CShark

ResolveGrammarActivity doesn't like ma-data SyncConfig-id

noreply@blogger.com (Joe Zamora) — Fri, 10 May 2013 01:02:00 +0000

I tried to set up a workflow that grabs the MA ID and display name whenever an MA changes, but the grammar resolver doesn't like the SyncConfig-id attribute of the ma-data object.

This seemed so close to an error I troubleshot before, but this time I have no control over the attribute type (which is an indexed string, BTW).

Grammar expression: [//Target/SyncConfig-id]

Error:
System.NullReferenceException: Object reference not set to an instance of an object. at Microsoft.ResourceManagement.WFActivities.Resolver.GetDisplayStringFromGuid(Guid id, String[] expansionAttributes) at Microsoft.ResourceManagement.WFActivities.Resolver.ReplaceGuidWithTemplatedString(Match m) at System.Text.RegularExpressions.RegexReplacement.Replace(MatchEvaluator evaluator, Regex regex, String input, Int32 count, Int32 startat) at System.Text.RegularExpressions.Regex.Replace(String input, MatchEvaluator evaluator) at Microsoft.ResourceManagement.WFActivities.Resolver.GetStringAttributeValue(Object attribute) at Microsoft.ResourceManagement.WFActivities.Resolver.ResolveEvaluatorWithoutAntiXSS(String match, ResolverOptions resolveOptions) at Microsoft.ResourceManagement.WFActivities.Resolver.ResolveEvaluatorForWithAntiXSS(String match, ResolverOptions resolveOptions) at Microsoft.ResourceManagement.WFActivities.Resolver.ReplaceMatches(String input, Boolean useAntiXssEncoding, ResolverOptions resolveOptions) at Microsoft.ResourceManagement.Workflow.Hosting.ResolverEvaluationServiceImpl.ResolveLookupGrammar(Guid requestId, Guid targetId, Guid actorId, Dictionary`2 workflowDictionary, Boolean encodeForHTML, String expression) at Microsoft.ResourceManagement.Workflow.Activities.ResolveGrammarActivity.Execute(ActivityExecutionContext executionContext) at System.Workflow.ComponentModel.ActivityExecutor`1.Execute(T activity, ActivityExecutionContext executionContext) at System.Workflow.ComponentModel.ActivityExecutor`1.Execute(Activity activity, ActivityExecutionContext executionContext) at System.Workflow.ComponentModel.ActivityExecutorOperation.Run(IWorkflowCoreRuntime workflowCoreRuntime) at System.Workflow.Runtime.Scheduler.Run()

The term 'Export-FIMConfig' is not recognized as the name of a cmdlet, function, script file, or operable program

noreply@blogger.com (Joe Zamora) — Wed, 17 Apr 2013 15:41:00 +0000

This one had me stumped for a little while. Turns out, there were four versions of the following files hanging out in the GAC. I guess the uninstall process didn't clean these up. I removed all of the older ones, and my scripts started working!

C:\windows\assembly
Microsoft.IdentityManagement.Logging
Microsoft.ResourceManagement

One small addition to Powershell module for end-to-end attribute flows

noreply@blogger.com (Joe Zamora) — Mon, 25 Mar 2013 17:56:00 +0000

Here are some tweaks to the Get-FimSyncConfiguration.psm1 module to include export attribute flows with empty metaverse values in the end-to-end attribute flows. See highlighted sections below.

Reference version:
FIM PowerShell Modules v2.1
http://fimpowershellmodule.codeplex.com/releases/view/98374

Get-ExportAttributeFlow

<#
   .SYNOPSIS 
   Gets the Export Attribute Flow Rules from Sync Server Configuration

   .DESCRIPTION
   Reads the server configuration from the XML files, and outputs the Export Attribute Flow rules as PSObjects

   .OUTPUTS
   PSObjects containing the synchronization server export attribute flow rules
   
   .EXAMPLE
   Get-ExportAttributeFlow-ServerConfigurationFolder"E:\sd\IAM\ITAuthorize\Source\Configuration\FimSync\ServerConfiguration"

#>
Function Get-ExportAttributeFlow
{
   Param
   (       
        [parameter(Mandatory=$false)]
             [String]
             [ValidateScript({Test-Path $_})]
             $ServerConfigurationFolder
   ) 
   End
   {         
             ### This is where the rules will be aggregated before we output them
             $rules =@()
             
             ### Export attribute flow rules are contained in the ma-data nodes of the MA*.XML files
             $maFiles = @(get-item (Join-Path $ServerConfigurationFolder "MA-*.xml"))
             
             
             foreach ($maFile in $maFiles)
             {
                    ### Get the MA Name and MA ID
                   $maName = (select-xml $maFile -XPath "//ma-data/name").Node.InnerText
               
                foreach($exportFlowSet in (Select-Xml -path $maFile -XPath "//export-flow-set" | select -ExpandProperty Node))
                {
                     $mvObjectType = $exportFlowSet.'mv-object-type'
                     $cdObjectType = $exportFlowSet.'cd-object-type'
                     
                     foreach($exportFlow in $exportFlowSet.'export-flow')
                     {
                         $cdAttribute = $exportFlow.'cd-attribute'
                         [bool]$allowNulls = $false
                                 if ([bool]::TryParse($exportFlow.'suppress-deletions', [ref]$allowNulls))
                                 {
                                        $allowNulls = -not $allowNulls
                                 }
                         
                         if ($exportFlow.'direct-mapping' -ne $null)
                         {
                        ###
                        ### Handle src-attribute that are intrinsic (<src-attribute intrinsic="true">object-id</src-attribute>)
                        ###
                        if ($exportFlow.'direct-mapping'.'src-attribute'.intrinsic)
                        {
                            $srcAttribute = "<{0}>" -F $exportFlow.'direct-mapping'.'src-attribute'.'#text'
                        }
                        else
                        {
                                 $srcAttribute = $exportFlow.'direct-mapping'.'src-attribute'
                        }
                             
                             $rule = New-Object PSObject
                             $rule | Add-Member -MemberType noteproperty -name 'RuleType' -value 'DIRECT'
                             $rule | Add-Member -MemberType noteproperty -name 'MAName' -value $maName                
                             $rule | Add-Member -MemberType noteproperty -name 'MVObjectType' -value $mvObjectType
                             $rule | Add-Member -MemberType noteproperty -name 'MVAttribute' -value $srcAttribute
                             $rule | Add-Member -MemberType noteproperty -name 'CDObjectType' -value $cdObjectType
                             $rule | Add-Member -MemberType noteproperty -name 'CDAttribute' -value $cdAttribute
                                        $rule | Add-Member -MemberType noteproperty -name 'ScriptContext' -value $null
                                        $rule | Add-Member -MemberType noteproperty -name 'AllowNulls' -value $allowNulls
                             
                             $rules += $rule
                         }
                         elseif ($exportFlow.'scripted-mapping' -ne $null)
                         {                
                             $scriptContext = $exportFlow.'scripted-mapping'.'script-context'                        
                                        $srcAttributes = @()
                                        
                        ###
                        ### Handle src-attribute that are intrinsic (<src-attribute intrinsic="true">object-id</src-attribute>)
                        ###
                        $exportFlow.'scripted-mapping'.'src-attribute' | ForEach-Object {
                            if ($_.intrinsic)
                            {
                                $srcAttributes += "<{0}>" -F $_.'#text'
                            }
                            elseif ($_) # Do not add empty values.
                            {
                                     $srcAttributes += $_
                            }
                        }
                        # (Commented) Leave as collection.
                        #if ($srcAttributes.Count-eq 1)
                        #{
                        #    $srcAttributes = $srcAttributes -as[String]
                        #}
                                 
                             $rule = New-Object PSObject
                             $rule | Add-Member -MemberType noteproperty -name 'RuleType' -value 'SCRIPTED'
                             $rule | Add-Member -MemberType noteproperty -name 'MAName' -value $maName
                                        $rule | Add-Member -MemberType noteproperty -name 'MVObjectType' -value $mvObjectType
                             $rule | Add-Member -MemberType noteproperty -name 'MVAttribute' -value $srcAttributes
                             $rule | Add-Member -MemberType noteproperty -name 'CDObjectType' -value $cdObjectType
                             $rule | Add-Member -MemberType noteproperty -name 'CDAttribute' -value $cdAttribute 
                             $rule | Add-Member -MemberType noteproperty -name 'ScriptContext' -value $scriptContext
                                        $rule | Add-Member -MemberType noteproperty -name 'AllowNulls' -value $allowNulls
                                             
                             $rules += $rule                        
                         }
                                 elseif ($exportFlow.'sync-rule-mapping' -ne $null)
                                 {
                                        $srcAttribute = $exportFlow.'sync-rule-mapping'.'src-attribute'
                                        if($exportFlow.'sync-rule-mapping'.'mapping-type' -eq 'direct')
                                        {
                                               $rule = New-Object PSObject
                                               $rule | Add-Member -MemberType noteproperty -name 'RuleType' -value 'OSR-Direct'
                                               $rule | Add-Member -MemberType noteproperty -name 'MAName' -value $maName
                                               $rule | Add-Member -MemberType noteproperty -name 'MVObjectType' -value $mvObjectType
                                               $rule | Add-Member -MemberType noteproperty -name 'MVAttribute' -value $srcAttribute
                                               $rule | Add-Member -MemberType noteproperty -name 'CDObjectType' -value $cdObjectType
                                               $rule | Add-Member -MemberType noteproperty -name 'CDAttribute' -value $cdAttribute                                                                                        
                                               $rule | Add-Member -MemberType noteproperty -name 'ScriptContext' -value $null
                                               $rule | Add-Member -MemberType noteproperty -name 'AllowNulls' -value $allowNulls
                                                                         
                                               $rules += $rule             
                                        }
                                        elseif ($exportFlow.'sync-rule-mapping'.'mapping-type' -eq 'expression')
                                        {
                                               $scriptContext = $exportFlow.'sync-rule-mapping'.'sync-rule-value'.'export-flow'.InnerXml
                                               $srcAttribute = $exportFlow.'sync-rule-mapping'.'sync-rule-value'.'export-flow'.dest
                                               $rule = New-Object PSObject
                                               $rule | Add-Member -MemberType noteproperty -name 'RuleType' -value 'OSR-Expression'
                                               $rule | Add-Member -MemberType noteproperty -name 'MAName' -value $maName
                                               $rule | Add-Member -MemberType noteproperty -name 'MVObjectType' -value $mvObjectType
                                               $rule | Add-Member -MemberType noteproperty -name 'MVAttribute' -value $srcAttribute
                                               $rule | Add-Member -MemberType noteproperty -name 'CDObjectType' -value $cdObjectType
                                               $rule | Add-Member -MemberType noteproperty -name 'CDAttribute' -value $cdAttribute                                                                                        
                                               $rule | Add-Member -MemberType noteproperty -name 'ScriptContext' -value $scriptContext
                                               $rule | Add-Member -MemberType noteproperty -name 'AllowNulls' -value $allowNulls
                                                                         
                                               $rules += $rule             
                                        }
                                        else
                                        {
                                               throw "Unsupported Export Flow type"
                                        }
                               
                                 }
                     }
                }
             }
             
             Write-Output $rules
   }#End
}

Join-ImportToExportAttributeFlow


<#
   .SYNOPSIS 
   Gets the Joined Rules where the IAF rules are joined to the EAF rules based on the MV Attributes and Object Types

   .DESCRIPTION
   Reads the server configuration from the XML files, and outputs the Joined IAF and EAF Rules as PSObjects

   .OUTPUTS
   PSObjects containing the synchronization server attribute flow rules
   
   .EXAMPLE
   Join-ImportToExportAttributeFlow-ServerConfigurationFolder"E:\sd\IAM\ITAuthorize\Source\Configuration\FimSync\ServerConfiguration"
   
#>
Function Join-ImportToExportAttributeFlow
{
    [CmdletBinding()]
       Param
       (        
        [parameter(Mandatory=$false)]
             [String]
             [ValidateScript({Test-Path $_})]
              $ServerConfigurationFolder
       ) 
       End
       {
             ### Get the Import Attribute Flow Rules
             $IAF = Get-ImportAttributeFlow -ServerConfigurationFolder $ServerConfigurationFolder
             
             ### Get the Export Attribute Flow Rules
             $EAF = Get-ExportAttributeFlow -ServerConfigurationFolder $ServerConfigurationFolder

             ### This is where the rules will be aggregated before we output them
             $e2eFlowRules =@()
             foreach ($iafRule in $IAF)
             {
                ### Look for a corresponding EAF rule    
                $eafMatches = @($EAF | where {$_.'MVAttribute' -contains $iafRule.'MVAttribute' -and $_.'MVObjectType' -eq $iafRule.'MVObjectType'})

                    ### There may be multiple EAF rule for each IAF rules
                if ($eafMatches.count -gt 0)
                {
                     foreach($eafRule in $eafMatches)
                     {                        
                         $e2eFlowRuleProperties =@{            
                             'IAFRuleType'          = $iafRule.'RuleType'
                             'IAFSourceMA'          = $iafRule.'SourceMA'
                             'IAFCDObjectType'      = $iafRule.'CDObjectType'
                             'IAFCDAttribute'       = $iafRule.'CDAttribute'
                             'IAFScriptContext'     = $iafRule.'ScriptContext'
                             'IAFPrecedenceType'    = $iafRule.'PrecedenceType'
                             'IAFPrecedenceRank'    = $iafRule.'PrecedenceRank'
                             'MVObjectType'         = $iafRule.'MVObjectType'
                             'MVAttribute'          = $iafRule.'MVAttribute'
                             'EAFMVAttribute'       = $eafRule.'MVAttribute'
                             'EAFCDAttribute'       = $eafRule.'CDAttribute'
                             'EAFTargetMA'          = $eafRule.'MAName'
                             'EAFCDObjectType'      = $eafRule.'CDObjectType'
                             'EAFRuleType'          = $eafRule.'RuleType'
                              'EAFScriptContext'     = $eafRule.'ScriptContext'
                         }
                         
                         $e2eFlowRules += New-Object PSObject -Property $e2eFlowRuleProperties 
                     }
                }
                    ### It is possible there are NO EAF rules for an IAF rule
                    ### here we stuff $null into the EAF side to make our output easy to consume for Out-GridView and Compare-Object
                    ### otherwise jagged objects seem to confuse things
                    ###
                    ### In this case the rule may be useless
                    ### Or the use of that MV attribute may not be visible here because some rules extension calls it (need to check the source code to confirm)
                else
                {
                    $e2eFlowRuleProperties =@{            
                             'IAFRuleType'          = $iafRule.'RuleType'
                             'IAFSourceMA'          = $iafRule.'SourceMA'
                             'IAFCDObjectType'      = $iafRule.'CDObjectType'
                             'IAFCDAttribute'       = $iafRule.'CDAttribute'
                             'IAFScriptContext'     = $iafRule.'ScriptContext'
                             'IAFPrecedenceType'    = $iafRule.'PrecedenceType'
                             'IAFPrecedenceRank'    = $iafRule.'PrecedenceRank'
                             'MVObjectType'         = $iafRule.'MVObjectType'
                             'MVAttribute'          = $iafRule.'MVAttribute'
                             'EAFMVAttribute'       = $null
                             'EAFCDAttribute'       = $null
                             'EAFTargetMA'          = $null
                             'EAFCDObjectType'      = $null
                             'EAFRuleType'          = $null
                             'EAFScriptContext'     = $null
                         }
                         
                    $e2eFlowRules += New-Object PSObject -Property $e2eFlowRuleProperties 
                }
             }

        ### There's one more case in which the MV attribute is blank for an EAF.
       foreach ($eafRule in @($EAF | where {$_.'MVAttribute'.count -eq 0}))
       {
            Write-Verbose $eafRule
            $e2eFlowRuleProperties = @{            
                'IAFRuleType'          = $null
                'IAFSourceMA'          = $null
                'IAFCDObjectType'      = $null
                'IAFCDAttribute'       = $null
                'IAFScriptContext'     = $null
                'IAFPrecedenceType'    = $null
                'IAFPrecedenceRank'    = $null
                'MVObjectType'         = $null
                'MVAttribute'          = $null
                'EAFMVAttribute'       = $eafRule.'MVAttribute'
                'EAFCDAttribute'       = $eafRule.'CDAttribute'
                'EAFTargetMA'          = $eafRule.'MAName'
                'EAFCDObjectType'      = $eafRule.'CDObjectType'
                'EAFRuleType'          = $eafRule.'RuleType'
                'EAFScriptContext'     = $eafRule.'ScriptContext'
            }
                         
              $e2eFlowRules += New-Object PSObject -Property $e2eFlowRuleProperties 
       }

             $e2eFlowRules | select `
             'IAFSourceMA',`
             'IAFCDObjectType',`
             'IAFCDAttribute',`
             'IAFRuleType',`
             'IAFScriptContext',`
             'IAFPrecedenceType',`
             'IAFPrecedenceRank',`
             'MVObjectType',`
             'MVAttribute',`
             'EAFMVAttribute',`
             'EAFTargetMA',`
             'EAFCDObjectType',`
             'EAFCDAttribute',`
             'EAFRuleType',`
             'EAFScriptContext'`
       }
}

Fixed! FIM Sync hang/crash and performance counters

noreply@blogger.com (Joe Zamora) — Thu, 28 Feb 2013 18:46:00 +0000

Ran into an issue where the FIM Sync service was hung up pretty badly. Eventually, I was able to fix it, and fixed the performance counters along the way (although I'm not entirely sure the two had a direct correlation).

At 8AM, Full sync had been running since 3:49AM

SQL Server MA

miiserver.exe was unresponsive

Tried to stop run profile --> nothing

Tried to stop service --> nothing

Had to kill the process

Afterwards, service randomly crashed
Ran Storechk.exe --> no issues
Manually checked for broken CS-MV links --> no issues
Resolution

Deleted run history

Rebuilt indexes on FIMSynchronizationService

Reinstalled Performance counters

Reinstall performance counters

The server encountered an unexpected error creating performance counters for management agent "Foobar". Performance counters will not be available for this management agent.

Tried to reinstall performance counters --> no luck

C:\WINDOWS\system32>lodctr.exe "C:\Program Files\Microsoft Forefront Identity Manager\2010\Synchronization Service\Bin\mmsperf.ini"

Counters for FIMSynchronizationService are already installed
Queried FIM Sync performance counters, and noticed that they were disabled.

C:\WINDOWS\system32>lodctr.exe /q:FIMSynchronizationService

Performance Counter ID Queries [PERFLIB]:

Base Index: 0x00000737 (1847)

Last Counter Text ID: 0x0000265A (9818)

Last Help Text ID: 0x0000265B (9819)

[FIMSynchronizationService] Performance Counters (Disabled)

DLL Name: C:\Program Files\Microsoft Forefront Identity Manager\2010\Synchronization Service\Bin\mmsperf.dll

Open Procedure: PrfData_Open

Collect Procedure: PrfData_Collect

Close Procedure: PrfData_Close

First Counter ID: 0x000024AE (9390)

Last Counter ID: 0x0000251C (9500)

First Help ID: 0x000024AF (9391)

Last Help ID: 0x0000251D (9501)
Tried to enable FIM Sync perf counters --> no change

C:\WINDOWS\system32>lodctr.exe /e:FIMSynchronizationService

C:\WINDOWS\system32>lodctr.exe /q:FIMSynchronizationService

Performance Counter ID Queries [PERFLIB]:

Base Index: 0x00000737 (1847)

Last Counter Text ID: 0x0000265A (9818)

Last Help Text ID: 0x0000265B (9819)

[FIMSynchronizationService] Performance Counters (Enabled)

DLL Name: C:\Program Files\Microsoft Forefront Identity Manager\2010\Synchronization Service\Bin\mmsperf.dll

Open Procedure: PrfData_Open

Collect Procedure: PrfData_Collect

Close Procedure: PrfData_Close

First Counter ID: 0x000024AE (9390)

Last Counter ID: 0x0000251C (9500)

First Help ID: 0x000024AF (9391)

Last Help ID: 0x0000251D (9501)
Tried to unload FIM Sync perf counters --> couldn't get it to work

C:\WINDOWS\system32>unlodctr \\SERVER01 FIMSynchronizationService

Usage:

UNLODCTR [\\computername] driver
Deleted registry key

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\FIMSynchronizationService\Performance]
Manually created 'Performance' registry key.
Reinstalled performance counters --> FIXED!

lodctr.exe "C:\Program Files\Microsoft Forefront Identity Manager\2010\Synchronization Service\Bin\mmsperf.ini"

References

http://stackoverflow.com/questions/140149/deleting-windows-performance-counter-categories

http://www.identitytrench.com/2010/08/sync-performance-counters.html

Minimum set of search scope attributes to allow users to read other users

noreply@blogger.com (Joe Zamora) — Thu, 13 Sep 2012 23:14:00 +0000

This one took me a while to track down. I created a search scope for managers (and their assistants) to read their direct reports and their direct reports' direct reports in the FIM portal. (I.e. a user may be read by her manager and her manager's manager; as well as an assistant of either said manager.) Then I created an MPR to grant permissions for the managers to see these reports. The trouble is, if you don't want to select All Attributes for Target Resources - Resource Attributes, what is the minimum set of attributes that you have to use in order for this search scope to work?

In fact, I never did find the answer in any official documentation. Instead, I stumbled upon the answer in a forum answer that came from Brad Turner's impressive tribal knowledge of the product. Here's Brad's answer:

"Correct, users will need rights to Read the scope and any object returned in the scope including the attributes you list in the ColumnsToDisplay as well as the ObjectID and ObjectType even though it may not be displayed. It's typically ColumnsToDisplay + any attributes in the query filter."

Also, in case you're wondering, here's the XPath that I used for the search scope:

/Person[Manager = '%LoginID%'] |
/Person[Manager = /Person[Manager ='%LoginID%']] |
/Person[Manager = /Person[Assistant = '%LoginID%']] |
/Person[Manager = /Person[Manager = /Person[Assistant = '%LoginID%']]]

Hide Advanced Search button on Users page

noreply@blogger.com (Joe Zamora) — Thu, 13 Sep 2012 00:34:00 +0000

Here's how you can hide the Advanced Search button on the default Users page in the FIM portal.

There are a few things to keep in mind:

You have to edit the ASPX page in Sharepoint designer. This is not a supported change!
You can hide the ASP control by inserting some Javascript on the page.
You must call the Javascript upon load as well as upon AJAX response.

And here are the steps to accomplish it:

Open the IdentityManagement site in Sharepoint Designer.
Make a backup of aspx/users/AllPersons.aspx.
Add the following javascript:

Note that it's very important that the Javascript code go inside the tags.

<%@ Page masterpagefile="~masterurl/custom.master" language="C#" inherits="Microsoft.SharePoint.WebPartPages.WebPartPage, Microsoft.SharePoint, Version=12.0.0.0, Culture=neutral, PublicKeyToken=71e9bce111e9429c" meta:progid="SharePoint.WebPartPage.Document"  UICulture="auto" Culture="auto" %>
<%@ Register Tagprefix="SharePoint" Namespace="Microsoft.SharePoint.WebControls" Assembly="Microsoft.SharePoint, Version=12.0.0.0, Culture=neutral, PublicKeyToken=71e9bce111e9429c" %> <%@ Register Tagprefix="Utilities" Namespace="Microsoft.SharePoint.Utilities" Assembly="Microsoft.SharePoint, Version=12.0.0.0, Culture=neutral, PublicKeyToken=71e9bce111e9429c" %> <%@ Import Namespace="Microsoft.SharePoint" %> <%@ Register Tagprefix="WebPartPages" Namespace="Microsoft.SharePoint.WebPartPages" Assembly="Microsoft.SharePoint, Version=12.0.0.0, Culture=neutral, PublicKeyToken=71e9bce111e9429c" %>
<asp:Content ContentPlaceHolderID="PlaceHolderTitleBar" runat="server">
<script type="text/javascript">
<!--
    function hideElementByClass(matchClass) {
        var elems = document.getElementsByTagName('*'), i;
        for (i in elems) {
            if ((" " + elems[i].className + " ").indexOf(" " + matchClass + " ") > -1) {
                elems[i].style.display = 'none';
            }
        }
    }
    function hideAdvancedSearch() {
        hideElementByClass('newListViewSearchMode');
        hideElementByClass('searchModeToggleImage');
    }
    window.onload = function () {
        hideAdvancedSearch();
    }
    Sys.WebForms.PageRequestManager.getInstance().add_endRequest(hideAdvancedSearch);
// -->
</script>
</asp:Content>
 
<asp:Content id="content1" ContentPlaceHolderID="PlaceHolderMain" runat="server">
 <IdentityManagement:PersonList id="PersonList"  width="100%" height="100%" runat="server"/>
</asp:Content>

References

The content of element type "properties" must match "(comment?,entry*)".

noreply@blogger.com (Joe Zamora) — Thu, 12 Jan 2012 19:33:00 +0000

I'm trying to make my Java XML properties file a little more human-readable by breaking the entries into blocks. Evidently my assumptions on how to do this were wrong. Here are the error, cause, and solution:

Error:

java.util.InvalidPropertiesFormatException: org.xml.sax.SAXParseException: The content of element type "properties" must match "(comment?,entry*)".

Cause:

<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE properties SYSTEM "http://java.sun.com/dtd/properties.dtd">
<properties>
 
    <comment>---SQL settings---</comment>
    <entry key="SQLJNDIName">SQLDataSource</entry>
    <entry key="SQLServerName">server01</entry>
    <entry key="SQLPortNumber">12345</entry>
    <entry key="SQLDatabaseName">db01</entry>
    <entry key="SQLUser">user01</entry>
    <entry key="SQLPassword">changeme</entry>
    <entry key="SQLTableOwner">dbo</entry>
 
    <comment>---TEST settings---</comment>
    <entry key="TEST">TEST</entry>
 
</properties>

Solution: I changed the comment elements into XML comments, and it worked.

<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE properties SYSTEM "http://java.sun.com/dtd/properties.dtd">
<properties>
 
    <!--SQL settings-->
    <entry key="SQLJNDIName">SQLDataSource</entry>
    <entry key="SQLServerName">server01</entry>
    <entry key="SQLPortNumber">12345</entry>
    <entry key="SQLDatabaseName">db01</entry>
    <entry key="SQLUser">user01</entry>
    <entry key="SQLPassword">changeme</entry>
    <entry key="SQLTableOwner">dbo</entry>
 
    <!--TEST settings-->
    <entry key="TEST">TEST</entry>
 
</properties>

Java 1.5 JRE Exception List

noreply@blogger.com (Joe Zamora) — Thu, 12 Jan 2012 17:40:00 +0000

Got this with the help of jar-explorer.

deploy.jar : com/sun/deploy/association/AssociationAlreadyRegisteredException.class

deploy.jar : com/sun/deploy/association/AssociationException.class

deploy.jar : com/sun/deploy/association/AssociationNotRegisteredException.class

deploy.jar : com/sun/deploy/association/RegisterFailedException.class

deploy.jar : com/sun/deploy/net/cookie/CookieUnavailableException.class

deploy.jar : com/sun/deploy/net/proxy/ProxyConfigException.class

deploy.jar : com/sun/deploy/net/proxy/ProxyUnavailableException.class

deploy.jar : com/sun/deploy/security/CertificateConfigException.class

deploy.jar : com/sun/deploy/xml/BadTokenException.class

sunpkcs11.jar : sun/security/pkcs11/ConfigurationException.class

sunpkcs11.jar : sun/security/pkcs11/wrapper/PKCS11Exception.class

sunpkcs11.jar : sun/security/pkcs11/wrapper/PKCS11RuntimeException.class

javaws.jar : com/sun/javaws/exceptions/BadFieldException.class

javaws.jar : com/sun/javaws/exceptions/BadJARFileException.class

javaws.jar : com/sun/javaws/exceptions/BadMimeTypeResponseException.class

javaws.jar : com/sun/javaws/exceptions/BadVersionResponseException.class

javaws.jar : com/sun/javaws/exceptions/CacheAccessException.class

javaws.jar : com/sun/javaws/exceptions/CouldNotLoadArgumentException.class

javaws.jar : com/sun/javaws/exceptions/DownloadException.class

javaws.jar : com/sun/javaws/exceptions/ErrorCodeResponseException.class

javaws.jar : com/sun/javaws/exceptions/ExitException.class

javaws.jar : com/sun/javaws/exceptions/FailedDownloadingResourceException.class

javaws.jar : com/sun/javaws/exceptions/InvalidJarDiffException.class

javaws.jar : com/sun/javaws/exceptions/JARSigningException.class

javaws.jar : com/sun/javaws/exceptions/JNLParseException.class

javaws.jar : com/sun/javaws/exceptions/JNLPException.class

javaws.jar : com/sun/javaws/exceptions/JNLPSigningException.class

javaws.jar : com/sun/javaws/exceptions/JreExecException.class

javaws.jar : com/sun/javaws/exceptions/LaunchDescException.class

javaws.jar : com/sun/javaws/exceptions/MissingFieldException.class

javaws.jar : com/sun/javaws/exceptions/MissingVersionResponseException.class

javaws.jar : com/sun/javaws/exceptions/MultipleHostsException.class

javaws.jar : com/sun/javaws/exceptions/NativeLibViolationException.class

javaws.jar : com/sun/javaws/exceptions/NoLocalJREException.class

javaws.jar : com/sun/javaws/exceptions/OfflineLaunchException.class

javaws.jar : com/sun/javaws/exceptions/TooManyArgumentsException.class

javaws.jar : com/sun/javaws/exceptions/UnsignedAccessViolationException.class

javaws.jar : com/sun/javaws/net/CanceledDownloadException.class

javaws.jar : javax/jnlp/UnavailableServiceException.class

jce.jar : javax/crypto/BadPaddingException.class

jce.jar : javax/crypto/ExemptionMechanismException.class

jce.jar : javax/crypto/IllegalBlockSizeException.class

jce.jar : javax/crypto/NoSuchPaddingException.class

jce.jar : javax/crypto/ShortBufferException.class

jsse.jar : javax/net/ssl/SSLException.class

jsse.jar : javax/net/ssl/SSLHandshakeException.class

jsse.jar : javax/net/ssl/SSLKeyException.class

jsse.jar : javax/net/ssl/SSLPeerUnverifiedException.class

jsse.jar : javax/net/ssl/SSLProtocolException.class

jsse.jar : javax/security/cert/CertificateEncodingException.class

jsse.jar : javax/security/cert/CertificateException.class

jsse.jar : javax/security/cert/CertificateExpiredException.class

jsse.jar : javax/security/cert/CertificateNotYetValidException.class

jsse.jar : javax/security/cert/CertificateParsingException.class

plugin.jar : netscape/javascript/JSException.class

plugin.jar : netscape/security/ForbiddenTargetException.class

plugin.jar : sun/plugin/cache/DownloadException.class

plugin.jar : sun/plugin/cache/JarCacheVersionException.class

plugin.jar : sun/plugin/dom/exception/BrowserNotSupportedException.class

plugin.jar : sun/plugin/dom/exception/HierarchyRequestException.class

plugin.jar : sun/plugin/dom/exception/InvalidAccessException.class

plugin.jar : sun/plugin/dom/exception/InvalidStateException.class

plugin.jar : sun/plugin/dom/exception/NoModificationAllowedException.class

plugin.jar : sun/plugin/dom/exception/PluginNotSupportedException.class

plugin.jar : sun/plugin/dom/exception/WrongDocumentException.class

plugin.jar : sun/plugin/liveconnect/OriginNotAllowedException.class

rt.jar : com/sun/corba/se/impl/corba/ExceptionListImpl.class

rt.jar : com/sun/corba/se/impl/io/OptionalDataException.class

rt.jar : com/sun/corba/se/impl/io/TypeMismatchException.class

rt.jar : com/sun/corba/se/impl/logging/ActivationSystemException$1.class

rt.jar : com/sun/corba/se/impl/logging/ActivationSystemException.class

rt.jar : com/sun/corba/se/impl/logging/InterceptorsSystemException$1.class

rt.jar : com/sun/corba/se/impl/logging/InterceptorsSystemException.class

rt.jar : com/sun/corba/se/impl/logging/IORSystemException$1.class

rt.jar : com/sun/corba/se/impl/logging/IORSystemException.class

rt.jar : com/sun/corba/se/impl/logging/NamingSystemException$1.class

rt.jar : com/sun/corba/se/impl/logging/NamingSystemException.class

rt.jar : com/sun/corba/se/impl/logging/OMGSystemException$1.class

rt.jar : com/sun/corba/se/impl/logging/OMGSystemException.class

rt.jar : com/sun/corba/se/impl/logging/ORBUtilSystemException$1.class

rt.jar : com/sun/corba/se/impl/logging/ORBUtilSystemException.class

rt.jar : com/sun/corba/se/impl/logging/POASystemException$1.class

rt.jar : com/sun/corba/se/impl/logging/POASystemException.class

rt.jar : com/sun/corba/se/impl/logging/UtilSystemException$1.class

rt.jar : com/sun/corba/se/impl/logging/UtilSystemException.class

rt.jar : com/sun/corba/se/impl/orbutil/threadpool/TimeoutException.class

rt.jar : com/sun/corba/se/impl/presentation/rmi/ExceptionHandler.class

rt.jar : com/sun/corba/se/impl/presentation/rmi/ExceptionHandlerImpl$ExceptionRW.class

rt.jar : com/sun/corba/se/impl/presentation/rmi/ExceptionHandlerImpl$ExceptionRWBase.class

rt.jar : com/sun/corba/se/impl/presentation/rmi/ExceptionHandlerImpl$ExceptionRWIDLImpl.class

rt.jar : com/sun/corba/se/impl/presentation/rmi/ExceptionHandlerImpl$ExceptionRWRMIImpl.class

rt.jar : com/sun/corba/se/impl/presentation/rmi/ExceptionHandlerImpl.class

rt.jar : com/sun/corba/se/impl/presentation/rmi/IDLTypeException.class

rt.jar : com/sun/corba/se/impl/protocol/AddressingDispositionException.class

rt.jar : com/sun/corba/se/impl/protocol/RequestCanceledException.class

rt.jar : com/sun/corba/se/spi/copyobject/ReflectiveCopyException.class

rt.jar : com/sun/corba/se/spi/legacy/connection/GetEndPointInfoAgainException.class

rt.jar : com/sun/corba/se/spi/orbutil/threadpool/NoSuchThreadPoolException.class

rt.jar : com/sun/corba/se/spi/orbutil/threadpool/NoSuchWorkQueueException.class

rt.jar : com/sun/corba/se/spi/protocol/ForwardException.class

rt.jar : com/sun/image/codec/jpeg/ImageFormatException.class

rt.jar : com/sun/image/codec/jpeg/TruncatedFileException.class

rt.jar : com/sun/imageio/plugins/jpeg/JFIFMarkerSegment$IllegalThumbException.class

rt.jar : com/sun/java/browser/dom/DOMAccessException.class

rt.jar : com/sun/java/browser/dom/DOMUnsupportedException.class

rt.jar : com/sun/java/util/jar/pack/Attribute$FormatException.class

rt.jar : com/sun/jmx/snmp/BerException.class

rt.jar : com/sun/jmx/snmp/daemon/CommunicationException.class

rt.jar : com/sun/jmx/snmp/IPAcl/ParseException.class

rt.jar : com/sun/jmx/snmp/SnmpBadSecurityLevelException.class

rt.jar : com/sun/jmx/snmp/SnmpSecurityException.class

rt.jar : com/sun/jmx/snmp/SnmpStatusException.class

rt.jar : com/sun/jmx/snmp/SnmpTooBigException.class

rt.jar : com/sun/jmx/snmp/SnmpUnknownAccContrModelException.class

rt.jar : com/sun/jmx/snmp/SnmpUnknownModelException.class

rt.jar : com/sun/jmx/snmp/SnmpUnknownModelLcdException.class

rt.jar : com/sun/jmx/snmp/SnmpUnknownMsgProcModelException.class

rt.jar : com/sun/jmx/snmp/SnmpUnknownSecModelException.class

rt.jar : com/sun/jmx/snmp/SnmpUnknownSubSystemException.class

rt.jar : com/sun/jndi/cosnaming/ExceptionMapper$1.class

rt.jar : com/sun/jndi/cosnaming/ExceptionMapper$2.class

rt.jar : com/sun/jndi/cosnaming/ExceptionMapper.class

rt.jar : com/sun/jndi/ldap/Ber$DecodeException.class

rt.jar : com/sun/jndi/ldap/Ber$EncodeException.class

rt.jar : com/sun/jndi/ldap/LdapReferralException.class

rt.jar : com/sun/org/apache/bcel/internal/classfile/CodeException.class

rt.jar : com/sun/org/apache/bcel/internal/classfile/ExceptionTable.class

rt.jar : com/sun/org/apache/bcel/internal/ExceptionConstants.class

rt.jar : com/sun/org/apache/bcel/internal/generic/ClassGenException.class

rt.jar : com/sun/org/apache/bcel/internal/generic/CodeExceptionGen.class

rt.jar : com/sun/org/apache/bcel/internal/generic/ExceptionThrower.class

rt.jar : com/sun/org/apache/bcel/internal/generic/TargetLostException.class

rt.jar : com/sun/org/apache/bcel/internal/verifier/exc/AssertionViolatedException.class

rt.jar : com/sun/org/apache/bcel/internal/verifier/exc/ClassConstraintException.class

rt.jar : com/sun/org/apache/bcel/internal/verifier/exc/CodeConstraintException.class

rt.jar : com/sun/org/apache/bcel/internal/verifier/exc/InvalidMethodException.class

rt.jar : com/sun/org/apache/bcel/internal/verifier/exc/LinkingConstraintException.class

rt.jar : com/sun/org/apache/bcel/internal/verifier/exc/LoadingException.class

rt.jar : com/sun/org/apache/bcel/internal/verifier/exc/LocalVariableInfoInconsistentException.class

rt.jar : com/sun/org/apache/bcel/internal/verifier/exc/StaticCodeConstraintException.class

rt.jar : com/sun/org/apache/bcel/internal/verifier/exc/StaticCodeInstructionConstraintException.class

rt.jar : com/sun/org/apache/bcel/internal/verifier/exc/StaticCodeInstructionOperandConstraintException.class

rt.jar : com/sun/org/apache/bcel/internal/verifier/exc/StructuralCodeConstraintException.class

rt.jar : com/sun/org/apache/bcel/internal/verifier/exc/VerificationException.class

rt.jar : com/sun/org/apache/bcel/internal/verifier/exc/VerifierConstraintViolatedException.class

rt.jar : com/sun/org/apache/bcel/internal/verifier/structurals/ExceptionHandler.class

rt.jar : com/sun/org/apache/bcel/internal/verifier/structurals/ExceptionHandlers.class

rt.jar : com/sun/org/apache/regexp/internal/RESyntaxException.class

rt.jar : com/sun/org/apache/xalan/internal/xsltc/cmdline/getopt/GetOptsException.class

rt.jar : com/sun/org/apache/xalan/internal/xsltc/cmdline/getopt/IllegalArgumentException.class

rt.jar : com/sun/org/apache/xalan/internal/xsltc/cmdline/getopt/MissingOptArgException.class

rt.jar : com/sun/org/apache/xalan/internal/xsltc/compiler/CompilerException.class

rt.jar : com/sun/org/apache/xalan/internal/xsltc/compiler/IllegalCharException.class

rt.jar : com/sun/org/apache/xalan/internal/xsltc/TransletException.class

rt.jar : com/sun/org/apache/xerces/internal/dom/RangeExceptionImpl.class

rt.jar : com/sun/org/apache/xerces/internal/dom3/as/DOMASException.class

rt.jar : com/sun/org/apache/xerces/internal/impl/dv/DatatypeException.class

rt.jar : com/sun/org/apache/xerces/internal/impl/dv/DVFactoryException.class

rt.jar : com/sun/org/apache/xerces/internal/impl/dv/InvalidDatatypeFacetException.class

rt.jar : com/sun/org/apache/xerces/internal/impl/dv/InvalidDatatypeValueException.class

rt.jar : com/sun/org/apache/xerces/internal/impl/dv/xs/SchemaDateTimeException.class

rt.jar : com/sun/org/apache/xerces/internal/impl/io/MalformedByteSequenceException.class

rt.jar : com/sun/org/apache/xerces/internal/impl/xpath/regex/ParseException.class

rt.jar : com/sun/org/apache/xerces/internal/impl/xpath/XPathException.class

rt.jar : com/sun/org/apache/xerces/internal/impl/xs/XMLSchemaException.class

rt.jar : com/sun/org/apache/xerces/internal/jaxp/validation/WrappedSAXException.class

rt.jar : com/sun/org/apache/xerces/internal/util/URI$MalformedURIException.class

rt.jar : com/sun/org/apache/xerces/internal/xni/parser/XMLConfigurationException.class

rt.jar : com/sun/org/apache/xerces/internal/xni/parser/XMLParseException.class

rt.jar : com/sun/org/apache/xerces/internal/xni/XNIException.class

rt.jar : com/sun/org/apache/xerces/internal/xs/XSException.class

rt.jar : com/sun/org/apache/xml/internal/dtm/DTMConfigurationException.class

rt.jar : com/sun/org/apache/xml/internal/dtm/DTMDOMException.class

rt.jar : com/sun/org/apache/xml/internal/dtm/DTMException.class

rt.jar : com/sun/org/apache/xml/internal/dtm/ref/DTMNamedNodeMap$DTMException.class

rt.jar : com/sun/org/apache/xml/internal/dtm/ref/IncrementalSAXSource_Filter$StopException.class

rt.jar : com/sun/org/apache/xml/internal/utils/StopParseException.class

rt.jar : com/sun/org/apache/xml/internal/utils/URI$MalformedURIException.class

rt.jar : com/sun/org/apache/xml/internal/utils/WrappedRuntimeException.class

rt.jar : com/sun/org/apache/xml/internal/utils/WrongParserException.class

rt.jar : com/sun/org/apache/xpath/internal/functions/WrongNumberArgsException.class

rt.jar : com/sun/org/apache/xpath/internal/XPathException.class

rt.jar : com/sun/org/apache/xpath/internal/XPathProcessorException.class

rt.jar : com/sun/org/omg/CORBA/ExceptionDescription.class

rt.jar : com/sun/org/omg/CORBA/ExceptionDescriptionHelper.class

rt.jar : com/sun/security/auth/PolicyParser$ParsingException.class

rt.jar : java/awt/AWTException.class

rt.jar : java/awt/color/CMMException.class

rt.jar : java/awt/color/ProfileDataException.class

rt.jar : java/awt/datatransfer/MimeTypeParseException.class

rt.jar : java/awt/datatransfer/UnsupportedFlavorException.class

rt.jar : java/awt/dnd/InvalidDnDOperationException.class

rt.jar : java/awt/FontFormatException.class

rt.jar : java/awt/geom/IllegalPathStateException.class

rt.jar : java/awt/geom/NoninvertibleTransformException.class

rt.jar : java/awt/HeadlessException.class

rt.jar : java/awt/IllegalComponentStateException.class

rt.jar : java/awt/image/ImagingOpException.class

rt.jar : java/awt/image/RasterFormatException.class

rt.jar : java/awt/print/PrinterAbortException.class

rt.jar : java/awt/print/PrinterException.class

rt.jar : java/awt/print/PrinterIOException.class

rt.jar : java/beans/ExceptionListener.class

rt.jar : java/beans/IntrospectionException.class

rt.jar : java/beans/PropertyVetoException.class

rt.jar : java/io/CharConversionException.class

rt.jar : java/io/EOFException.class

rt.jar : java/io/FileNotFoundException.class

rt.jar : java/io/InterruptedIOException.class

rt.jar : java/io/InvalidClassException.class

rt.jar : java/io/InvalidObjectException.class

rt.jar : java/io/IOException.class

rt.jar : java/io/NotActiveException.class

rt.jar : java/io/NotSerializableException.class

rt.jar : java/io/ObjectStreamException.class

rt.jar : java/io/OptionalDataException.class

rt.jar : java/io/StreamCorruptedException.class

rt.jar : java/io/SyncFailedException.class

rt.jar : java/io/UnsupportedEncodingException.class

rt.jar : java/io/UTFDataFormatException.class

rt.jar : java/io/WriteAbortedException.class

rt.jar : java/lang/annotation/AnnotationTypeMismatchException.class

rt.jar : java/lang/annotation/IncompleteAnnotationException.class

rt.jar : java/lang/ArithmeticException.class

rt.jar : java/lang/ArrayIndexOutOfBoundsException.class

rt.jar : java/lang/ArrayStoreException.class

rt.jar : java/lang/ClassCastException.class

rt.jar : java/lang/ClassNotFoundException.class

rt.jar : java/lang/CloneNotSupportedException.class

rt.jar : java/lang/EnumConstantNotPresentException.class

rt.jar : java/lang/Exception.class

rt.jar : java/lang/ExceptionInInitializerError.class

rt.jar : java/lang/IllegalAccessException.class

rt.jar : java/lang/IllegalArgumentException.class

rt.jar : java/lang/IllegalMonitorStateException.class

rt.jar : java/lang/IllegalStateException.class

rt.jar : java/lang/IllegalThreadStateException.class

rt.jar : java/lang/IndexOutOfBoundsException.class

rt.jar : java/lang/InstantiationException.class

rt.jar : java/lang/instrument/IllegalClassFormatException.class

rt.jar : java/lang/instrument/UnmodifiableClassException.class

rt.jar : java/lang/InterruptedException.class

rt.jar : java/lang/NegativeArraySizeException.class

rt.jar : java/lang/NoSuchFieldException.class

rt.jar : java/lang/NoSuchMethodException.class

rt.jar : java/lang/NullPointerException.class

rt.jar : java/lang/NumberFormatException.class

rt.jar : java/lang/reflect/InvocationTargetException.class

rt.jar : java/lang/reflect/MalformedParameterizedTypeException.class

rt.jar : java/lang/reflect/UndeclaredThrowableException.class

rt.jar : java/lang/RuntimeException.class

rt.jar : java/lang/SecurityException.class

rt.jar : java/lang/StringIndexOutOfBoundsException.class

rt.jar : java/lang/Thread$UncaughtExceptionHandler.class

rt.jar : java/lang/TypeNotPresentException.class

rt.jar : java/lang/UnsupportedOperationException.class

rt.jar : java/net/BindException.class

rt.jar : java/net/ConnectException.class

rt.jar : java/net/HttpRetryException.class

rt.jar : java/net/MalformedURLException.class

rt.jar : java/net/NoRouteToHostException.class

rt.jar : java/net/PortUnreachableException.class

rt.jar : java/net/ProtocolException.class

rt.jar : java/net/SocketException.class

rt.jar : java/net/SocketTimeoutException.class

rt.jar : java/net/UnknownHostException.class

rt.jar : java/net/UnknownServiceException.class

rt.jar : java/net/URISyntaxException.class

rt.jar : java/nio/BufferOverflowException.class

rt.jar : java/nio/BufferUnderflowException.class

rt.jar : java/nio/channels/AlreadyConnectedException.class

rt.jar : java/nio/channels/AsynchronousCloseException.class

rt.jar : java/nio/channels/CancelledKeyException.class

rt.jar : java/nio/channels/ClosedByInterruptException.class

rt.jar : java/nio/channels/ClosedChannelException.class

rt.jar : java/nio/channels/ClosedSelectorException.class

rt.jar : java/nio/channels/ConnectionPendingException.class

rt.jar : java/nio/channels/FileLockInterruptionException.class

rt.jar : java/nio/channels/IllegalBlockingModeException.class

rt.jar : java/nio/channels/IllegalSelectorException.class

rt.jar : java/nio/channels/NoConnectionPendingException.class

rt.jar : java/nio/channels/NonReadableChannelException.class

rt.jar : java/nio/channels/NonWritableChannelException.class

rt.jar : java/nio/channels/NotYetBoundException.class

rt.jar : java/nio/channels/NotYetConnectedException.class

rt.jar : java/nio/channels/OverlappingFileLockException.class

rt.jar : java/nio/channels/UnresolvedAddressException.class

rt.jar : java/nio/channels/UnsupportedAddressTypeException.class

rt.jar : java/nio/charset/CharacterCodingException.class

rt.jar : java/nio/charset/IllegalCharsetNameException.class

rt.jar : java/nio/charset/MalformedInputException.class

rt.jar : java/nio/charset/UnmappableCharacterException.class

rt.jar : java/nio/charset/UnsupportedCharsetException.class

rt.jar : java/nio/InvalidMarkException.class

rt.jar : java/nio/ReadOnlyBufferException.class

rt.jar : java/rmi/AccessException.class

rt.jar : java/rmi/activation/ActivateFailedException.class

rt.jar : java/rmi/activation/ActivationException.class

rt.jar : java/rmi/activation/UnknownGroupException.class

rt.jar : java/rmi/activation/UnknownObjectException.class

rt.jar : java/rmi/AlreadyBoundException.class

rt.jar : java/rmi/ConnectException.class

rt.jar : java/rmi/ConnectIOException.class

rt.jar : java/rmi/MarshalException.class

rt.jar : java/rmi/NoSuchObjectException.class

rt.jar : java/rmi/NotBoundException.class

rt.jar : java/rmi/RemoteException.class

rt.jar : java/rmi/RMISecurityException.class

rt.jar : java/rmi/server/ExportException.class

rt.jar : java/rmi/server/ServerCloneException.class

rt.jar : java/rmi/server/ServerNotActiveException.class

rt.jar : java/rmi/server/SkeletonMismatchException.class

rt.jar : java/rmi/server/SkeletonNotFoundException.class

rt.jar : java/rmi/server/SocketSecurityException.class

rt.jar : java/rmi/ServerException.class

rt.jar : java/rmi/ServerRuntimeException.class

rt.jar : java/rmi/StubNotFoundException.class

rt.jar : java/rmi/UnexpectedException.class

rt.jar : java/rmi/UnknownHostException.class

rt.jar : java/rmi/UnmarshalException.class

rt.jar : java/security/AccessControlException.class

rt.jar : java/security/acl/AclNotFoundException.class

rt.jar : java/security/acl/LastOwnerException.class

rt.jar : java/security/acl/NotOwnerException.class

rt.jar : java/security/cert/CertificateEncodingException.class

rt.jar : java/security/cert/CertificateException.class

rt.jar : java/security/cert/CertificateExpiredException.class

rt.jar : java/security/cert/CertificateNotYetValidException.class

rt.jar : java/security/cert/CertificateParsingException.class

rt.jar : java/security/cert/CertPathBuilderException.class

rt.jar : java/security/cert/CertPathValidatorException.class

rt.jar : java/security/cert/CertStoreException.class

rt.jar : java/security/cert/CRLException.class

rt.jar : java/security/DigestException.class

rt.jar : java/security/GeneralSecurityException.class

rt.jar : java/security/InvalidAlgorithmParameterException.class

rt.jar : java/security/InvalidKeyException.class

rt.jar : java/security/InvalidParameterException.class

rt.jar : java/security/KeyException.class

rt.jar : java/security/KeyManagementException.class

rt.jar : java/security/KeyStoreException.class

rt.jar : java/security/NoSuchAlgorithmException.class

rt.jar : java/security/NoSuchProviderException.class

rt.jar : java/security/PrivilegedActionException.class

rt.jar : java/security/PrivilegedExceptionAction.class

rt.jar : java/security/ProviderException.class

rt.jar : java/security/SignatureException.class

rt.jar : java/security/spec/InvalidKeySpecException.class

rt.jar : java/security/spec/InvalidParameterSpecException.class

rt.jar : java/security/UnrecoverableEntryException.class

rt.jar : java/security/UnrecoverableKeyException.class

rt.jar : java/sql/BatchUpdateException.class

rt.jar : java/sql/SQLException.class

rt.jar : java/text/ParseException.class

rt.jar : java/util/concurrent/BrokenBarrierException.class

rt.jar : java/util/concurrent/CancellationException.class

rt.jar : java/util/concurrent/ExecutionException.class

rt.jar : java/util/concurrent/Executors$PrivilegedExceptionActionAdapter.class

rt.jar : java/util/concurrent/RejectedExecutionException.class

rt.jar : java/util/concurrent/TimeoutException.class

rt.jar : java/util/ConcurrentModificationException.class

rt.jar : java/util/DuplicateFormatFlagsException.class

rt.jar : java/util/EmptyStackException.class

rt.jar : java/util/FormatFlagsConversionMismatchException.class

rt.jar : java/util/FormatterClosedException.class

rt.jar : java/util/IllegalFormatCodePointException.class

rt.jar : java/util/IllegalFormatConversionException.class

rt.jar : java/util/IllegalFormatException.class

rt.jar : java/util/IllegalFormatFlagsException.class

rt.jar : java/util/IllegalFormatPrecisionException.class

rt.jar : java/util/IllegalFormatWidthException.class

rt.jar : java/util/InputMismatchException.class

rt.jar : java/util/InvalidPropertiesFormatException.class

rt.jar : java/util/jar/JarException.class

rt.jar : java/util/MissingFormatArgumentException.class

rt.jar : java/util/MissingFormatWidthException.class

rt.jar : java/util/MissingResourceException.class

rt.jar : java/util/NoSuchElementException.class

rt.jar : java/util/prefs/BackingStoreException.class

rt.jar : java/util/prefs/InvalidPreferencesFormatException.class

rt.jar : java/util/regex/PatternSyntaxException.class

rt.jar : java/util/TooManyListenersException.class

rt.jar : java/util/UnknownFormatConversionException.class

rt.jar : java/util/UnknownFormatFlagsException.class

rt.jar : java/util/zip/DataFormatException.class

rt.jar : java/util/zip/ZipException.class

rt.jar : javax/activity/ActivityCompletedException.class

rt.jar : javax/activity/ActivityRequiredException.class

rt.jar : javax/activity/InvalidActivityException.class

rt.jar : javax/imageio/IIOException.class

rt.jar : javax/imageio/metadata/IIODOMException.class

rt.jar : javax/imageio/metadata/IIOInvalidTreeException.class

rt.jar : javax/management/AttributeNotFoundException.class

rt.jar : javax/management/BadAttributeValueExpException.class

rt.jar : javax/management/BadBinaryOpValueExpException.class

rt.jar : javax/management/BadStringOperationException.class

rt.jar : javax/management/InstanceAlreadyExistsException.class

rt.jar : javax/management/InstanceNotFoundException.class

rt.jar : javax/management/IntrospectionException.class

rt.jar : javax/management/InvalidApplicationException.class

rt.jar : javax/management/InvalidAttributeValueException.class

rt.jar : javax/management/JMException.class

rt.jar : javax/management/JMRuntimeException.class

rt.jar : javax/management/ListenerNotFoundException.class

rt.jar : javax/management/MalformedObjectNameException.class

rt.jar : javax/management/MBeanException.class

rt.jar : javax/management/MBeanRegistrationException.class

rt.jar : javax/management/modelmbean/InvalidTargetObjectTypeException.class

rt.jar : javax/management/modelmbean/XMLParseException.class

rt.jar : javax/management/monitor/MonitorSettingException.class

rt.jar : javax/management/NotCompliantMBeanException.class

rt.jar : javax/management/openmbean/InvalidKeyException.class

rt.jar : javax/management/openmbean/InvalidOpenTypeException.class

rt.jar : javax/management/openmbean/KeyAlreadyExistsException.class

rt.jar : javax/management/openmbean/OpenDataException.class

rt.jar : javax/management/OperationsException.class

rt.jar : javax/management/ReflectionException.class

rt.jar : javax/management/relation/InvalidRelationIdException.class

rt.jar : javax/management/relation/InvalidRelationServiceException.class

rt.jar : javax/management/relation/InvalidRelationTypeException.class

rt.jar : javax/management/relation/InvalidRoleInfoException.class

rt.jar : javax/management/relation/InvalidRoleValueException.class

rt.jar : javax/management/relation/RelationException.class

rt.jar : javax/management/relation/RelationNotFoundException.class

rt.jar : javax/management/relation/RelationServiceNotRegisteredException.class

rt.jar : javax/management/relation/RelationTypeNotFoundException.class

rt.jar : javax/management/relation/RoleInfoNotFoundException.class

rt.jar : javax/management/relation/RoleNotFoundException.class

rt.jar : javax/management/remote/JMXProviderException.class

rt.jar : javax/management/remote/JMXServerErrorException.class

rt.jar : javax/management/RuntimeErrorException.class

rt.jar : javax/management/RuntimeMBeanException.class

rt.jar : javax/management/RuntimeOperationsException.class

rt.jar : javax/management/ServiceNotFoundException.class

rt.jar : javax/naming/AuthenticationException.class

rt.jar : javax/naming/AuthenticationNotSupportedException.class

rt.jar : javax/naming/CannotProceedException.class

rt.jar : javax/naming/CommunicationException.class

rt.jar : javax/naming/ConfigurationException.class

rt.jar : javax/naming/ContextNotEmptyException.class

rt.jar : javax/naming/directory/AttributeInUseException.class

rt.jar : javax/naming/directory/AttributeModificationException.class

rt.jar : javax/naming/directory/InvalidAttributeIdentifierException.class

rt.jar : javax/naming/directory/InvalidAttributesException.class

rt.jar : javax/naming/directory/InvalidAttributeValueException.class

rt.jar : javax/naming/directory/InvalidSearchControlsException.class

rt.jar : javax/naming/directory/InvalidSearchFilterException.class

rt.jar : javax/naming/directory/NoSuchAttributeException.class

rt.jar : javax/naming/directory/SchemaViolationException.class

rt.jar : javax/naming/event/NamingExceptionEvent.class

rt.jar : javax/naming/InsufficientResourcesException.class

rt.jar : javax/naming/InterruptedNamingException.class

rt.jar : javax/naming/InvalidNameException.class

rt.jar : javax/naming/ldap/LdapReferralException.class

rt.jar : javax/naming/LimitExceededException.class

rt.jar : javax/naming/LinkException.class

rt.jar : javax/naming/LinkLoopException.class

rt.jar : javax/naming/MalformedLinkException.class

rt.jar : javax/naming/NameAlreadyBoundException.class

rt.jar : javax/naming/NameNotFoundException.class

rt.jar : javax/naming/NamingException.class

rt.jar : javax/naming/NamingSecurityException.class

rt.jar : javax/naming/NoInitialContextException.class

rt.jar : javax/naming/NoPermissionException.class

rt.jar : javax/naming/NotContextException.class

rt.jar : javax/naming/OperationNotSupportedException.class

rt.jar : javax/naming/PartialResultException.class

rt.jar : javax/naming/ReferralException.class

rt.jar : javax/naming/ServiceUnavailableException.class

rt.jar : javax/naming/SizeLimitExceededException.class

rt.jar : javax/naming/TimeLimitExceededException.class

rt.jar : javax/print/attribute/UnmodifiableSetException.class

rt.jar : javax/print/AttributeException.class

rt.jar : javax/print/FlavorException.class

rt.jar : javax/print/PrintException.class

rt.jar : javax/print/URIException.class

rt.jar : javax/security/auth/callback/UnsupportedCallbackException.class

rt.jar : javax/security/auth/DestroyFailedException.class

rt.jar : javax/security/auth/login/AccountException.class

rt.jar : javax/security/auth/login/AccountExpiredException.class

rt.jar : javax/security/auth/login/AccountLockedException.class

rt.jar : javax/security/auth/login/AccountNotFoundException.class

rt.jar : javax/security/auth/login/CredentialException.class

rt.jar : javax/security/auth/login/CredentialExpiredException.class

rt.jar : javax/security/auth/login/CredentialNotFoundException.class

rt.jar : javax/security/auth/login/FailedLoginException.class

rt.jar : javax/security/auth/login/LoginException.class

rt.jar : javax/security/auth/RefreshFailedException.class

rt.jar : javax/security/sasl/AuthenticationException.class

rt.jar : javax/security/sasl/SaslException.class

rt.jar : javax/sound/midi/InvalidMidiDataException.class

rt.jar : javax/sound/midi/MidiUnavailableException.class

rt.jar : javax/sound/sampled/LineUnavailableException.class

rt.jar : javax/sound/sampled/UnsupportedAudioFileException.class

rt.jar : javax/sql/rowset/serial/SerialException.class

rt.jar : javax/sql/rowset/spi/SyncFactoryException.class

rt.jar : javax/sql/rowset/spi/SyncProviderException.class

rt.jar : javax/swing/text/BadLocationException.class

rt.jar : javax/swing/text/ChangedCharSetException.class

rt.jar : javax/swing/tree/ExpandVetoException.class

rt.jar : javax/swing/undo/CannotRedoException.class

rt.jar : javax/swing/undo/CannotUndoException.class

rt.jar : javax/swing/UnsupportedLookAndFeelException.class

rt.jar : javax/transaction/InvalidTransactionException.class

rt.jar : javax/transaction/TransactionRequiredException.class

rt.jar : javax/transaction/TransactionRolledbackException.class

rt.jar : javax/transaction/xa/XAException.class

rt.jar : javax/xml/datatype/DatatypeConfigurationException.class

rt.jar : javax/xml/parsers/ParserConfigurationException.class

rt.jar : javax/xml/transform/TransformerConfigurationException.class

rt.jar : javax/xml/transform/TransformerException.class

rt.jar : javax/xml/xpath/XPathException.class

rt.jar : javax/xml/xpath/XPathExpressionException.class

rt.jar : javax/xml/xpath/XPathFactoryConfigurationException.class

rt.jar : javax/xml/xpath/XPathFunctionException.class

rt.jar : org/ietf/jgss/GSSException.class

rt.jar : org/omg/CORBA/ExceptionList.class

rt.jar : org/omg/CORBA/portable/ApplicationException.class

rt.jar : org/omg/CORBA/portable/IndirectionException.class

rt.jar : org/omg/CORBA/portable/RemarshalException.class

rt.jar : org/omg/CORBA/portable/UnknownException.class

rt.jar : org/omg/CORBA/SystemException.class

rt.jar : org/omg/CORBA/UnknownUserException.class

rt.jar : org/omg/CORBA/UnknownUserExceptionHelper.class

rt.jar : org/omg/CORBA/UnknownUserExceptionHolder.class

rt.jar : org/omg/CORBA/UserException.class

rt.jar : org/omg/IOP/ExceptionDetailMessage.class

rt.jar : org/w3c/dom/DOMException.class

rt.jar : org/w3c/dom/events/EventException.class

rt.jar : org/w3c/dom/ls/LSException.class

rt.jar : org/w3c/dom/ranges/RangeException.class

rt.jar : org/xml/sax/SAXException.class

rt.jar : org/xml/sax/SAXNotRecognizedException.class

rt.jar : org/xml/sax/SAXNotSupportedException.class

rt.jar : org/xml/sax/SAXParseException.class

rt.jar : sun/applet/AppletIllegalArgumentException.class

rt.jar : sun/applet/AppletIOException.class

rt.jar : sun/applet/AppletSecurityException.class

rt.jar : sun/applet/Main$ParseException.class

rt.jar : sun/audio/AudioSecurityExceptionAction.class

rt.jar : sun/audio/InvalidAudioFormatException.class

rt.jar : sun/awt/image/ImageFormatException.class

rt.jar : sun/awt/image/PNGImageDecoder$PNGException.class

rt.jar : sun/dc/path/PathException.class

rt.jar : sun/dc/pr/PRException.class

rt.jar : sun/io/ConversionBufferFullException.class

rt.jar : sun/io/MalformedInputException.class

rt.jar : sun/io/UnknownCharacterException.class

rt.jar : sun/java2d/InvalidPipeException.class

rt.jar : sun/jdbc/odbc/JdbcOdbcBatchUpdateException.class

rt.jar : sun/management/counter/perf/InstrumentationException.class

rt.jar : sun/misc/CEFormatException.class

rt.jar : sun/misc/ExtensionInstallationException.class

rt.jar : sun/misc/InvalidJarIndexException.class

rt.jar : sun/misc/ProxyGenerator$ExceptionTableEntry.class

rt.jar : sun/misc/REException.class

rt.jar : sun/net/ConnectionResetException.class

rt.jar : sun/net/ftp/FtpLoginException.class

rt.jar : sun/net/ftp/FtpProtocolException.class

rt.jar : sun/net/smtp/SmtpProtocolException.class

rt.jar : sun/net/TelnetProtocolException.class

rt.jar : sun/net/www/ApplicationLaunchException.class

rt.jar : sun/nio/ch/AlreadyBoundException.class

rt.jar : sun/print/PrintJobAttributeException.class

rt.jar : sun/print/PrintJobFlavorException.class

rt.jar : sun/reflect/annotation/AnnotationTypeMismatchExceptionProxy.class

rt.jar : sun/reflect/annotation/EnumConstantNotPresentExceptionProxy.class

rt.jar : sun/reflect/annotation/ExceptionProxy.class

rt.jar : sun/reflect/annotation/TypeNotPresentExceptionProxy.class

rt.jar : sun/reflect/generics/reflectiveObjects/NotImplementedException.class

rt.jar : sun/reflect/InstantiationExceptionConstructorAccessorImpl.class

rt.jar : sun/rmi/transport/proxy/CGIClientException.class

rt.jar : sun/rmi/transport/proxy/CGIServerException.class

rt.jar : sun/security/jgss/GSSExceptionImpl.class

rt.jar : sun/security/krb5/Asn1Exception.class

rt.jar : sun/security/krb5/internal/KdcErrException.class

rt.jar : sun/security/krb5/internal/KrbApErrException.class

rt.jar : sun/security/krb5/internal/KrbErrException.class

rt.jar : sun/security/krb5/KrbCryptoException.class

rt.jar : sun/security/krb5/KrbException.class

rt.jar : sun/security/krb5/RealmException.class

rt.jar : sun/security/pkcs/EncodingException.class

rt.jar : sun/security/pkcs/ParsingException.class

rt.jar : sun/security/provider/certpath/CertificateRevokedException.class

rt.jar : sun/security/provider/certpath/SunCertPathBuilderException.class

rt.jar : sun/security/provider/PolicyParser$ParsingException.class

rt.jar : sun/security/timestamp/TSResponse$TimestampException.class

rt.jar : sun/security/util/PendingException.class

rt.jar : sun/security/util/PropertyExpander$ExpandException.class

rt.jar : sun/security/validator/ValidatorException.class

rt.jar : sun/security/x509/CertException.class

rt.jar : sun/tools/jar/JarException.class

How to use SQL Server 2008 R2 Import and Export Wizard to import a CSV file into SQL Azure

noreply@blogger.com (Joe Zamora) — Sat, 13 Aug 2011 00:37:00 +0000

The SQL Server 2008 R2 Import and Export Wizard will allow you to import a CSV ‘flat’ file directly into SQL Azure. The process is relatively simple, but it’s not obvious. The following steps will help guide you through the process.

The SQL Server Import and Export Wizard is available on the SQL Server 2008 R2 media, so you must obtain your organization’s copy of SQL Server 2008 R2 software.

1. Run the wizard from the Windows Start menu, Start à Programs à SQL Server 2008 R2 à Import and Export Data.

2. Select Flat File Source as the data source, browse for your CSV file, and then select the settings appropriate for your file. For example, the fields in my file are surrounded by double-quotes if they contain commas, so I select double-quotes as my text qualifier. Also, the column names are found in the first row of my file. Click Next.

3. Verify that your data looks as you expected. Click on Advanced on the left.

4. Remember that the wizard is looking at a flat file, so it doesn’t make many assumptions about the data contained therein. It’s up to you to go through each column in this screen and adjust data types and sizes. The following table shows a mapping of data types between the wizard and SQL Server. Click Next after you’ve made your changes.

Data Type	SQL Server (SQLOLEDB; SQLNCLI10)
DT_BOOL	bit
DT_BYTES	binary, varbinary, timestamp
DT_CY	smallmoney, money
DT_DATE
DT_DBDATE	date
DT_DBTIME
DT_DBTIME2	time(p)
DT_DBTIMESTAMP	datetime, smalldatetime
DT_DBTIMESTAMP2	datetime2
DT_DBTIMESTAMPOFFSET	datetimeoffset(p)
DT_DECIMAL
DT_FILETIME
DT_GUID	uniqueidentifier
DT_I1
DT_I2	smallint
DT_I4	int
DT_I8	bigint
DT_NUMERIC	decimal, numeric
DT_R4	real
DT_R8	float
DT_STR	char, varchar
DT_UI1	tinyint
DT_UI2
DT_UI4
DT_UI8
DT_WSTR	nchar, nvarchar, sql_variant, xml
DT_IMAGE	image
DT_NTEXT	ntext
DT_TEXT	text

Table 1 - Data type mappings (source: http://msdn.microsoft.com/en-us/library/ms141036.aspx)

5. Here’s the part that’s not obvious. You must select .Net Framework Data Provider for SqlServer as the destination. Then, enter the following information.

· Data Source – This is the fully qualified DNS name (FQDN) of your SQL Azure server.

· Initial Catalog – This must be an existing database on the SQL Azure server.

· User ID

· Password

6. Click Edit Mappings.

7. Uncheck the Nullable box for your primary key column. Did I mention that a SQL Azure table must have a primary key? Notice that there isn’t a way to specify the primary key in this dialog. We’ll have to add that to the SQL statement manually. Click the Edit SQL button.

8. Add the “Primary Key” option to the declaration of your primary key column, and click OK.

Note: If you’re using a clustered primary key, please see SQL Server Books Online for the syntax.

9. Review the data type mappings. Note that I receive warnings about the default DT_STR types, so I ignore them.

10. Keep the default setting, Run immediately, click Next, and then click Finish on the next screen.

11. Finally, review the status of the import, and enjoy using your data in SQL Azure.

RS1.EXE works with SSRS 2008 R2 with SP1

noreply@blogger.com (Joe Zamora) — Wed, 22 Jun 2011 22:09:00 +0000

Thanks to my anonymous friend, Baptiste Lefrançois, it appears that my RS1.exe build still works with SQL Server Reporting Services 2008 R2, but you need Service Pack 1. Here's my original post:

SQL Server 2008 Reporting Services RS.EXE Supporting Forms Authentication

And here's the description, in my gracious friend's own words:

"Hello Joe,

Thanks for your help, I've understood my mistake but finally my problem was an official bug of SQL Server Report Service. I just want to tell you how I resolved it for next person who will be in the same situation. My problem was the LogonUser didn't return any cookie, and my authCookie was always null, never affected :( The specific error message was : "Authorization ticket not received by LogonUser". But I've already followed all recommended procedures on the msdn but never resolve my problem. My authentication form on ReportServer page worked perfectly with any web navigator, but with a console application impossible, allways the same [... :)] error =/ I've tried to authenticate thanks of navigator on ReportsManager page and... surprise I got the same error : "Authorization ticket not received by LogonUser". After lot's of search and googling , I've read an article explaining this bug. It was in fact an official bug and Microsoft published a fix whish was after included in the SQL SERVER 2008R2 SP1. I had only the SQL SERVER 2008R2 with no update. After install the SP1, I tested your "old" RS Utility for form authentication, rs1.exe. And It works perfectly now. Thank's so much ! Maybe my bug and the solution I've found will be helpfull for the future ;)

Thanks a lot, So Nice! =)

Baptiste"

XMA/ECMA call-based export does not support multi-valued attribute-level deltas

noreply@blogger.com (Joe Zamora) — Fri, 22 Apr 2011 21:19:00 +0000

Here's a seemingly undocumented feature of the XMA/ECMA. I've got an XMA that's doing call-based exports, and I've noticed that it doesn't contain atomic add & remove operations at the item level in a multi-valued attribute list. Instead, it's giving me the entire list of items in the object's current state.

This is interesting, because when I look at the pending export in the sync engine, I see the atomic operations.

When I examine the arguments passed into the ExportEntry API call, I see a Replace at the top level, but nothing on the multi-valued attribute (member in this case).

[ExportEntry]

modificationType:   Replace      
changedAttributes:  member
csentry:            [Microsoft.MetadirectoryServices.Impl.CSEntryMAImpl] CS Role CN=ROLE-CRM-Test1
DN:                 CN=ROLE-CRM-Test1
ObjectClass:        Microsoft.MetadirectoryServices.Impl.GenericValueCollection
ObjectType:         Role         
RDN:                CN=ROLE-CRM-Test1
displayName         [String]            ROLE-CRM-Test1
member              [Reference]         CN=007528
                                     CN=dev.userA
                                     CN=dev.userB
                                     CN=dev.userC
                                     CN=dev.userD
                                     CN=dev.userE
                                     CN=dev.userF

(Wouldn't it be nice if you could just serialize the CSEntry object?)

So, I looked around on the forums, and sure enough, Markus confirms my observation:

"If members is in the list of changed attributes, the member attribute of the CSEntry contains the most recent value for this attribute.

"If you need to determine the individual change for each member, you need to calculate this. The ECMA doesn’t provide multi-valued attribute level changes."

Rebecca Croft also informs me that not even the file-based export supports item-level deltas on multi-valued attributes.

I'd love to be proven wrong about this...

Powershell: get process ID by window name/title

noreply@blogger.com (Joe Zamora) — Mon, 15 Nov 2010 04:24:00 +0000

Powershell is cool.

get-process | where {$_.mainwindowtitle -match "pattern"} | format-table id, name, mainwindowtitle -autosize

SSRS data processing extension, Windows integrated security, and impersonation

noreply@blogger.com (Joe Zamora) — Fri, 12 Nov 2010 20:25:00 +0000

I've been playing around with Craig Martin's SSRS Data Processing Extension for FIM. (Great stuff; thanks for posting it, Craig!) I had to do some troubleshooting with Windows integrated security and Windows credentials stored securely on the server.

I noticed that the IDbConnection.Open method was being called as the impersonated Windows user:

2010-11-11 14:56:37,932 --4-- DEBUG [FimDataProcessingExtension.FimConnection]    

   [Microsoft.ReportingServices.DataProcessing.IDbConnection.Open] Current user info:
   Name               : TEST\joe.zamora
   IsAuthenticated    : True
   AuthenticationType : Kerberos
   ImpersonationLevel : Impersonation

However, the IDbCommand.ExecuteReader method was not run under the context of the Windows user:

2010-11-11 14:56:37,934 --4-- DEBUG [FimDataProcessingExtension.FimConnection]    

   [GetData] Current user info:
   Name               : TEST\svc_ssrs
   IsAuthenticated    : True
   AuthenticationType : Kerberos
   ImpersonationLevel : None

Well, turns out that this is by design. Here's the official word from Microsoft:

Impersonation and Custom Data Processing Extensions

If your custom data processing extension connects to data sources using impersonation, you must use the Open method on either the IDbConnection orIDbConnectionExtension interfaces to make the request. Alternately, you can store the user identity object (System.Security.Principal.WindowsIdentity) and then reuse it in the other data processing extension APIs.
In previous releases of Reporting Services, all custom data processing extensions were called under user impersonation. In this release, only the Open method will be called while impersonating the user. If you have an existing data processing extension that requires integrated security, you must modify your code to use the Openmethod or store the user identity object.

Thus, you should save the current Windows identity to a local variable in the IDbConnection.Open method:

if (this.integratedSecurity)
{
    this.windowsIdentity = WindowsIdentity.GetCurrent();
}

And then you can use it later in the other API calls:

private WindowsImpersonationContext impersonationContext;
internal void MaybeImpersonate()
{
    if (this.integratedSecurity)
    {
        impersonationContext = this.windowsIdentity.Impersonate();
    }
}

That'll teach me for not reading the documenation. ;)

Data source name not found and no default driver specified

noreply@blogger.com (Joe Zamora) — Sat, 21 Aug 2010 22:22:00 +0000

Ahhh, another chance to give back to the community. It's bittersweet. It feels good to contribute, but you really go through the fire to figure out something that no one else has.

This one is an error message that I was getting from SQL Server Integration Services (SSIS). I recently inherited a package (isn't that a nice excuse :) and I switched the connection string from Windows integrated to SQL auth. Pretty standard operation, wouldn't you say? Well, I've been around the block enough to not be totally shocked when I got a few error messages:

An error occured on the SSIS Listener Microsoft.SqlServer.Dts.Runtime.Package/Connection manager "JOESPLACE\MSSQLSERVER.TEST" : SSIS Error Code DTS_E_OLEDBERROR.  An OLE DB error has occurred. Error code: 0x80004005.
An OLE DB record is available.  Source: "Microsoft OLE DB Provider for ODBC Drivers"  Hresult: 0x80004005  Description: "[Microsoft][ODBC Driver Manager] Data source name not found and no default driver specified".

An error occured on the SSIS Listener Microsoft.SqlServer.Dts.Runtime.TaskHost/Execute SQL Task : Failed to acquire connection "JOESPLACE\MSSQLSERVER.TEMPEST". Connection may not be configured correctly or you may not have the right permissions on this connection.

An error occured while processing the file C:\temp.txt. Details: There was an error executing the SSIS package C:\test.dtsx.  Please check the event log for more information.

Okay, so there's an error in the connection string. Let the troubleshooting begin. The thing about this little guy is that he just wouldn't go away. I tried a bunch of different changes to the connection string; nothing worked.

This package is a little different because we're using a variable to specify the table. I suspected that this had something to do with it, so I tried a bunch of different things. It must have been after I switched to an existing table and then back to the table variable that it started working. I didn't know it at the time, because I was being a little sloppy with my trial-and-error.

Anyway, after I got it to work, I compared the dtsx files before and after. Then, starting with the original version, I made one change at a time until it worked. Turns out that the fix was totally a one-liner. Aaarrggghhh! ...and here it is:

<property id="5852" name="OpenRowset" dataType="System.String" state="default" isArray="false" description="Specifies the name of the database object used to open a rowset." typeConverter="" UITypeEditor="" containsID="false" expressionType="None">[dbo].[TEMPEST]</property>

In the original file, the entry was blank; that's it.

A couple more bizarre things about this problem:

~~The package would run in Visual Studio, but not after being published.~~
~~I deleted the [dbo].[TEMPEST] table and it still worked.~~

I meant to fix this a while back, but just now got around to it. I think the problem was actually that I was missing the driver in the connection string, just like the error message suggests. Evidently, you can't just use any old .NET connection string; it has to have the driver in it. Ugh.

Built-in SSRS 2008 Roles

noreply@blogger.com (Joe Zamora) — Fri, 11 Jun 2010 00:26:00 +0000

I couldn't find a satisfactory permission matrix for the built-in SSRS 2008 roles, so I'm publishing one here. This is a pretty comprehensive list; you may have to maximize your browser window for this!

For completeness, I'll mention that you can manage these roles by connecting to a Reporting Services instance and browsing the Security folder.

If you connect to the database engine, you can find the permissions encapsulated in the TaskMask column of the Roles table, in the ReportServer database. I would avoid editing the permissions there.

Enjoy!

	Built-in Role	System Administrator	System User
	Description	View and modify system role assignments, system role definitions, system properties, and shared schedules.	View system properties and shared schedules.
	TaskMask	110101011	001010001

Task	Description
Manage roles	Create, view, modify and delete role definitions.	X
Manage report server security	View and modify system-wide role assignments.	X
View report server properties	View properties that apply to the report server.		X
Manage report server properties	View and modify properties that apply to the report server and to items managed by the report server.	X
View shared schedules	View a predefined schedule that has been made available for general use.		X
Manage shared schedules	Create, view, modify and delete shared schedules used to run reports or refresh a report.	X
Generate events	Provides an application with the ability to generate events within the report server namespace.
Manage jobs	View and cancel running jobs.	X
Execute Report Definitions	Start execution from report definition without publishing it to Report Server.	X	X

	Built-in Role	Browser	Content Manager	My Reports	Publisher	Report Builder
	Description	May view folders, reports and subscribe to reports.	May manage content in the Report Server. This includes folders, reports and resources.	May publish reports and linked reports; manage folders, reports and resources in a users My Reports folder.	May publish reports and linked reports to the Report Server.	May view report definitions.
	TaskMask	0010101001000100	1111111111111111	0111111111011000	0101010100001010	0010101001000101

Task	Description
Set security for individual items	View and modify security settings for reports, folders, resources, and shared data sources.		X
Create linked reports	Create linked reports and publish them to a report server folder.		X	X	X
View reports	View reports and linked reports in the folder hierarchy; view report history snapshots and report properties.	X	X	X		X
Manage reports	Create, and delete reports; and modify report properties.		X	X	X
View resources	View resources in the folder hierarchy; and view resource properties.	X	X	X		X
Manage resources	Create, modify and delete resources, and modify resource properties.		X	X	X
View folders	View folder items in the folder hierarchy; and view folder properties.	X	X	X		X
Manage folders	Create, view and delete folders; and view and modify folder properties.		X	X	X
Manage report history	Create, view, and delete report history snapshots; and modify report history properties.		X	X
Manage individual subscriptions	Each user can create, view, modify and delete subscriptions that he or she owns.	X	X	X		X
Manage all subscriptions	View, modify, and delete any subscription regardless of who owns the subscription.		X
View data sources	View shared data source items in the folder hierarchy; and view data source properties.		X	X
Manage data sources	Create and delete shared data source items; and modify data source properties.		X	X	X
View models	View models in the folder hierarchy, use models as data sources for a report, and run queries against the model to retrieve data.	X	X			X
Manage models	Create, view, and delete models; and view and modify model properties.		X		X
Consume reports	Reads report definitions		X			X

SQL Server 2008 Reporting Services RS.EXE Supporting Forms Authentication

noreply@blogger.com (Joe Zamora) — Tue, 08 Jun 2010 23:42:00 +0000

I've decided to expand the scope of my blog to more than just Identity Management. Recently, I've been submerged in the BI space, and since I'm not sure when I'll resurface, I'd like to contribute some of the cool stuff I've been doing back to the community.

I'm currently working on a scale-out deployment of SSRS that uses Forms authentication. Everything is working well with the security extension, and now we're focusing on moving everything into Stage. Good time for the scripting utility, rs.exe, right? Well, if you didn't already know, rs.exe isn't supported with Forms authentication. Wow, what a bummer.

What's more, I can't use the RSScripter, which is a very cool and useful app for generating scripts for rs.exe.

So, what do I do? I could write my own utility. We already have a web service client to integrate SSRS with an in-house app. I would just need to add a bunch of management features to it... and add commands to extract and load... and make it generic enough to reuse... and then maintain it. Nah, that sounds like a lot of work. Let's just use .NET Reflector on the original rs.exe app!

I've reassembled rs.exe with the ability to preserve the RS authentication cookie, which is required with Forms authentication. Hopefully someone out there finds this useful!

http://rs1.codeplex.com/

BTW, the RSScripter also doesn't support Forms authentication, because rs.exe doesn't, and RSScripter is dependent on rs.exe. Leave me a comment if you need a version of RSScripter that works with Forms auth.

Good luck!

Update 2011-06-22: RS1.EXE works with SSRS 2008 R2 with SP1

Compilation failed. Unable to load one or more of the requested types. Retrieve the LoaderExceptions property for more information.

noreply@blogger.com (Joe Zamora) — Sat, 27 Mar 2010 17:30:00 +0000

If you've recently upgraded FIM to RTM and you're getting the following error message when you compile your custom activities, then you probably need to copy the new Microsoft.IdentityManagement libraries out of the GAC.

"Compilation failed. Unable to load one or more of the requested types. Retrieve the LoaderExceptions property for more information."

copy /y C:\Windows\assembly\GAC_MSIL\Microsoft.IdentityManagement.WFExtensionInterfaces\4.0.2592.0__31bf3856ad364e35\Microsoft.IdentityManagement.WFExtensionInterfaces.dll .

copy /y C:\Windows\assembly\GAC_MSIL\Microsoft.IdentityManagement.Activities\4.0.2592.0__31bf3856ad364e35\Microsoft.IdentityManagement.Activities.dll .

copy /y C:\Windows\assembly\GAC_MSIL\Microsoft.IdentityManagement.WebUI.Controls\4.0.2592.0__31bf3856ad364e35\Microsoft.IdentityManagement.WebUI.Controls.dll .

Query/enumerate all declarative workflow templates in an SPWeb and programmatically read the XOML files

noreply@blogger.com (Joe Zamora) — Mon, 22 Mar 2010 07:55:00 +0000

It took me all day to figure this one out. You'd think something like this could be done through the object model, but it's not available in WSS. Here's a complete copy of my console app, with all trial/error code left in. I hope this helps someone out there!

Edit: Sorry, I left out some details. What can I say; I was a little weary after a grueling battle with Sharepoint. Anyway, the workflows I'm talking about here are declarative Sharepoint workflows, meaning that you assemble them in Sharepoint Designer.

Also, I was able to read the XOML files through the object model, but I wouldn't call it the most direct route. You'd think that you could read the workflow templates through the object model, but they don't show up in SPWeb.WorkflowTemplates, SPWorkflowAssociation.BaseTemplate is null (probably because it's declarative), and there is no Workflow.asmx service in WSS (not sure if that would even suffice).

So, what I ended up doing was getting the workflow name from the SPWorkflowAssociation (from the SPList), and then assembling a URL in the form of:

/Workflows/wfName/wfName.xoml

Then, I get a handle on the XOML as an SPFile, and from there I can read it into an XmlDocument.


using System;
using System.Collections.Generic;
using System.IO;
using System.Linq;
using System.Text;
using System.Xml;
using Ensynch;
using Microsoft.SharePoint;
using Microsoft.SharePoint.Workflow;

namespace EnumerateSPWorkflowTemplates
{
    class Program
    {
        private static string webUrl = 
            "http://ens-ilm01/sites/devsandbox/spworkflow/";

        static void Main(string[] args)
        {
            try
            {
                using (SPSite site = new SPSite(webUrl))
                using (SPWeb web = site.OpenWeb())
                {
                    foreach (SPWorkflowTemplate wf in web.WorkflowTemplates)
                    {
                        Console.WriteLine(EnsynchTools.PrintHeading(
                            "Workflow Template: " + wf.Name));
                        //Console.WriteLine(wf.Xml);
                        writeXml(wf.Xml);
                    }
                    foreach (SPList list in web.Lists)
                    {
                        foreach (SPWorkflowAssociation association in list.WorkflowAssociations)
                        {
                            //SPWorkflowTemplate wf = association.BaseTemplate;
                            //if (wf != null)
                            //{
                            Console.WriteLine(EnsynchTools.PrintHeading(
                                "Workflow Association: " + association.Name));
                            //Console.WriteLine(association.SoapXml);
                            writeXml(association.SoapXml);
                            readWorkflowTemplate(association);
                            //}
                        }
                    }
                    crawlFolders(web, "Workflows");
                }
            }
            catch (Exception exc)
            {
                Console.WriteLine(EnsynchTools.ExceptionDetails(exc));
            }

            Console.Write("Press enter to exit...");
            Console.ReadLine();
        }

        private static void writeXml(string xml)
        {
            XmlDocument doc = new XmlDocument();
            doc.Load(new StringReader(xml));
            writeXml(doc);
        }

        private static void writeXml(XmlDocument doc)
        {
            doc.Save(Console.Out);
            Console.WriteLine("\r\n");
        }

        private static void readWorkflowTemplate(
            SPWorkflowAssociation association)
        {
            XmlDocument doc = new XmlDocument();
            doc.Load(new StringReader(association.SoapXml));
            XmlNode node = doc.SelectSingleNode("/WorkflowTemplate");
            // Assemble the URL from the workflow name.
            XmlAttribute attribute = node.Attributes["Name"];
            string wfName = attribute.Value.Replace(" ", "%20");
            string webRelativeFolder = "Workflows/" + wfName;
            string xomlFileName = wfName + ".xoml";
            string xomlUrl = webUrl + webRelativeFolder + "/" + xomlFileName;
            try
            {
                Console.WriteLine("Trying to access " + xomlUrl);

                SPFolder wfFolder = association.ParentWeb.GetFolder(
                    webRelativeFolder);
                SPFile xomlFile = wfFolder.Files[xomlFileName];
                Console.WriteLine("Found file: " + xomlFile.Url);

                //System.Net.WebClient oWebClient = new System.Net.WebClient();
                //oWebClient.Credentials = new System.Net.NetworkCredential (
                //    "username","password","domain");
                //String sResponseData = System.Text.Encoding.ASCII.GetString(
                //    oWebClient.DownloadData(xomlUrl));

                doc = new XmlDocument();
                //doc.Load(new StringReader(sResponseData));
                using (Stream xomlStream = xomlFile.OpenBinaryStream())
                {
                    doc.Load(xomlStream);
                }
                writeXml(doc);
                Console.WriteLine("\r\n");
            }
            catch (Exception exc)
            {
                Console.WriteLine(exc.Message);
            }
        }

        private static void crawlFolders(SPWeb web, string subFolder)
        {
            SPFolder rootFolder = web.GetFolder(subFolder);
            crawlFolders(rootFolder);
        }

        private static void crawlFolders(SPFolder folder)
        {
            Console.WriteLine("Crawling: " + folder.Url);
            foreach (SPFile file in folder.Files)
            {
                Console.WriteLine("- " + file.Name);
            }
            // Recursively count SPFiles in SPFolders
            foreach (SPFolder subfolder in folder.SubFolders)
            {
                crawlFolders(subfolder);
            }
        }

    }
}

FIM Query Tool for FIM 2010 RC1

noreply@blogger.com (Joe Zamora) — Mon, 01 Feb 2010 22:43:00 +0000

I forgot to mention that I updated the FIM Query Tool to work with RC1 and the new unsupported web service client. So, if you haven't already stumbled upon it, you can download the latest release and take it for a test drive:

http://fimquerytool.codeplex.com/

And please leave me any feedback on the Codeplex site or here; thanks!

Error defining Activity Information Configuration: Access denied

noreply@blogger.com (Joe Zamora) — Mon, 01 Feb 2010 22:41:00 +0000

I know the answer to this one is trivial, but if you encounter it, I thought I'd let you know that, no, you're not going crazy. Evidently, there is no default MPR for creating Activity Information Configuration's in the FIM portal.

So, if you're defining a custom workflow, and you're adding your interface to the portal for the first time, you may get the error, "Create Resource: Access denied." Here's a screen shot:

So the fix is to define an MPR to allow you to create these guys. Note that there is already an MPR that allows Administrators to read all resources, so we'll avoid the redundancy here.

Display Name	Administration: Administrators have full control over Activity Information Configuration resources
Action Parameter	*
Action Type	Add; Create; Delete; Modify; Remove
Action Workflows	0
Authentication Workflows	0
Authorization Workflows	0
Description	Administration: Administrators have full control over Activity Information Configuration resources
Grant Right	TRUE
Principal Set	Administrators
Resource Current Set	All Activity Information Configurations
Resource Final Set	All Activity Information Configurations

Where is the ActivitySettingsPart?

noreply@blogger.com (Joe Zamora) — Mon, 01 Feb 2010 21:38:00 +0000

If you're building a custom workflow/activity for FIM 2010, you may be wondering where you can find the ActivitySettingsPart (which you must override in your web interface class). As of RC1, they've made it a bit harder to find, but here's where you can find the DLL that it's in:

Class	ActivitySettingsPart
Namespace	Microsoft.IdentityManagement.WebUI.Controls
Assembly	Microsoft.IdentityManagement.WFExtensionInterfaces
Where to find	(Copy it out of the Global Assembly Cache from a DOS prompt.) copy C:\Windows\assembly\GAC_MSIL\Microsoft.IdentityManagement.WFExtensionInterfaces\4.0.2574.0__31bf3856ad364e35\Microsoft.IdentityManagement.WFExtensionInterfaces.dll . Update for RTM: copy /y C:\Windows\assembly\GAC_MSIL\Microsoft.IdentityManagement.WFExtensionInterfaces\4.0.2592.0__31bf3856ad364e35\Microsoft.IdentityManagement.WFExtensionInterfaces.dll .

Additionally, forum users have suggested a couple other ways to get it:

http://social.technet.microsoft.com/Forums/en-US/ilm2/thread/ce902e07-15fe-40ef-9872-c4f8da83cf80/

While I'm at it, I'll show you where to find all of the building block activities for FIM custom workflow dev:

Class	ApprovalActivity AuthenticationGateActivity AuthenticationWorkflow CreateResourceActivity CurrentRequestActivity DeleteResourceActivity DomainSynchronizationActivity EmailDeliveryActivity EmailNotificationActivity EnumerateResourcesActivity FilterValidationActivity FunctionActivity GroupMembershipValidationActivity GroupValidationActivity PWResetActivity QueuedInputActivity ReadResourceActivity ReceiveCreateResourceActivity RequestorValidationActivity ResolveGrammarActivity SequentialWorkflow SynchronizationRuleActivity UpdateRequestActivity UpdateResourceActivity XmlInteractiveActivity
Namespace	Microsoft.ResourceManagement.Workflow.Activities
Assembly	Microsoft.ResourceManagement
Where to find	C:\Program Files\Microsoft Forefront Identity Manager\2010\Service

Enjoy!

NullReferenceException in ResolveGrammarActivity

noreply@blogger.com (Joe Zamora) — Tue, 26 Jan 2010 01:40:00 +0000

Today I ran into a problem with the ResolveGrammarActivity. I'm not sure if it's a bug, but before I post it to the FIM forum, I thought I'd describe it here so that I'm reminded to post the solution (and to host an image).

I know this used to work in ILM 2 RC0, but in FIM 2010 RC1, I'm getting a NullReferenceException. Here's the deal; I can write a parameter to the workflow dictionary, but when I try to use that in a ResolveGrammarActivity, I get the exception.

Here's an example of adding myself to the workflow dictionary (WorkflowData):

So far, so good. Now I try passing [//WorkflowData/JoeZamora] into the grammar resolver. Here's my debug log:

2010-01-25 17:18:10,477 --6-- DEBUG [Ensynch.FIM.Workflow.Activities.ChangeAttributeActivity]

Source Class : System.Workflow.ComponentModel.Activity
Source Instance : 7. Remove Joe from Group Members
Source Method : RaiseEvent
Current user : INFO\svc.fimws

Passing these data into the ResolveGrammarActivity:
NewGrammarExpression : [//WorkflowData/JoeZamora]
NewResolvedExpression :
NewWorkflowDictionaryKey :

2010-01-25 17:18:10,535 --6-- ERROR [Ensynch.FIM.Workflow.Activities.ChangeAttributeActivity]

Source Class : System.Workflow.ComponentModel.ActivityExecutor`1[T]
Source Instance : 7. Remove Joe from Group Members
Source Method : HandleFault
Current user : INFO\svc.fimws

System.NullReferenceException: Object reference not set to an instance of an object.
at Microsoft.ResourceManagement.WFActivities.Resolver.GetDisplayStringFromGuid(Guid id, String[] expansionAttributes)
at Microsoft.ResourceManagement.WFActivities.Resolver.ReplaceGuidWithTemplatedString(Match m)
at System.Text.RegularExpressions.RegexReplacement.Replace(MatchEvaluator evaluator, Regex regex, String input, Int32 count, Int32 startat)
at System.Text.RegularExpressions.Regex.Replace(String input, MatchEvaluator evaluator)
at Microsoft.ResourceManagement.WFActivities.Resolver.GetStringAttributeValue(Object attribute)
at Microsoft.ResourceManagement.WFActivities.Resolver.ResolveEvaluatorWithoutAntiXSS(Match m)
at Microsoft.ResourceManagement.WFActivities.Resolver.ResolveEvaluatorForBodyWithAntiXSS(Match m)
at System.Text.RegularExpressions.RegexReplacement.Replace(MatchEvaluator evaluator, Regex regex, String input, Int32 count, Int32 startat)
at System.Text.RegularExpressions.Regex.Replace(String input, MatchEvaluator evaluator)
at Microsoft.ResourceManagement.WFActivities.Resolver.ResolveBody(String input)
at Microsoft.ResourceManagement.Workflow.Hosting.ResolverEvaluationServiceImpl.ResolveLookupGrammar(Guid requestId, Guid targetId, Guid actorId, Dictionary`2 workflowDictionary, Boolean encodeForHTML, String expression)
at Microsoft.ResourceManagement.Workflow.Activities.ResolveGrammarActivity.Execute(ActivityExecutionContext executionContext)
at System.Workflow.ComponentModel.ActivityExecutor`1.Execute(T activity, ActivityExecutionContext executionContext)
at System.Workflow.ComponentModel.ActivityExecutor`1.Execute(Activity activity, ActivityExecutionContext executionContext)
at System.Workflow.ComponentModel.ActivityExecutorOperation.Run(IWorkflowCoreRuntime workflowCoreRuntime)
at System.Workflow.Runtime.Scheduler.Run()

Hmmm, not a very helpful message. I'm pretty sure this is a bug, because ordinarily you try to handle NullReferenceExceptions in code that's exposed to the public.

Anyway, I'll post this to the forum and get back to you.

Update: I posted this on the FIM forum to see if it got any bites:

http://social.technet.microsoft.com/Forums/en-US/ilm2/thread/39d887bf-638c-4539-8f0e-afd9c0ff4490

Joe Schulman mentioned that someone already logged a similar problem:

https://connect.microsoft.com/site433/feedback/ViewFeedback.aspx?FeedbackID=523776&wa=wsignin1.0#tabs

If you run into this same problem, please visit the Connect link and vote it as important!

NullReferenceException in EnumerationResultEnumerator.Dispose()

noreply@blogger.com (Joe Zamora) — Thu, 07 Jan 2010 23:04:00 +0000

Still working with the unsupported web service client for RC1, and I ran into the following error:

System.NullReferenceException

Object reference not set to an instance of an object.

at Microsoft.ResourceManagement.Client.EnumerationResultEnumerator.Dispose() in C:\FIM2010Dev\Microsoft.ResourceManagement.Samples\Microsoft.ResourceManagement.Client\EnumerationResultEnumerator.cs:line 46

The problem was pretty easy to find, but I thought I'd at least change the code to throw a more helpful exception. The problem happened because I naively tried to use the LINQ methods Count() and First() consecutively:

IEnumerable<RmResource> objects =
    client.Enumerate(xpath, selection.ToArray());
if (objects != null && objects.Count() > 0)
{
    string result = objects.First()[ATTRIBUTE_DISPLAY_NAME].Value.ToString();
    if (!string.IsNullOrEmpty(result))
    {
        displayName = result;
        break;
    }
}

However, much like LINQ to SQL behavior, the queries are run on-the-fly as the results are enumerated, and then they're disposed. So, you guessed it, we can't enumerate the results more than once (or at least we should avoid it). You've probably seen this exception from the LINQ to SQL libraries, "The query results cannot be enumerated more than once."

Here's my modified code for the EnumerationResultEnumerator class. I'm throwing a more helpful exception with the message above. I've highlighted my changes:

using System;
using System.Collections.Generic;
using System.Xml.Schema;
using System.Text;

using Microsoft.ResourceManagement.Client.WsEnumeration;
using Microsoft.ResourceManagement.ObjectModel;

namespace Microsoft.ResourceManagement.Client
{
    class EnumerationResultEnumerator : IEnumerator<RmResource>, IEnumerable<RmResource>
    {
        WsEnumerationClient client;
        List<RmResource> results;
        int resultIndex;
        bool endOfSequence;
        EnumerationContext context;
        String filter;
        String[] attributes;
        RmResource current;
        RmResourceFactory resourceFactory;
        bool disposed = false;

        internal EnumerationResultEnumerator(WsEnumerationClient client, RmResourceFactory factory, String filter, String[] attributes)
        {
            results = new List<RmResource>();
            this.client = client;
            this.filter = filter;
            this.resourceFactory = factory;
            this.attributes = attributes;
        }

        #region IEnumerator<RmResource> Members

        public RmResource Current
        {
            get { return current; }
        }

        #endregion

        #region IDisposable Members

        public void Dispose()
        {
            if (!disposed)
            {
                this.context = null;
                this.results.Clear();
                this.results = null;
                this.disposed = true;
            }
        }

        #endregion

        #region IEnumerator Members

        object System.Collections.IEnumerator.Current
        {
            get { return current; }
        }

        public bool MoveNext()
        {
            if (disposed)
            {
                throw new InvalidOperationException("The query results cannot be enumerated more than once.");
            }

            lock (this.client)
            {
                if (resultIndex < results.Count)
                {
                    this.current = results[resultIndex++];
                    return true;
                }
                else
                {
                    PullResponse response;
                    if (this.context == null)
                    {
                        if (resultIndex > 0)
                        {
                            // case: previous pull returned an invalid context
                            return false;
                        }
                        EnumerationRequest request = new EnumerationRequest(filter);
                        if (attributes != null)
                        {
                            request.Selection = new List<string>();
                            request.Selection.AddRange(this.attributes);
                        }
                        response = client.Enumerate(request);
                        this.endOfSequence = response.EndOfSequence != null;
                    }
                    else
                    {
                        if (this.endOfSequence == true)
                        {
                            // case: previous pull returned an end of sequence flag
                            this.current = null;
                            return false;
                        }
                        PullRequest request = new PullRequest();
                        request.EnumerationContext = this.context;
                        response = client.Pull(request);
                    }
                  
                    if (response == null)
                        return false;
                    resultIndex = 0;
                    this.results = resourceFactory.CreateResource(response);
                    this.context = response.EnumerationContext;
                    this.endOfSequence = response.IsEndOfSequence;
                    if (this.results.Count > 0)
                    {
                        this.current = results[resultIndex++];
                        return true;
                    }
                    else
                    {
                        this.current = null;
                        return false;
                    }
                }
            }
        }

        public void Reset()
        {
            if (!disposed)
            {
                this.results.Clear();
                this.context = null;
            }
        }

        #endregion

        #region IEnumerable<RmResource> Members

        public IEnumerator<RmResource> GetEnumerator()
        {
            return this;
        }

        #endregion

        #region IEnumerable Members

        System.Collections.IEnumerator System.Collections.IEnumerable.GetEnumerator()
        {
            return this;
        }

        #endregion
    }
}

Paolo Tedesco's changes for object count in enumeration responses

As one final note, Paolo has posted code for including the object count in enumeration responses. I haven't tried it yet, but it looks like something I could have used here. Here's the link (note that I'm also posting links to my changes on this thread):

http://social.technet.microsoft.com/Forums/en-US/ilm2/thread/ffc16720-0dfb-4131-b676-9225f15b4f72?prof=required

Multi-valued attributes aren't multi-valued

noreply@blogger.com (Joe Zamora) — Wed, 06 Jan 2010 22:22:00 +0000

I'm back on FIM after a brief hiatus, and I've begun updating my FIM Query Tool with the new unsupported web service client for RC1.

Today I noticed that my multi-valued attributes didn't have multiple values. I'm calling Enumerate on the DefaultClient to check the computed members of a Group. After some digging, I discovered that the attributes weren't recognized as multi-valued because I didn't refresh the schema after instantiating the DefaultClient.

Here's a code snippet from the unsupported WS client sample program:

// First need to construct the client
// We will assume all default contracts
DefaultClient client = new DefaultClient();
// We set the client credentials since often the test cases or client apps run under different accounts
client.ClientCredential = Credential.GetAdminCredential();
// We refresh the schema so that the web service put operations are better informed
client.RefreshSchema();

I interpreted the last comment as, "We only need to call RefreshSchema() when using Put operations." Since I'm only using Enumerate/Pull operations, I just left it out of my code. Well, I was wrong. Turns out that the RmFactory needs a schema refresh before it can determine whether an attribute is multi-valued.

Since this is a potential pitfall every time you use the DefaultClient, I decided to refactor its constructors. Originally, there were three constructors. I added three more that accept an additional NetworkCredential, and now they all call RefreshSchema(). Of course, if you use the original constructors (without the NetworkCredential), they'll use the caller's credentials. Since the FIM Query Tool is a Windows app, it'll use your credentials.

Here are the refactored constructors (note the additional helper method):

public DefaultClient() : this(null)
{
}

public DefaultClient(NetworkCredential clientCredential)
{
    this.wsTransferClient = new WsTransferClient();
    this.wsTransferFactoryClient = new WsTransferFactoryClient();
    this.wsEnumerationClient = new WsEnumerationClient();
    this.mexClient = new MexClient();

    this.resourceFactory = new RmResourceFactory();
    this.requestFactory = new RmRequestFactory();

    init(clientCredential);
}

public DefaultClient(
    String wsTransferConfigurationName,
    String wsTransferFactoryConfigurationName,
    String wsEnumerationConfigurationName,
    String mexConfigurationName
    ) : this(
    null,
    wsTransferConfigurationName,
    wsTransferFactoryConfigurationName,
    wsEnumerationConfigurationName,
    mexConfigurationName
    )
{
}

public DefaultClient(
    NetworkCredential clientCredential,
    String wsTransferConfigurationName,
    String wsTransferFactoryConfigurationName,
    String wsEnumerationConfigurationName,
    String mexConfigurationName
    )
{
    this.wsTransferClient = new WsTransferClient(wsTransferConfigurationName);
    this.wsTransferFactoryClient = new WsTransferFactoryClient(wsTransferFactoryConfigurationName);
    this.wsEnumerationClient = new WsEnumerationClient(wsEnumerationConfigurationName);
    this.mexClient = new MexClient(mexConfigurationName);

    this.resourceFactory = new RmResourceFactory();
    this.requestFactory = new RmRequestFactory();

    init(clientCredential);
}

public DefaultClient(
    String wsTransferConfigurationName,
    String wsTransferEndpointAddress,
    String wsTransferFactoryConfigurationName,
    String wsTransferFactoryEndpointAddress,
    String wsEnumerationConfigurationName,
    String wsEnumerationEndpointAddress,
    String mexConfigurationName,
    String mexEndpointAddress
    ) : this(
    null,
    wsTransferConfigurationName,
    wsTransferEndpointAddress,
    wsTransferFactoryConfigurationName,
    wsTransferFactoryEndpointAddress,
    wsEnumerationConfigurationName,
    wsEnumerationEndpointAddress,
    mexConfigurationName,
    mexEndpointAddress
    )
{
}

public DefaultClient(
    NetworkCredential clientCredential,
    String wsTransferConfigurationName,
    String wsTransferEndpointAddress,
    String wsTransferFactoryConfigurationName,
    String wsTransferFactoryEndpointAddress,
    String wsEnumerationConfigurationName,
    String wsEnumerationEndpointAddress,
    String mexConfigurationName,
    String mexEndpointAddress
    )
{
    this.wsTransferClient = new WsTransferClient(wsTransferConfigurationName, wsTransferEndpointAddress);
    this.wsTransferFactoryClient = new WsTransferFactoryClient(wsTransferFactoryConfigurationName, wsTransferFactoryEndpointAddress);
    this.wsEnumerationClient = new WsEnumerationClient(wsEnumerationConfigurationName, wsEnumerationEndpointAddress);
    this.mexClient = new MexClient(mexConfigurationName, mexEndpointAddress);

    this.resourceFactory = new RmResourceFactory();
    this.requestFactory = new RmRequestFactory();

    init(clientCredential);
}

private void init(NetworkCredential clientCredential)
{
    if (clientCredential != null)
    {
        ClientCredential = clientCredential;
    }
    RefreshSchema();
}

Extra Credit

Can anyone tell me why there are warning messages on the following methods in the RmFactory class?

IsMultiValued
IsReference
IsRequired
RequiredAttributes

No, really, please tell me; I don't know why they're there. For example:

/// <summary>
/// DO NOT USE THIS METHOD -- FOR TESTING ONLY!
/// </summary>
/// <param name="attributeName"></param>
/// <returns></returns>
public bool IsMultiValued(RmAttributeName attributeName)
{
    RmAttributeInfo retValue = null;
    RmAttributeCache.TryGetValue(attributeName, out retValue);
    if (retValue == null)
    {
        return false;
    }
    else
    {
        return retValue.IsMultiValue;
    }
}

Auditing with the FIM Query Tool

noreply@blogger.com (Joe Zamora) — Mon, 27 Jul 2009 22:37:00 +0000

Brad Turner recently received a question from a blog reader:

"I am interested in knowing how can we track/audit which user did a certain change on a user/group account through the ILM portal. Have you written a previous post about this issue? Do you have any information that might help me?"

There are a few ways you could approach this challenge. First, you could find all requests on an object. Here's how you can do that with the FIM Query Tool:

Run the FIM Query Tool and filter for "Request" object types.

Select the following attributes to capture in your audit:
- Created Time
- Creator
- Display Name
- Operation
- Request Parameters
- Target

Change the Reference Format to DisplayName, so that you're not just looking at GUIDs.

Finally, use the following XPath filter:

/Request[Target = /Person[DisplayName = 'Joe Zamora']]

To kind of translate this XPath, we're looking for Request objects whose Target matches the following condition: a Person whose display name is "Joe Zamora". In a production scenario, you'd probably want to use the object's GUID to do the search (ObjectId = '12345678-ABCD-1234-ABCD-1234567890AB'), but I use the display name to make it more readable.

One nice feature of the FIM Query Tool is that, because the results are displayed in a data grid view, you can sort results without re-running the query. Just click on a column header to sort by that column.

One additional note on the results set: to see the details of the request, you'll want to pay attention to the RequestParameters attribute. This is where you'll find which attributes were updated and their new values. This is also where the FIM Query Tools falls a bit short. The attribute is stored in XML, and isn't formatted neatly for quick review. There's a good enhancement request!

Now, this query is pretty handy, but if the object has been updated many times, you may find yourself waiting longer than you'd bargained for to see the results of the audit. Brad suggested that we use the XPath historical query functions to narrow the results set down to a certain time window.

So, the second approach is to use the "betweenTime" XPath function to plug in the time window of interest. Try this in the FIM Query Tool with the rest of the settings remaining the same as above:

betweenTime(/Request[Target = /Person[DisplayName = 'Joe Zamora']], '2008-10-31', '2008-12-31')

Voila! Now you see all the users who made updates to the object during your desired time period. Brad also mentioned a few other XPath functions that he and David Lundell presented at TEC 2009:

allTime(filter) - Show me the objects that ever satisfied this filter

betweenTime(filter, begin datetime, end datetime) - Show me the objects that ever satisfied this filter during the time range specified

atTime(filter, datetime) - Show me the object that satisfied the filter at the specified date and time

David builds some good examples here:

Who were payroll admins at the precise moment of the theft?
atTime(/Person[ObjectID = /Group[DisplayName = 'Payroll Admins']/ComputedMember, '2009-02-01T00:00')

Who were the payroll admins in the merry merry month of of May?
betweenTime(/Person[ObjectID = /Group[DisplayName = 'Payroll Admins']/ComputedMember, '2008-05-01T00:00' , '2008-05-31T23:59:59')