Admin' successfully

354 10:49:27.649 [2016] (ADSynchroniser) <3544> EV-H {-} {LOTUSPROFILESYNCHRONISER.EN_US} {C5.EN_US} Domino_Sync: While processing 'Terry.Diamond@BNYMellon.com@BNYMellonEx' error: Domino User has invalid format

Cause

The cause of the issue is due to an improper first entry in the user name field of the affected person document. The first entry in the 'User Name' is not the hierarchial name of the user. (i.e. Test User/EVSYM). As the 'ADSynchroniser' is looking for a hierarchial name format it fails due to an unexpected format.

Note: The image below shows an example of one possible cause. In this example the first entry in the 'User Name' field is an SMTP address instead of the hierarchial name of the user that is expected by the 'ADSynchroniser' process.

Resolution

To resolve this issue ensure that the first entry in the 'User Name' field of the 'Person Document' is the hierarchial name of the user (i.e. Test User/VSYM). Any other necessary values in the 'User Name' field can be added to the end of the list.

Note: The image below is an example of a properly sequenced 'User Name' field of the 'Person Document'.

Issue/Introduction

When performing a "Synchronize Now" in Custodian Manager against a Domino directory specific user's may fail to synchronize with the following: "Error: Domino User has invalid format".

Welcome to "KB Articles"