Problem with password reset in MIM

Question

Hi,
I have had a case with MS support now for over 2 month and they haven’t solved this issue yet so trying to reach out to the community now.
Anyone here has any experience with the Generic SQL Connector.
I’m trying to use it to write password changes down to a sql server database. Already write user info to it.
Configuration looks like this

When a password is change I get a event log message that says.
The password management extension encountered an error.
The stack trace is:

"Microsoft.MetadirectoryServices.ExtensibleExtensionException: Exception occurred while setting the password.System.NullReferenceException: Object reference not set to an instance of an object.
at Microsoft.IAM.Connector.GenericSql.Bridge.ConfigurationParserBase.GetAttributes(String spparameterKey, OperationTypes operationType)
at Microsoft.IAM.Connector.GenericSql.Bridge.PasswordSPConfigurationParser.GetAttributes()
at Microsoft.IAM.Connector.GenericSql.Bridge.ConfigurationParser.GetFilteredObject(String objectName, ConnectorPage schemaPage, ConnectorProfiles runProfile)
at Microsoft.IAM.Connector.GenericSql.Bridge.BridgeBase..ctor(KeyedCollection2 configParameters, ConnectorProfiles profile) at Microsoft.IAM.Connector.GenericSql.Bridge.PasswordFactory.GetPasswordFactory(KeyedCollection2 configParameters, Partition partition)
at Microsoft.IAM.Connector.GenericSql.GenericSqlConnector.SetPassword(CSEntry csentry, SecureString newPassword, PasswordOptions options) ---> System.NullReferenceException: Object reference not set to an instance of an object.
at Microsoft.IAM.Connector.GenericSql.Bridge.ConfigurationParserBase.GetAttributes(String spparameterKey, OperationTypes operationType)
at Microsoft.IAM.Connector.GenericSql.Bridge.PasswordSPConfigurationParser.GetAttributes()
at Microsoft.IAM.Connector.GenericSql.Bridge.ConfigurationParser.GetFilteredObject(String objectName, ConnectorPage schemaPage, ConnectorProfiles runProfile)
at Microsoft.IAM.Connector.GenericSql.Bridge.BridgeBase..ctor(KeyedCollection2 configParameters, ConnectorProfiles profile) at Microsoft.IAM.Connector.GenericSql.Bridge.PasswordFactory.GetPasswordFactory(KeyedCollection2 configParameters, Partition partition)
at Microsoft.IAM.Connector.GenericSql.GenericSqlConnector.SetPassword(CSEntry csentry, SecureString newPassword, PasswordOptions options)
--- End of inner exception stack trace ---
at Microsoft.IAM.Connector.GenericSql.ExceptionHelper.SetConnectorException(Exception baseException, String errorMessage, String distinguishedName, Boolean hasPasswordOperation)
at Microsoft.IAM.Connector.GenericSql.GenericSqlConnector.SetPassword(CSEntry csentry, SecureString newPassword, PasswordOptions options)
Forefront Identity Manager 4.6.34.0"

I can not see anything in the sql profiler so I’m sure it doesn’t even try to call the procedure.
I also get a second error log saying
An unexpected error has occurred during a password set operation.
"BAIL: MMS(10324): ..\passwordext.cpp(335): 0x80230721 (An error occured in the extensible extension.)
BAIL: MMS(10324): ..\passwordext.cpp(1310): 0x80230721 (An error occured in the extensible extension.)
BAIL: MMS(10324): export.cpp(3425): 0x80230721 (An error occured in the extensible extension.)
ERR_: MMS(10324): ..\ma.cpp(8531): ExportPasswordSet failed with 0x80230721
Forefront Identity Manager 4.6.34.0"

Anyone have any idea what to do?

Answer 1

Hi Håkan,

Are you using the latest version of the Connector?

Try enabling Tracing for the Generic SQL Connector and see if that gives any hints:
https://social.technet.microsoft.com/wiki/contents/articles/21086.fim-2010-r2-troubleshooting-how-to-enable-etw-tracing-for-connectors.aspx

The Exception stack trace thrown by the Connector points to an error when parsing the attributes configured.

Also, it that a semicolon ";" or a colon ":" in the last row?

You could try using comma "," as a separator for all values aswell. That might do the trick.

If this does not help:
Could you try changing "PasswordOptions:Input:PasswordOptions"
to
"PasswordOption:Input:PasswordOptions" (remove the s in the first occurence)

See if that changes things.

Br,
Leo

Answer 2

One wish there was a better error message...like "check your config dude!" :)