Audiences & Gatherer Log for Profiles Spits out 0x8004400c

[dlongnecker]

Hmm, wow, being sick does mess with the mind.. I thought I posted this last week, but don't see it. Reposting!

----

I've started setting up our primary distribution/security groups as audiences and tied the profiles to our domain to pull in the thousands of users we have in our domain; however... I noticed that even though I was specifying the security groups correctly, the audiences never populated with users... only "All portal users" is working. When I specifiy, say an audience for all MIS using our All MIS group, the "members" remains at zero. I started to investigate our active directory connection and noticed that a few users were failing...

Number of user profiles: 39,574
Source of user set: Custom source
Import status: Idle
Import time: Ended full import at 2/9/2005 11:15 PM
Import schedule (full): At 11:00 PM every day, starting 2/9/2005
Last log entry: The operation completed successfully.
Last import errors: 14,208

A few... thousand of them. Many of our users are in the system, but it appears that the totally random 14,208 users are being rejected; however, if I do a search for that user in the portal, I find their Public MySite just fine.

Here's what the gatherer log is spitting out for each of those 14,000 users:

quote:

2/9/2005 11:15:33 PM Add
The Full update is complete

2/9/2005 11:15:31 PM Modify spsimport://{SERVERNAME}/{DOMAIN}?CN={USER NAME},OU=Staff,OU={ANOTHER OU},DC={DOMAIN},DC={DOMAIN}
The address could not be found, (0x8004400C - The requested operation failed with error code 0x8004400c. No further information about this error is available.) Error (0x8007203a) occurred, which may have resulted from the unavailability of directory service server ({DC}). If the auto discovery option is turned on, import will re-try it with the newly discovered domain controller. Otherwise, verify your import settings and make sure the server is still available.

I've tried pointing it to a "custom source" to a specific domain controller and that isn't working for me either...

In addition, it appears that it's created a few dups within the system. I can do a search for "david longnecker" and find my customized MySite along with this null MySite that doesn't appear to be tied to active directory (no contact, telephone, etc) and a totally different GUID. I'm not sure if this is a glitch with the profiles or what...

Any ideas, whitepapers, etc on "best practices" of AD integration... or possible steps I've missed?

Thanks in advance!

-David

---
David R. Longnecker
Web Developer
CCNA, MCSA, Network+, A+
Management Information Services
Wichita Public Schools, USD 259

 

[Thomas2000]

Hello,

For the audience part I had similar issues, that the custom audience created did not populate properly. But after recompiling the audience the members started to show up.

When it comes to your failing users are they in different OU's? so that is totally "random"? It wouldn't be something like your crawling account does not have read access to all the OU's in your A.D that you are trying crawl?

I think I followed the same steps as you have and I can't really see that you have missed something. I have howver only imported a few thousand profiles (users) so far, but they have all been from different domains (and OU's) with in the AD (our A.D is setup that you are allowed to read off it if you are an authenticated user, so I would not have any problems with access rights).

What I have noticed is that if I added my account to the Portal before doing an import of users, and created a My Site, after the import was done I could also find a MySite which is not my customized one.

If I find anything about AD integration and best practises I'll post it here.

Regards,
Thomas

 

[dlongnecker]

Thomas-

Well, I figured out part of the audience problems. Apparently Universal Groups won't compile into Audiences... the globals are working just fine--which will be an insane annoyance as we do much of our security off Universal groups that double as Exchange distribution groups (releving the need to maintain two group memberships). I'll dink around TechNet and see if I can find anything official to explain this.

I "believe" the spsadmin account I'm using to crawl the AD is a privilaged account, but, it's been a while--thanks for the tip, I'll check that out.

Regarding the "phantom" MySites, is there a way to clean those up? I realize the space they take is minimal; however, I'm worried it'll confuse our users when we launch the Portal--we hope to use the portal as a semi-telephone directory and we have enough Bob Smiths in the organization--we don't need dupes!

Thanks!

-David

---
David R. Longnecker
Web Developer
CCNA, MCSA, Network+, A+
Management Information Services
Wichita Public Schools, USD 259

 

[Thomas2000]

Hello,

We are using global groups here so that is why I never had that problem with the audiences.

I have not found (not looked so hard either) a solution to clean out the "Phantom" MySites, but it is as you say pretty annoying to have dupplicates. If I find a solution I will post it here.

Regards,
Thomas