+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 22
Cloud Services Thread, Office 365: dirsync error 611 and Invalid Namespace warning in Technical; Just starting a test deployment of Office 365 to migrate away from Exchange 2007. Installed dirsync yesterday on my SCCM ...
  1. #1

    sonofsanta's Avatar
    Join Date
    Dec 2009
    Location
    Lincolnshire, UK
    Posts
    4,468
    Thank Post
    751
    Thanked 1,211 Times in 853 Posts
    Blog Entries
    45
    Rep Power
    534

    Office 365: dirsync error 611 and Invalid Namespace warning

    Just starting a test deployment of Office 365 to migrate away from Exchange 2007. Installed dirsync yesterday on my SCCM server using the full SQL install, all fine, sync working, happy days.

    Checked event logs this morning, password sync is failing with error 611, "The operation was aborted because the client side timeout limit was exceeded." The only relevant info I can find on this specific error is this thread on office365.com where it's mentioned that it's a bug where "the pwdLastSet value of an user account is set to 0, which is invalid for DirSync to process" - this is believable as we don't force password changes. That thread's from August and I only downloaded & installed yesterday, so apparently that bug was just never fixed (marvellous).

    In an attempt to find a workaround, though, I tried to rerun the dirsync config tool. Gave it all the credentials/details, told it to get on with it and it failed with the error Invalid Namespace. Nothing in event viewer, no relevant logs I can spot in the install directory. Anytime I try and open the config tool now, I get that warning with a lot of exception text:
    Code:
    See the end of this message for details on invoking 
    just-in-time (JIT) debugging instead of this dialog box.
    
    ************** Exception Text **************
    System.Management.ManagementException: Invalid namespace 
       at System.Management.ManagementScope.Initialize()
       at System.Management.ManagementObjectSearcher.Initialize()
       at System.Management.ManagementObjectSearcher.Get()
       at Microsoft.Online.DirSync.Common.MiisAction.GetTargetMA()
       at Microsoft.Online.DirSync.Common.MiisAction.IsSyncInProgress()
       at Microsoft.Online.DirSync.Common.PrerequisiteChecks.ThrowIfSyncInProgress()
       at Microsoft.Online.DirSync.UI.IntroductionWizardPage.PrerequisiteValidation()
       at Microsoft.Online.DirSync.UI.IntroductionWizardPage.OnLoad(EventArgs e)
       at System.Windows.Forms.Control.CreateControl(Boolean fIgnoreVisible)
       at System.Windows.Forms.Control.CreateControl(Boolean fIgnoreVisible)
       at System.Windows.Forms.Control.CreateControl(Boolean fIgnoreVisible)
       at System.Windows.Forms.Control.CreateControl(Boolean fIgnoreVisible)
       at System.Windows.Forms.Control.CreateControl()
       at System.Windows.Forms.Control.WmShowWindow(Message& m)
       at System.Windows.Forms.Control.WndProc(Message& m)
       at System.Windows.Forms.Control.ControlNativeWindow.WndProc(Message& m)
       at System.Windows.Forms.NativeWindow.Callback(IntPtr hWnd, Int32 msg, IntPtr wparam, IntPtr lparam)
    
    
    ************** Loaded Assemblies **************
    mscorlib
        Assembly Version: 2.0.0.0
        Win32 Version: 2.0.50727.5472 (Win7SP1GDR.050727-5400)
        CodeBase: file:///C:/Windows/Microsoft.NET/Framework64/v2.0.50727/mscorlib.dll
    ----------------------------------------
    ConfigWizard
        Assembly Version: 1.0.0.0
        Win32 Version: 1.0.6567.18
        CodeBase: file:///C:/Program%20Files/Windows%20Azure%20Active%20Directory%20Sync/ConfigWizard.exe
    ----------------------------------------
    System
        Assembly Version: 2.0.0.0
        Win32 Version: 2.0.50727.5467 (Win7SP1GDR.050727-5400)
        CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System/2.0.0.0__b77a5c561934e089/System.dll
    ----------------------------------------
    Microsoft.Online.DirSync.Common
        Assembly Version: 1.0.0.0
        Win32 Version: 1.0.6567.18
        CodeBase: file:///C:/Program%20Files/Windows%20Azure%20Active%20Directory%20Sync/Microsoft.Online.DirSync.Common.DLL
    ----------------------------------------
    System.Windows.Forms
        Assembly Version: 2.0.0.0
        Win32 Version: 2.0.50727.5468 (Win7SP1GDR.050727-5400)
        CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System.Windows.Forms/2.0.0.0__b77a5c561934e089/System.Windows.Forms.dll
    ----------------------------------------
    System.Drawing
        Assembly Version: 2.0.0.0
        Win32 Version: 2.0.50727.5467 (Win7SP1GDR.050727-5400)
        CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System.Drawing/2.0.0.0__b03f5f7f11d50a3a/System.Drawing.dll
    ----------------------------------------
    Microsoft.Online.DirSync.Resources
        Assembly Version: 1.0.0.0
        Win32 Version: 1.0.6567.18
        CodeBase: file:///C:/Program%20Files/Windows%20Azure%20Active%20Directory%20Sync/Microsoft.Online.DirSync.Resources.DLL
    ----------------------------------------
    System.Core
        Assembly Version: 3.5.0.0
        Win32 Version: 3.5.30729.5420 built by: Win7SP1
        CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System.Core/3.5.0.0__b77a5c561934e089/System.Core.dll
    ----------------------------------------
    System.DirectoryServices
        Assembly Version: 2.0.0.0
        Win32 Version: 2.0.50727.5467 (Win7SP1GDR.050727-5400)
        CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System.DirectoryServices/2.0.0.0__b03f5f7f11d50a3a/System.DirectoryServices.dll
    ----------------------------------------
    System.Configuration
        Assembly Version: 2.0.0.0
        Win32 Version: 2.0.50727.5476 (Win7SP1GDR.050727-5400)
        CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System.Configuration/2.0.0.0__b03f5f7f11d50a3a/System.Configuration.dll
    ----------------------------------------
    System.Xml
        Assembly Version: 2.0.0.0
        Win32 Version: 2.0.50727.5476 (Win7SP1GDR.050727-5400)
        CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System.Xml/2.0.0.0__b77a5c561934e089/System.Xml.dll
    ----------------------------------------
    System.ServiceProcess
        Assembly Version: 2.0.0.0
        Win32 Version: 2.0.50727.5420 (Win7SP1.050727-5400)
        CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System.ServiceProcess/2.0.0.0__b03f5f7f11d50a3a/System.ServiceProcess.dll
    ----------------------------------------
    System.Management
        Assembly Version: 2.0.0.0
        Win32 Version: 2.0.50727.5420 (Win7SP1.050727-5400)
        CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System.Management/2.0.0.0__b03f5f7f11d50a3a/System.Management.dll
    ----------------------------------------
    
    ************** JIT Debugging **************
    To enable just-in-time (JIT) debugging, the .config file for this
    application or computer (machine.config) must have the
    jitDebugging value set in the system.windows.forms section.
    The application must also be compiled with debugging
    enabled.
    
    For example:
    
    <configuration>
        <system.windows.forms jitDebugging="true" />
    </configuration>
    
    When JIT debugging is enabled, any unhandled exception
    will be sent to the JIT debugger registered on the computer
    rather than be handled by this dialog box.
    I can continue or quit there. If I continue, I can get to the same point and get the same error, regardless of whether password sync is ticked or not (I'd really like it ticked, though).

    More frustratingly, if I try and uninstall from Programs and Features, it just pops up and tells me, what else, Invalid Namespace. I can't even re-install!

    All of this applies even after a server restart.

    Any clues? Don't really want to have to restore the whole server from backup especially as it seems like the kind of fault that will recur.
    Last edited by sonofsanta; 10th January 2014 at 10:41 AM.

  2. #2

    sonofsanta's Avatar
    Join Date
    Dec 2009
    Location
    Lincolnshire, UK
    Posts
    4,468
    Thank Post
    751
    Thanked 1,211 Times in 853 Posts
    Blog Entries
    45
    Rep Power
    534
    Looks like the invalid namespace is related to this: DirSync installation and/or operation fails Invalid Namespace (System.Management.ManagementException: Invalid namespace / just-in-time (JIT) debugging) | Jesper Stahle's Notes From the Field as it's the SCCM server (though I am on SCCM2012 SP1, but the server did start out on 2012RTM).

    However, I still can't bloomin' uninstall dirsync to reinstall without the error happening. Argh! Is there any way of rebuilding the WMI namespace for dirsync?

    EDIT: nevermind, found the MOF file, need to open a command prompt, then:
    Code:
    cd "C:\Program Files\Windows Azure Active Directory Sync\SYNCBUS\Synchronization Service\Bin"
    mofcomp mmswmi.mof
    Now letting me uninstall.

    Still: 611 error, are there any workarounds for that? Forcing a password change domain wide (to clear the zeroes) wouldn't work as staff on maternity leave wouldn't be able to change their password.
    Last edited by sonofsanta; 10th January 2014 at 11:40 AM.

  3. #3

    EduTech's Avatar
    Join Date
    Aug 2007
    Location
    Reading
    Posts
    4,982
    Thank Post
    158
    Thanked 889 Times in 700 Posts
    Blog Entries
    3
    Rep Power
    265
    Hi,

    I have seen this quite a few times when people have installed DirSync on a Server that holds any System Centre Role. The quickest way to uninstall DirSync if you get that error is to just Stop the 'Forefront Identity Manager' Service and then go and attempt the Uninstall.

    In terms of Password Sync have you done the following:

    • Run Enable-MSOnlinePasswordSync
    • Run Full-Sync
    • Set-FullPasswordSync
    • Restart FIM service

    Once the FULL SYNC has occurred are you seeing repeated failures with Event 611?

    - Can you confirm that you are running the latest version of Directory Sync Tool? [Latest Version: 6567.0018]
    - Can you attach further information contacted within Event ID 611 as the actual error varies but the ID is the same.

    Many Thanks,
    James.
    Last edited by EduTech; 11th January 2014 at 07:12 PM.

  4. #4

    Join Date
    Dec 2008
    Location
    Essex
    Posts
    2,137
    Thank Post
    1
    Thanked 326 Times in 316 Posts
    Rep Power
    76
    Can you check the local sec policy on server and see if network security: LDAP client signing requirements " is enabled?
    If yes, can you disable and monitor/check.

  5. #5

    EduTech's Avatar
    Join Date
    Aug 2007
    Location
    Reading
    Posts
    4,982
    Thank Post
    158
    Thanked 889 Times in 700 Posts
    Blog Entries
    3
    Rep Power
    265
    also, if you can get a Network Trace on the DirSync Server when the Event 611 occurs that would help we see what is going on from that level.

    I am interested to see what kind of request/response appears when a query is run against your domain controllers... :-) interesting you can see this stuff on a NETMON trace and can point you in the right direction.

    Download NetMon: http://www.microsoft.com/en-gb/downl...s.aspx?id=4865

    You will probably find that EVENT ID 611 will occur every 30 minutes... so you should be able to judge when the event occurs next.

    ...

    Thanks,
    James.
    Last edited by EduTech; 11th January 2014 at 07:16 PM.

  6. #6

    sonofsanta's Avatar
    Join Date
    Dec 2009
    Location
    Lincolnshire, UK
    Posts
    4,468
    Thank Post
    751
    Thanked 1,211 Times in 853 Posts
    Blog Entries
    45
    Rep Power
    534
    I managed to uninstall & reinstall after recompling the MOF, I've just run through the config again and gotten through successfully so that issue appears to be dealt with. I'd probably have hit it no matter what server of mine I installed this on, the only servers I have that haven't got something System Center on are web facing, and the documentation recommended security and caution about where it was installed.

    The 611s have been logged throughout the weekend, every half hour as you say. After the reinstall prompted a full sync the passwords seemed to sync up fine, and looking at the logs now (as I've triggered another full sync from going through config) I'm being told that Enable-MSOnlinePasswordSync executed successfully. The system seems capable of syncing passwords, it's just... choosing not to most of the time.

    611 error text is:
    Code:
    Password synchronization failed for domain: domain.local. Details: 
    System.DirectoryServices.Protocols.LdapException: The operation was aborted because the client side timeout limit was exceeded. 
       at System.DirectoryServices.Protocols.LdapConnection.ConstructResponse(Int32 messageId, LdapOperation operation, ResultAll resultType, TimeSpan requestTimeOut, Boolean exceptionOnTimeOut)
       at System.DirectoryServices.Protocols.LdapConnection.SendRequest(DirectoryRequest request, TimeSpan requestTimeout)
       at Microsoft.Online.PasswordSynchronization.DirectoryAttributeSearcher.<GetObjectAttributes>d__8.MoveNext()
       at Microsoft.Online.PasswordSynchronization.DirectoryAttributeSearcher.<GetObjectAttributes>d__0.MoveNext()
       at Microsoft.Online.PasswordSynchronization.PasswordSynchronizationTask.BuildPasswordBatch(IList`1 passwordChanges, IEnumerable`1 changeObjects)
       at Microsoft.Online.PasswordSynchronization.PasswordSynchronizationTask.BuildPasswordBatch(IList`1 changeSetObjects)
       at Microsoft.Online.PasswordSynchronization.DeltaSynchronizationTask.SynchronizeCredentialsToCloud()
       at Microsoft.Online.PasswordSynchronization.PasswordSynchronizationTask.SynchronizeSecrets()
       at Microsoft.Online.PasswordSynchronization.SynchronizationExecutionContext.SynchronizeDomain()
       at Microsoft.Online.PasswordSynchronization.SynchronizationManager.SynchronizeDomain(SynchronizationExecutionContext syncExecutionContext)
    .
    Version is 1.0.6567.0018 according to the installer, running on SQL Server 2008 (so a /fullsql install) on Windows 2008R2. Domain controllers are 2008R2 as well. @sukh: policy is set to negotiate signing, which sounds like it can cope with no signature; do you think None is still worth trying?

    I'll run NetMon later this morning - staff briefings and health & safety meetings first, I'm afraid

    Thanks for the responses.

  7. #7

    sonofsanta's Avatar
    Join Date
    Dec 2009
    Location
    Lincolnshire, UK
    Posts
    4,468
    Thank Post
    751
    Thanked 1,211 Times in 853 Posts
    Blog Entries
    45
    Rep Power
    534
    You know what, since rerunning the config (and changing no settings there or anywhere else), I've had no 611's logged. I'm not sure if it's fixed or just trolling me but I can see event 657 (successful password change) logged a few times, and we have had some passwords changed in the office this morning.

    Maybe it's just another symptom of sitting alongside System Center? I'll keep an eye and see how it goes.

  8. #8

    EduTech's Avatar
    Join Date
    Aug 2007
    Location
    Reading
    Posts
    4,982
    Thank Post
    158
    Thanked 889 Times in 700 Posts
    Blog Entries
    3
    Rep Power
    265
    Hi,

    Can you please monitor this, If the Event IDs come back in the next few hours (couple of days possibly) do the following:

    + Open a Support Case with Microsoft

    + Enable Password Sync Verbose Logging

    [Launch DirSync Configuration Console - C:\Program Files\Windows Azure Active Directory Sync\DirSyncConfigShell.psc1
    Enable-PasswordSyncLog -TraceLevel Verbose -FilePath "C:\Dirsync_Log\PasswordSync.log]

    + Take a Network Trace - at rough time of an event occurrence

    Upload to the Support Request for Analysis.

    Many Thanks,
    J

  9. #9

    sonofsanta's Avatar
    Join Date
    Dec 2009
    Location
    Lincolnshire, UK
    Posts
    4,468
    Thank Post
    751
    Thanked 1,211 Times in 853 Posts
    Blog Entries
    45
    Rep Power
    534
    Will do - thanks for the help. Looking back through logs the first 611 of this ilk occurred within an hour of the initial install last Thursday and then recurred every half an hour, so going 4 hours without issue is an improvement. I suspect the tell will be tomorrow morning though, making sure that System Center hasn't borked it overnight.

  10. #10

    EduTech's Avatar
    Join Date
    Aug 2007
    Location
    Reading
    Posts
    4,982
    Thank Post
    158
    Thanked 889 Times in 700 Posts
    Blog Entries
    3
    Rep Power
    265
    Quote Originally Posted by sonofsanta View Post
    Will do - thanks for the help. Looking back through logs the first 611 of this ilk occurred within an hour of the initial install last Thursday and then recurred every half an hour, so going 4 hours without issue is an improvement. I suspect the tell will be tomorrow morning though, making sure that System Center hasn't borked it overnight.
    Don't be fooled by the length of time it may work! ;-) if this is what I think it is...

    James.

  11. #11

    sonofsanta's Avatar
    Join Date
    Dec 2009
    Location
    Lincolnshire, UK
    Posts
    4,468
    Thank Post
    751
    Thanked 1,211 Times in 853 Posts
    Blog Entries
    45
    Rep Power
    534
    Aaaaand saying that it's just logged a 611 client side timeout limit. Will try and get details - getting a case ready to open, turned logging on and just waiting to get a network trace at 13:35. EDIT: service request opened, PMed the reference, files are attached to the service request.
    Last edited by sonofsanta; 13th January 2014 at 01:41 PM.

  12. #12

    EduTech's Avatar
    Join Date
    Aug 2007
    Location
    Reading
    Posts
    4,982
    Thank Post
    158
    Thanked 889 Times in 700 Posts
    Blog Entries
    3
    Rep Power
    265
    Quote Originally Posted by sonofsanta View Post
    Aaaaand saying that it's just logged a 611 client side timeout limit. Will try and get details - getting a case ready to open, turned logging on and just waiting to get a network trace at 13:35. EDIT: service request opened, PMed the reference, files are attached to the service request.
    Thanks.

    James.

  13. #13

    sonofsanta's Avatar
    Join Date
    Dec 2009
    Location
    Lincolnshire, UK
    Posts
    4,468
    Thank Post
    751
    Thanked 1,211 Times in 853 Posts
    Blog Entries
    45
    Rep Power
    534
    FWIW, just spoke to a support guy on the phone, knocked LDAP client signing requirements down to None and a 611 has popped up again, half an hour after the last one. Ran two full syncs while I was on the phone and they were fine, and interestingly seem to have had no effect on the schedule of the 611 events. Will update the service call with this as well.

  14. #14

    EduTech's Avatar
    Join Date
    Aug 2007
    Location
    Reading
    Posts
    4,982
    Thank Post
    158
    Thanked 889 Times in 700 Posts
    Blog Entries
    3
    Rep Power
    265
    I have just spoken with the Engineer. Please Monitor and report back when the event occurs again (as I am convinced it will) :-)

    James.

  15. #15

    sonofsanta's Avatar
    Join Date
    Dec 2009
    Location
    Lincolnshire, UK
    Posts
    4,468
    Thank Post
    751
    Thanked 1,211 Times in 853 Posts
    Blog Entries
    45
    Rep Power
    534
    Still occurring every half an hour - just done so now, in fact - even if I knock the DC down to None on the LDAP requirements as well. Need to finish emailing the support engineer on that one, actually.

    D'you have your suspicions, then?

SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. Replies: 1
    Last Post: 1st April 2014, 01:15 PM
  2. [Office 365] dirsync and changed username
    By Cache in forum Cloud Services
    Replies: 29
    Last Post: 5th October 2013, 12:02 PM
  3. Office 365 DirSync loses connection
    By Marshall_IT in forum Cloud Services
    Replies: 0
    Last Post: 31st July 2013, 11:45 AM
  4. Office 365 Email Back Up and Recovery Options
    By funkyfin2000 in forum Cloud Services
    Replies: 4
    Last Post: 5th June 2013, 10:34 AM
  5. Office 365 - @students sub domain and SSO Question
    By Fruity in forum Cloud Services
    Replies: 2
    Last Post: 9th August 2012, 03:45 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •