Dear all,
I'd like to sync some Active Directory and Samba "Active Directory" servers with AzureAD. While that is no worries with Active directory, I found that I cannot use AAD Connect when I tried to connect to one of my Samba 4.4 servers.
If I tried to sync that kind of directory the following error occurs, and I cannot figure out how to resolve that:
[13:40:08.143] [ 5] [ERROR] Out to AD - Device STKKey (ed0474a7-ca1c-4dbc-8a6a-67ceefab1c82): Synchronization Rules must specify a target object type that
exists in the target Connector's schema.
Out to AD - Device STKKey (ed0474a7-ca1c-4dbc-8a6a-67ceefab1c82): Synchronization Rules must specify a target object type that exists in the target Connector's schema.,Microsoft.IdentityManagement.PowerShell.Cmdlet.AddADSyncRuleCmdlet
A deadlock occurred in SQL Server while trying to acquire an application lock.
A deadlock occurred in SQL Server while trying to acquire an application lock.,Microsoft.IdentityManagement.PowerShell.Cmdlet.AddADSyncRuleCmdlet
Exception Data (Raw): Microsoft.Online.Deployment.PowerShell.PowerShellInvocationException: Out to AD - Device STKKey (ed0474a7-ca1c-4dbc-8a6a-67ceefab1c82):
Synchronization Rules must specify a target object type that exists in the target Connector's schema.
Out to AD - Device STKKey (ed0474a7-ca1c-4dbc-8a6a-67ceefab1c82): Synchronization Rules must specify a target object type that exists in the target Connector's schema.,Microsoft.IdentityManagement.PowerShell.Cmdlet.AddADSyncRuleCmdlet
A deadlock occurred in SQL Server while trying to acquire an application lock.
A deadlock occurred in SQL Server while trying to acquire an application lock.,Microsoft.IdentityManagement.PowerShell.Cmdlet.AddADSyncRuleCmdlet
---> Microsoft.IdentityManagement.PowerShell.ObjectModel.SynchronizationConfigurationValidationException: A deadlock occurred in SQL Server while trying to acquire an application lock.
bei Microsoft.DirectoryServices.MetadirectoryServices.UI.WebServices.MMSWebService.SetSynchronizationRule(SynchronizationRule synchronizationRule)
bei Microsoft.IdentityManagement.PowerShell.Cmdlet.AddADSyncRuleCmdlet.ProcessRecord()
--- Ende der internen Ausnahmestapelüberwachung ---
bei Microsoft.Online.Deployment.PowerShell.PowerShellAdapter.TypeDependencies.InvokePowerShell(IPowerShell powerShell)
bei Microsoft.Online.Deployment.PowerShell.PowerShellAdapter.InvokePowerShellCommand(String commandName, InitialSessionState initialSessionState, IDictionary`2 commandParameters, Boolean isScript)
bei Microsoft.Azure.ActiveDirectory.Synchronization.Config.SyncRuleUpgradeEngine.PersistSyncRules(Guid connectorIdentifier, String pathToLogFiles, List`1 syncRuleActions)
bei Microsoft.Online.Deployment.Types.Providers.TemplateEngineProvider.PersistSyncRules(Guid connectorID, List`1 syncRuleActions)
bei Microsoft.Online.Deployment.Types.Configuration.Utility.ConnectorUtility`1.UpdateConnector(IAdSyncConfigExecutionContext`1 executionContext, ConfigurationItem configChange, ConnectorAdapterBase connectorAdapter, IAadSyncContext syncContext, Boolean isNewConnector, Boolean forceUpdateSchema, IAadSyncConfigurationResults& results, List`1 attributeExclusions, ConnectorSpecificPolicy connectorPolicy, Boolean retryOnFailure)
bei Microsoft.Online.Deployment.Types.Configuration.AdConnectorConfigurationItem.Execute[TContext](IAdSyncConfigExecutionContext`1 executionContext, IAadSyncConfigurationResults& results)
bei Microsoft.Online.Deployment.PSModule.Tasks.AADSync.ConfigureAADSyncTask`1.ConfigureSyncEngine(TContext context)
bei Microsoft.Online.Deployment.PSModule.Tasks.AADSync.ConfigureAADSyncTask`1.Execute()
bei Microsoft.Online.Deployment.Framework.Workflow.WorkflowTask.ExecuteWrapper()
I think synchronizing users and groups for Samba to use them with AzureAD/Exchange Online is a common problem. Can someone please let me know either how to resolve the problem mentioned above or provide me with some RTFM link for a how to on how to achieve that?
I appreciate your help!
Thanks,
Martin Gudel