Symantec Management Platform (Notification Server)

 View Only
  • 1.  Issue with Import Role and Account resources

    Posted May 12, 2011 11:58 AM

    Attempting to import security groups from AD.  I can successfully add users accounts.

    When setting up the AD import rule I keep it simple and am attempting to import a couple of groups.

    In the Import rule I have "Role and Account" from "My Domain" and I tried "none" or "a couple of groups", the rules fails?

    From log I see a couple of messages both have the same info:

    "Source: Altiris.DirectoryServices.NSDirectoryItems.DirectoryImportTask.DoDirectoryImportTask

    Description: While DoDirectoryImportTask for import rule Import Role and Account resources from fhlbi.com, from (none) and using the default column mappings. Perform this import on the specified schedules. (bafcc46c-cfb8-457b-bee8-9a3fd776f380) System.Data.SqlClient.SqlException caught in DoDirectoryImportTask. Reason: Could not find stored procedure 'spGetWindowsAccountsWithNoADResourceKeys'."



  • 2.  RE: Issue with Import Role and Account resources

    Posted Jun 10, 2011 05:33 PM

    I have seen this and reproduced it on a SP1 box.



  • 3.  RE: Issue with Import Role and Account resources

    Posted Jun 14, 2011 05:03 AM

    Hi,

    Had this issue also and solved it with my testenvironment which is without SP1.

    Copied the spGetWindowsAccountsWithNoADResourceKeys from that DB and created the sp in the new DB. Now it works fine.



  • 4.  RE: Issue with Import Role and Account resources
    Best Answer

    Posted Jun 14, 2011 07:47 AM

    Sorry I should have posted my results earlier.  I creating a service call and with there help resolved the issue.  It appears that there was no stored procedure for "spGetWindowsAccouts......" in the database.  Using the script below it resolved the issue:

    "Please go to your SQL server, select the proper database and run the following script against the Altiris database to create a new stored procedure to replace the one that is missing":

     

    /****** Object:  StoredProcedure [dbo].[spGetWindowsAccountsWithNoADResourceKeys]    Script Date: 05/24/2011 13:50:04 ******/
    SET ANSI_NULLS ON
    GO

    SET QUOTED_IDENTIFIER ON
    GO

    CREATE PROCEDURE [dbo].[spGetWindowsAccountsWithNoADResourceKeys]       
    AS

    SET NOCOUNT ON;

    SELECT rkSid.KeyValue AS [Sid], raAccCred.ParentResourceGuid AS [AccountGuid] FROM vRM_Windows_Credential wc
      JOIN ResourceKey rkSid ON rkSid.ResourceGuid = wc.Guid AND rkSid.KeyName = 'sid'
      JOIN ResourceAssociation raAccCred ON raAccCred.ChildResourceGuid = wc.Guid AND raAccCred.ResourceAssociationTypeGuid = '4582ADBC-43FA-4783-807A-A3CD7D58992C'
      JOIN vRM_Account ra ON ra.Guid = raAccCred.ParentResourceGuid
      LEFT JOIN ResourceKey rkTrusteeDirId ON rkTrusteeDirId.ResourceGuid = raAccCred.ParentResourceGuid AND rkTrusteeDirId.KeyName = 'directoryid'
      LEFT JOIN ResourceKey rkTrusteeDirDN ON rkTrusteeDirDN.ResourceGuid = raAccCred.ParentResourceGuid AND rkTrusteeDirDN.KeyName = 'distinguishedname'
      WHERE rkTrusteeDirId.KeyValue IS NULL AND rkTrusteeDirDN.KeyValue IS NULL

    SET NOCOUNT OFF
    GO