AD import gets an error when retrieving the list of OU's (under Select Organizational Unit (OU) GUI) for the specified domain in the AD Import Rule. 

"An error occurred initializing the OU picker: An error occurred getting the root DN for 'domain.com': An error occurred determining the DN of the root of the domain or server 'domain.com'' ---> A local error has occurred.'

 
Error:
Unable to retrieve defaultNamingContext for:
LDAP://west.org/rootDSE
A local error has occurred.
  
[System.DirectoryServices.DirectoryServicesCOMException @
System.DirectoryServices]
   at System.DirectoryServices.DirectoryEntry.Bind(Boolean throwIfFail)
   at System.DirectoryServices.DirectoryEntry.Bind()
   at System.DirectoryServices.DirectoryEntry.get_AdsObject()
   at System.DirectoryServices.PropertyValueCollection.PopulateList()
   at System.DirectoryServices.PropertyValueCollection..ctor(DirectoryEntry
entry, String propertyName)
   at System.DirectoryServices.PropertyCollection.get_Item(String
propertyName)
   at
Altiris.DirectoryServices.DirectoryExport.LDAPUtility.GetDefaultNamingContex
t(String strServer, String strUserId, String strPassword)
COM Exception errcode: 0x8007203B
Exception logged from:
   at Altiris.Diagnostics.Logging.EventLog.ReportException(Int32 severity,
String strMessage, String category, Exception exception, String footer)
   at Altiris.NS.Logging.EventLog.ReportException(Int32 severity, String
strMessage, String category, Exception exception)
   at
Altiris.DirectoryServices.DirectoryExport.LDAPUtility.GetDefaultNamingContex
t(String strServer, String strUserId, String strPassword)
   at
Altiris.DirectoryServices.UI.Controls.OuPickerCtrlWebService.GetRootDN(Strin
g serverOrDomain, String userName, String password)
   at System.RuntimeMethodHandle._InvokeMethodFast(Object target, Object[]
arguments, SignatureStruct& sig, MethodAttributes methodAttributes,
RuntimeTypeHandle typeOwner)
   at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags
invokeAttr, Binder binder, Object[] parameters, CultureInfo culture, Boolean
skipVisibilityChecks)
   at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags
invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)
   at System.Web.Services.Protocols.LogicalMethodInfo.Invoke(Object target,
Object[] values)
   at System.Web.Services.Protocols.WebServiceHandler.Invoke()
   at System.Web.Services.Protocols.WebServiceHandler.CoreProcessRequest()
   at
System.Web.Services.Protocols.SyncSessionlessHandler.ProcessRequest(HttpCont
ext context)
   at
System.Web.Script.Services.ScriptHandlerFactory.HandlerWrapper.ProcessReques
t(HttpContext context)
   at
System.Web.HttpApplication.CallHandlerExecutionStep.System.Web.HttpApplicati
on.IExecutionStep.Execute()
   at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean&
completedSynchronously)
   at
System.Web.HttpApplication.ApplicationStepManager.ResumeSteps(Exception
error)
   at
System.Web.HttpApplication.System.Web.IHttpAsyncHandler.BeginProcessRequest(
HttpContext context, AsyncCallback cb, Object extraData)
   at System.Web.HttpRuntime.ProcessRequestInternal(HttpWorkerRequest wr)
   at System.Web.HttpRuntime.ProcessRequestNoDemand(HttpWorkerRequest wr)
   at System.Web.Hosting.ISAPIRuntime.ProcessRequest(IntPtr ecb, Int32
iWRType)
----------------------------------------------------------------------------
Date: 7/10/2015 7:00:28 PM, Tick Count: 1684560875 (19.11:56:00.8750000), Size: 3.43 KB
Process: w3wp (10668), Thread ID: 3, Module: w3wp.exe
Priority: 1, Source:
Altiris.DirectoryServices.DirectoryExport.LDAPUtility.GetDefaultNamingContext

Known issue. 

This issue has been reported to the Symantec Development team. A fix has been released with ITMS 7.6 HF4 (DOC8949).


There is a pointfix available for SMP 7.5 SP1 HF5. Please see attached file "Pointfix_eTrack3791270_SMA_7_5_SP1_HF5.zip"

MINIMUM REQUIREMENT:
Installed SMP 7.5 SP1 HF5

HOW TO INSTALL THIS POINTFIX:

  1. Extract files from the archive to the NS hard drive. Make sure Point Fix is not extracted to Altiris install directory (or any subfolder to it).
  2. Execute PFInstaller.exe with administrative privileges (right-click > Run as administrator). Select "Install Files".
  3. Accept UAC (User Account Control) if prompted, select Install Files. Old binaries will be automatically backuped to the Backup folder at the same location where PFinstaller is and replaced with the new ones. Log-file Log.txt will be created at the same location where PFinstaller is.
  4. Close PFInstaller window.

 

 

Workaround for previous versions:
It only happens when the "Use Application credentials" box is checked for that rule. 
If the app ID is manually specified rather than using the App IP checkbox it succeeds and shows the available OUs in the picker for that domain. 

Source: ETrack
ID: 3821489

Thanks for your feedback. Let us know if you have additional comments below. (requires login)

    © 1995-2019 Symantec Corporation