Trying to figure out why the report fails with an error after returning a few results

Question

I created a custom report based on the script supplied and it seems to be working because it returns a few results before throwing the attached error.

Everything looks correct in the report configuation and script. Any ideas what might be causing it to error out on some groups or why it would be returning a null-value?

Comments

Hello,

For troubleshooting purposes, please, post here or send us (support@adaxes.com) the script you are using to generate the report in TXT format.

---

The code used was copied from the related answer that is linked to this question.

$groupDNString = "%param-Group%"
$groupDN = New-Object "Softerra.Adaxes.LDAP.DN" $groupDNString

try
{
    $groupCriteria = New-AdmCriteria -Type "group" -Expression {membershipType -eq "rule-based"}
    $Context.DirectorySearcher.AddCriteria($groupCriteria)

    $searchResultIterator = $Context.DirectorySearcher.ExecuteSearch()
    while ($Context.MoveNext($searchResultIterator))
    {
        $searchResult = $searchResultIterator.Current
        $group = $Context.BindToObjectBySearchResult($searchResult)

        foreach ($rule in $group.MembershipRules) 
        {
            if ($rule.Type -ne "ADM_BUSINESSUNITMEMBERSHIPTYPE_GROUP")
            {
                continue
            }

            $ruleGroupDNString = $rule.Group.Get("distinguishedName")
            $ruleGroupDN = New-Object "Softerra.Adaxes.LDAP.DN" $ruleGroupDNString

            if ($groupDN -eq $ruleGroupDN)
            {
                $Context.Items.Add($searchResult)
                break
            }
        }
    }
}
finally
{
    if ($searchResultIterator) 
    { 
        $searchResultIterator.Dispose()
    }
}

---

Hello,

Unfortunately, we were not able to reproduce the error and the script works exactly as intended.

For further troubleshooting, please, post here or send us (support@adaxes.com) a screenshot of the Multi-server environment dialog. The dialog displays how many Adaxes services you have and what their versions are. For information on how to view it, see https://www.adaxes.com/help/MultiServerEnvironment.

---

Here is the screeshot of our multi-server environment.

Is there a way for me to do any debug on this script to report which object it is throwing the error on? I've tried it with multiple groups and most throw the error after returning a few results.

Not sure if this helps or not, but I am seeing this in the log: Which would be at this line:
$ruleGroupDNString = $rule.Group.Get("distinguishedName")

In this case, the report returned seven results before it threw the error.

Answer 1

Hello,

The issue can occur in case there are invalid membership rules. For example, a group in a rule is deleted. We updated the script to handle such cases.

$groupDNString = "%param-Group%"
$groupDN = New-Object "Softerra.Adaxes.LDAP.DN" $groupDNString

try
{
    $groupCriteria = New-AdmCriteria -Type "group" -Expression {membershipType -eq "rule-based"}
    $Context.DirectorySearcher.AddCriteria($groupCriteria)

    $searchResultIterator = $Context.DirectorySearcher.ExecuteSearch()
    while ($Context.MoveNext($searchResultIterator))
    {
        $searchResult = $searchResultIterator.Current
        $group = $Context.BindToObjectBySearchResult($searchResult)
        $groupName = $Context.GetDisplayNameFromAdsPath($group.AdsPath, $True)

        foreach ($rule in $group.MembershipRules) 
        {
            if ($rule.Type -ne "ADM_BUSINESSUNITMEMBERSHIPTYPE_GROUP")
            {
                continue
            }

            if ($NULL -eq $rule.Group)
            {
                $Context.LogMessage("Membership rules of $groupName group contain ivalid objects.", "Warning")
                continue
            }

            $ruleGroupDNString = $rule.Group.Get("distinguishedName")
            $ruleGroupDN = New-Object "Softerra.Adaxes.LDAP.DN" $ruleGroupDNString

            if ($groupDN.CompareTo($ruleGroupDN) -eq 0)
            {
                $Context.Items.Add($searchResult)
                break
            }
        }
    }
}
finally
{
    if ($searchResultIterator) 
    { 
        $searchResultIterator.Dispose()
    }
}

Comments

Looks like that did the trick. Thanks for the fix!