Microsoft KB Archive/940008

= An entry in the proxyAddresses attribute becomes an eliminated attribute in the metaverse schema, the group membership is truncated in the ADAM management agent, or you receive an &quot;Indirect reference&quot; error message in Identity Lifecycle Manager 2007 =

Article ID: 940008

Article Last Modified on 11/15/2007

-

APPLIES TO


 * Microsoft Identity Lifecycle Manager 2007

-



SYMPTOMS
In Microsoft Identity Lifecycle Manager 2007, you may experience one of the following symptoms.

Symptom 1

When you use the Galsync management agent to call the InsertProxyAddress function in an attribute flow rule, a valid entry in the proxyAddresses attribute becomes an eliminated attribute value in the metaverse schema. This problem occurs when two entries in the attribute flow rule have the same address but have different address type prefixes. For example, the following two entries fit this condition:
 * SMTP:user1@microsoft.com
 * SIP:user1@microsoft.com

Note When you call the InsertProxyAddress function, one address is eliminated from the proxyAddresses attribute.

Symptom 2

The group membership is truncated in the Active Directory Application Mode (ADAM) management agent when you import groups whose member attribute contains more than 5,000 elements.

Symptom 3

When you use the CLMUtils namespace in a Microsoft Visual Basic .NET Framework application, you receive the following error message:

Indirect reference is being made to assembly Microsoft.MetadirectoryServices version 3.2.561.0, which contains 'Mms_Metaverse.ClmUtils.CreateEnrollRequest'. This Project references a prior version of Microsoft.MetadirectoryServices version 3.2.558.0. To use 'Mms_Metaverse.ClmUtils.CreateEnrollRequest', you must replace the reference to Microsoft.MetadirectoryServices with version 3.2.561.0 or higher.

This symptom does not occur when you use the CLMUtils namespace in a Microsoft Visual C# .NET Framework application.



CAUSE
This problem occurs because of the following causes:
 * Symptom 1 occurs because the Galsync.dll file does not compare the address type prefix when the file looks for duplicate values in the proxyAddresses attribute.
 * Symptom 2 and Symptom 3 occur because of a problem in Identity Lifecycle Manager 2007.



Hotfix information
A supported hotfix is now available from Microsoft. However, this hotfix is intended to correct only the problem that this article describes. Apply this hotfix only to systems that are experiencing this specific problem.

To resolve this problem, submit a request to Microsoft Online Customer Services to obtain the hotfix. To submit an online request to obtain the hotfix, visit the following Microsoft Web site:

http://go.microsoft.com/?linkid=6294451

Note If additional issues occur or any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. To create a separate service request, visit the following Microsoft Web site:

http://support.microsoft.com/contactus/?ws=support

File information
The English version of this hotfix has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.



STATUS
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the &quot;Applies to&quot; section.



MORE INFORMATION
A hotfix for this problem is available for the following products:  Identity Lifecycle Manager 2007 Microsoft Identity Integration Feature Pack for Microsoft Windows Server Active Directory

For more information about the hotfix that is available for Identity Integration Feature Pack, click the following article number to view the article in the Microsoft Knowledge Base:

940007 A valid entry in the proxyAddresses attribute becomes an eliminated attribute value in the metaverse schema, or the group membership is truncated in the Active Directory Application Mode management agent in Identity Integration Feature Pack

 Microsoft Identity Integration Server 2003

For more information about the hotfix that is available for Microsoft Identity Integration Server 2003, click the following article number to view the article in the Microsoft Knowledge Base:

937561 An entry in the proxyAddresses attribute becomes an eliminated attribute in the metaverse schema, the group membership is truncated in the ADAM management agent, or you receive an &quot;Indirect reference&quot; error message in Identity Integration Server 2003



For more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base:

824684 Description of the standard terminology that is used to describe Microsoft software updates

Additional query words: GalSynchronization Sync Synchronization GAL MIIS IIFP ILM

Keywords: kbfix kbpubtypekc kbqfe kbhotfixserver KB940008

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.