Continual Deletions and Additions Occur With Exchange Server LDAP Management Agent (318227)

SYMPTOMS

Objects are continually deleted and readded if you run Cdir_ldp.exe and the Microsoft Exchange Server Lightweight Directory Access Protocol (LDAP) management agent when the following two conditions are true:

The creation code for the $cs.dn value has been modified in the Metaverse Construction template. (The Connector Space template and Metaverse Construction template are combined for this management agent into one template, Imp.st.)
You are running the management agent in Delta mode.

CAUSE

This problem may occur if the $cd.dn value and the $cs.dn value do not match exactly. When you run the management agent in Delta mode, Cdir_ldp.exe compares the objects in Exchange Server with the objects in the connector space. If the values of these objects do not match exactly, Microsoft Metadirectory Services (MMS) determines that the object is missing and that MMS must delete it. In this scenario, a delete transaction is written to the import file. After the object is deleted and after the object is removed from MMS, when you run the management agent again, the user is added back to MMS. This behavior continues to occur until you correct this condition. This behavior does not occur if you run the management agent in Full mode.

RESOLUTION

To resolve this problem, use the default connector space construction code to build the distinguished name (DN) of the connector space objects. In the Exchange Server LDAP management agent, the code to build the connector space and the code to build the metaverse DN are built by using the same template, the Metaverse Construction template (Imp.st). You can find the section of code to build the DN of the connector space object near the bottom of this template. To find this code:

Click the Exchange Server LDAP management agent.
Click Design MA.
Click the Control Metadirectory tab.
Click the Construction Templates tab.
Click the Metaverse tab.
Make sure that the following default code is used:

#  the metaverse DN can have a multipart relative DN (depending on the configured 
#  option), whereas the connector space relative DN will simply the Exchange rdn
   $CSP.dn = cn=$v_rdn(,$parent("$v_dn"))(,$MA())

The connector space is designed carefully for each specific management agent; Microsoft recommends that you do not modify it. This rule does not apply to metaverse construction. You can modify the metaverse to change the design of the metaverse DNs in MMS.