1 2 Previous Next 25 Replies Latest reply on Feb 4, 2013 9:41 AM by larfun

    Distribution based on LDAP Query

    harry88 Apprentice

      I am running a re-occurring job to all machines based on a security group in AD. Basically its a restart job to reboot everyones machine nightly.  But its target is a ldap query.  This gives me all machines I need. And the query works and the job runs every night at a scheduled time.

      (&(objectCategory=computer)(!memberOf=cn=Do_Not_Restart_Group ,ou=NY,DC=COMPANY,dc=com))  

       

      The problem I am having is with the query not updating when there's a change.  The group is updated quite often but the job doesn't seem to be re-running the query at the time when its scheduled to run.  On a normal basis, since I am not in the security group, my computer restarts nightly.  I add myself to the group, but my computer still reboots.  Its only when I stop and reschedule the job, is when my computer does not reboot.  Like if the query is only updated then.

       

      I use security groups alot and I base all my distribution packages based on AD groups to deploy software and it works fine. I have policy based jobs like "adobe" and that query's ad based on security group.  If I am in it, I will get it when policy sync runs.

       

      Any ideas where to look? Thanks in advanced.

        • 1. Re: Distribution based on LDAP Query
          zman Master

          What versio,sp,and post patches?

          • 2. Re: Distribution based on LDAP Query
            harry88 Apprentice

            LDMS 9 SP2 with mcp 0324

            • 3. Re: Distribution based on LDAP Query
              Apprentice

              Look inside your c:\Program Files (x86)\LANDesk\ManagementSuite\log\schedldapresolver.exe.log. Usually when there are LDAP lookup issues there will be an error inside of there. Depending on how many tasks use LDAP, this file could be large. When it is open do a find for 'error' and if you find one then look a few lines above it for the taskid. If the taskid of the scheduled task you're having issues with and the taskid from the log are the same you've found your problem.

               

              Last spring/summer I was having many of the same issues you were, btw. We leverage AD and LDAP queries in our environment for many things and this problem went away for me after one of the more recent MCP's... although I can't remember which one specifically, but newer than 0324.

              • 4. Re: Distribution based on LDAP Query
                zman Master

                In addition to what Rob stated, I would consider evaluating SP3 rather than newer MCPs. If you use alot of LDAP queries (we do) than schedldapresover.exe has no memory cap like ldinv32.exe. I've seen it go well over 1 Gb of memory. If you server is short on memory than it may be an issue.

                 

                How often do you have our scheduler service evaluating queries? If also seen issues when you change the amount of threads for the core's scheduler's service. Does the group have any nested groups or is it a part of a circular group reference?

                 

                 

                _____________________________________________________________
                Please consider voting for these ERs:
                Provide Better Pre/Post LDMS Patch/Sp/.0 Information To The Community
                Cumulative Patch List for LANDesk Products
                Query Builder Import
                Provide bulk client deletions without carpal tunnel syndrome.
                Core Synchronization Allow Mirror functionality from Master Core
                • 5. Re: Distribution based on LDAP Query
                  harry88 Apprentice

                  I looked in my schedldapresolver.exe.log and I see no errors.  I even have it running very often.   Looks like its running every 2 minutes.  I shortened it so much because we are in a middle of a rollout and machines are consistently added to AD groups for deployment builds.

                   

                  01/18/2012 13:46:57 INFO  6632:1     RollingLog : Resolving LDAP object for all policies
                  01/18/2012 13:46:58 INFO  6632:1     RollingLog : Current language: ENU
                  01/18/2012 13:46:58 INFO  6632:1     RollingLog : Using culture info: en-US
                  01/18/2012 13:47:00 INFO  6632:1     RollingLog : Resolving LDAP object for task 16
                  01/18/2012 13:47:00 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:00 INFO  6632:1     RollingLog : Resovling canonical LDAP location for the Computer table.
                  01/18/2012 13:47:00 INFO  6632:1     RollingLog : Resolution of canonical LDAP location for the computer table is complete.
                  01/18/2012 13:47:01 INFO  6632:1     RollingLog : Resolving LDAP object for task 19
                  01/18/2012 13:47:01 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:01 INFO  6632:1     RollingLog : Resolving LDAP object for task 26
                  01/18/2012 13:47:01 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:02 INFO  6632:1     RollingLog : Resolving LDAP object for task 31
                  01/18/2012 13:47:02 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:02 INFO  6632:1     RollingLog : Resolving LDAP object for task 38
                  01/18/2012 13:47:02 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:02 INFO  6632:1     RollingLog : Resolving LDAP object for task 45
                  01/18/2012 13:47:02 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:03 INFO  6632:1     RollingLog : Resolving LDAP object for task 75
                  01/18/2012 13:47:03 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:03 INFO  6632:1     RollingLog : Resolving LDAP object for task 85
                  01/18/2012 13:47:03 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:03 INFO  6632:1     RollingLog : Resolving LDAP object for task 88
                  01/18/2012 13:47:03 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:03 INFO  6632:1     RollingLog : Resolving LDAP object for task 91
                  01/18/2012 13:47:03 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:04 INFO  6632:1     RollingLog : Resolving LDAP object for task 96
                  01/18/2012 13:47:04 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:04 INFO  6632:1     RollingLog : Resolving LDAP object for task 99
                  01/18/2012 13:47:04 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:04 INFO  6632:1     RollingLog : Resolving LDAP object for task 106
                  01/18/2012 13:47:04 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:05 INFO  6632:1     RollingLog : Resolving LDAP object for task 107
                  01/18/2012 13:47:05 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:05 INFO  6632:1     RollingLog : Resolving LDAP object for task 108
                  01/18/2012 13:47:05 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:05 INFO  6632:1     RollingLog : Resolving LDAP object for task 109
                  01/18/2012 13:47:05 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:06 INFO  6632:1     RollingLog : Resolving LDAP object for task 112
                  01/18/2012 13:47:06 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:06 INFO  6632:1     RollingLog : Resolving LDAP object for task 113
                  01/18/2012 13:47:06 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:06 INFO  6632:1     RollingLog : Resolving LDAP object for task 114
                  01/18/2012 13:47:06 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:07 INFO  6632:1     RollingLog : Resolving LDAP object for task 116
                  01/18/2012 13:47:07 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:07 INFO  6632:1     RollingLog : Resolving LDAP object for task 117
                  01/18/2012 13:47:07 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:07 INFO  6632:1     RollingLog : Resolving LDAP object for task 119
                  01/18/2012 13:47:07 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:07 INFO  6632:1     RollingLog : Resolving LDAP object for task 122
                  01/18/2012 13:47:07 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:08 INFO  6632:1     RollingLog : Resolving LDAP object for task 131
                  01/18/2012 13:47:08 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:08 INFO  6632:1     RollingLog : Resolving LDAP object for task 134
                  01/18/2012 13:47:08 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:09 INFO  6632:1     RollingLog : Resolving LDAP object for task 135
                  01/18/2012 13:47:09 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:09 INFO  6632:1     RollingLog : Resolving LDAP object for task 140
                  01/18/2012 13:47:09 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:09 INFO  6632:1     RollingLog : Resolving LDAP object for task 142
                  01/18/2012 13:47:09 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:09 INFO  6632:1     RollingLog : Resolving LDAP object for task 143
                  01/18/2012 13:47:09 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:09 INFO  6632:1     RollingLog : Resolving LDAP object for task 144
                  01/18/2012 13:47:09 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:10 INFO  6632:1     RollingLog : Resolving LDAP object for task 147
                  01/18/2012 13:47:10 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:10 INFO  6632:1     RollingLog : Resolving LDAP object for task 148
                  01/18/2012 13:47:10 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:10 INFO  6632:1     RollingLog : Resolving LDAP object for task 149
                  01/18/2012 13:47:10 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:10 INFO  6632:1     RollingLog : Resolving LDAP object for task 150
                  01/18/2012 13:47:10 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:11 INFO  6632:1     RollingLog : Resolving LDAP object for task 156
                  01/18/2012 13:47:11 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:11 INFO  6632:1     RollingLog : Resolving LDAP object for task 157
                  01/18/2012 13:47:11 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:12 INFO  6632:1     RollingLog : Resolving LDAP object for task 158
                  01/18/2012 13:47:12 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:12 INFO  6632:1     RollingLog : Resolving LDAP object for task 159
                  01/18/2012 13:47:12 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:13 INFO  6632:1     RollingLog : Resolving LDAP object for task 161
                  01/18/2012 13:47:13 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:13 INFO  6632:1     RollingLog : Resolving LDAP object for task 162
                  01/18/2012 13:47:13 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:13 INFO  6632:1     RollingLog : Resolving LDAP object for task 163
                  01/18/2012 13:47:13 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:13 INFO  6632:1     RollingLog : Resolving LDAP object for task 164
                  01/18/2012 13:47:13 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:13 INFO  6632:1     RollingLog : Resolving LDAP object for task 165
                  01/18/2012 13:47:13 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:14 INFO  6632:1     RollingLog : Resolving LDAP object for task 166
                  01/18/2012 13:47:14 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:14 INFO  6632:1     RollingLog : Resolving LDAP object for task 168
                  01/18/2012 13:47:14 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:14 INFO  6632:1     RollingLog : Resolving LDAP object for task 169
                  01/18/2012 13:47:14 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:15 INFO  6632:1     RollingLog : Resolving LDAP object for task 170
                  01/18/2012 13:47:15 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:15 INFO  6632:1     RollingLog : Resolving LDAP object for task 171
                  01/18/2012 13:47:15 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:15 INFO  6632:1     RollingLog : Resolving LDAP object for task 172
                  01/18/2012 13:47:15 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:16 INFO  6632:1     RollingLog : Resolving LDAP object for task 173
                  01/18/2012 13:47:16 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:16 INFO  6632:1     RollingLog : Resolving LDAP object for task 174
                  01/18/2012 13:47:16 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:17 INFO  6632:1     RollingLog : Resolving LDAP object for task 175
                  01/18/2012 13:47:17 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:17 INFO  6632:1     RollingLog : Resolving LDAP object for task 176
                  01/18/2012 13:47:17 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:18 INFO  6632:1     RollingLog : Resolving LDAP object for task 177
                  01/18/2012 13:47:18 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:18 INFO  6632:1     RollingLog : Resolving LDAP object for task 178
                  01/18/2012 13:47:18 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:18 INFO  6632:1     RollingLog : Resolving LDAP object for task 181
                  01/18/2012 13:47:18 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:19 INFO  6632:1     RollingLog : Resolving LDAP object for task 185
                  01/18/2012 13:47:19 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:19 INFO  6632:1     RollingLog : Resolving LDAP object for task 186
                  01/18/2012 13:47:19 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:19 INFO  6632:1     RollingLog : Resolving LDAP object for task 187
                  01/18/2012 13:47:19 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:20 INFO  6632:1     RollingLog : Resolving LDAP object for task 190
                  01/18/2012 13:47:20 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:20 INFO  6632:1     RollingLog : Resolving LDAP object for task 191
                  01/18/2012 13:47:20 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:20 INFO  6632:1     RollingLog : Resolving LDAP object for task 194
                  01/18/2012 13:47:20 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:20 INFO  6632:1     RollingLog : Resolving LDAP object for task 195
                  01/18/2012 13:47:20 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:21 INFO  6632:1     RollingLog : Resolving LDAP object for task 197
                  01/18/2012 13:47:21 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:21 INFO  6632:1     RollingLog : Resolving LDAP object for task 198
                  01/18/2012 13:47:21 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:21 INFO  6632:1     RollingLog : Resolving LDAP object for task 199
                  01/18/2012 13:47:21 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:22 INFO  6632:1     RollingLog : Resolving LDAP object for task 200
                  01/18/2012 13:47:22 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:22 INFO  6632:1     RollingLog : Resolving LDAP object for task 201
                  01/18/2012 13:47:22 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:22 INFO  6632:1     RollingLog : Resolving LDAP object for task 202
                  01/18/2012 13:47:22 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:22 INFO  6632:1     RollingLog : Resolving LDAP object for task 203
                  01/18/2012 13:47:22 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:22 INFO  6632:1     RollingLog : Resolving LDAP object for task 204
                  01/18/2012 13:47:22 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:22 INFO  6632:1     RollingLog : Resolving LDAP object for task 205
                  01/18/2012 13:47:22 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:22 INFO  6632:1     RollingLog : Resolving LDAP object for task 206
                  01/18/2012 13:47:22 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:22 INFO  6632:1     RollingLog : Resolving LDAP object for task 208
                  01/18/2012 13:47:22 INFO  6632:1     RollingLog : Resolving canonical names
                  01/18/2012 13:47:23 INFO  6632:1     RollingLog : Completed resolving LDAP object for all policies
                  01/18/2012 13:48:59 INFO  5580:1     RollingLog : Resolving LDAP object for all policies
                  01/18/2012 13:48:59 INFO  5580:1     RollingLog : Current language: ENU
                  01/18/2012 13:48:59 INFO  5580:1     RollingLog : Using culture info: en-US
                  01/18/2012 13:49:01 INFO  5580:1     RollingLog : Resolving LDAP object for task 16
                  01/18/2012 13:49:01 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:01 INFO  5580:1     RollingLog : Resovling canonical LDAP location for the Computer table.
                  01/18/2012 13:49:01 INFO  5580:1     RollingLog : Resolution of canonical LDAP location for the computer table is complete.
                  01/18/2012 13:49:02 INFO  5580:1     RollingLog : Resolving LDAP object for task 19
                  01/18/2012 13:49:02 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:02 INFO  5580:1     RollingLog : Resolving LDAP object for task 26
                  01/18/2012 13:49:02 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:03 INFO  5580:1     RollingLog : Resolving LDAP object for task 31
                  01/18/2012 13:49:03 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:03 INFO  5580:1     RollingLog : Resolving LDAP object for task 38
                  01/18/2012 13:49:03 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:03 INFO  5580:1     RollingLog : Resolving LDAP object for task 45
                  01/18/2012 13:49:03 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:03 INFO  5580:1     RollingLog : Resolving LDAP object for task 75
                  01/18/2012 13:49:03 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:04 INFO  5580:1     RollingLog : Resolving LDAP object for task 85
                  01/18/2012 13:49:04 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:04 INFO  5580:1     RollingLog : Resolving LDAP object for task 88
                  01/18/2012 13:49:04 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:04 INFO  5580:1     RollingLog : Resolving LDAP object for task 91
                  01/18/2012 13:49:05 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:05 INFO  5580:1     RollingLog : Resolving LDAP object for task 96
                  01/18/2012 13:49:05 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:05 INFO  5580:1     RollingLog : Resolving LDAP object for task 99
                  01/18/2012 13:49:05 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:05 INFO  5580:1     RollingLog : Resolving LDAP object for task 106
                  01/18/2012 13:49:05 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:06 INFO  5580:1     RollingLog : Resolving LDAP object for task 107
                  01/18/2012 13:49:06 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:06 INFO  5580:1     RollingLog : Resolving LDAP object for task 108
                  01/18/2012 13:49:06 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:06 INFO  5580:1     RollingLog : Resolving LDAP object for task 109
                  01/18/2012 13:49:06 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:07 INFO  5580:1     RollingLog : Resolving LDAP object for task 112
                  01/18/2012 13:49:07 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:07 INFO  5580:1     RollingLog : Resolving LDAP object for task 113
                  01/18/2012 13:49:07 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:07 INFO  5580:1     RollingLog : Resolving LDAP object for task 114
                  01/18/2012 13:49:07 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:08 INFO  5580:1     RollingLog : Resolving LDAP object for task 116
                  01/18/2012 13:49:08 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:08 INFO  5580:1     RollingLog : Resolving LDAP object for task 117
                  01/18/2012 13:49:08 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:08 INFO  5580:1     RollingLog : Resolving LDAP object for task 119
                  01/18/2012 13:49:08 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:08 INFO  5580:1     RollingLog : Resolving LDAP object for task 122
                  01/18/2012 13:49:08 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:09 INFO  5580:1     RollingLog : Resolving LDAP object for task 131
                  01/18/2012 13:49:09 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:09 INFO  5580:1     RollingLog : Resolving LDAP object for task 134
                  01/18/2012 13:49:09 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:10 INFO  5580:1     RollingLog : Resolving LDAP object for task 135
                  01/18/2012 13:49:10 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:10 INFO  5580:1     RollingLog : Resolving LDAP object for task 140
                  01/18/2012 13:49:10 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:10 INFO  5580:1     RollingLog : Resolving LDAP object for task 142
                  01/18/2012 13:49:10 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:10 INFO  5580:1     RollingLog : Resolving LDAP object for task 143
                  01/18/2012 13:49:10 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:10 INFO  5580:1     RollingLog : Resolving LDAP object for task 144
                  01/18/2012 13:49:10 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:11 INFO  5580:1     RollingLog : Resolving LDAP object for task 147
                  01/18/2012 13:49:11 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:11 INFO  5580:1     RollingLog : Resolving LDAP object for task 148
                  01/18/2012 13:49:11 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:11 INFO  5580:1     RollingLog : Resolving LDAP object for task 149
                  01/18/2012 13:49:11 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:12 INFO  5580:1     RollingLog : Resolving LDAP object for task 150
                  01/18/2012 13:49:12 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:12 INFO  5580:1     RollingLog : Resolving LDAP object for task 156
                  01/18/2012 13:49:12 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:12 INFO  5580:1     RollingLog : Resolving LDAP object for task 157
                  01/18/2012 13:49:12 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:13 INFO  5580:1     RollingLog : Resolving LDAP object for task 158
                  01/18/2012 13:49:13 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:13 INFO  5580:1     RollingLog : Resolving LDAP object for task 159
                  01/18/2012 13:49:13 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:14 INFO  5580:1     RollingLog : Resolving LDAP object for task 161
                  01/18/2012 13:49:14 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:14 INFO  5580:1     RollingLog : Resolving LDAP object for task 162
                  01/18/2012 13:49:14 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:14 INFO  5580:1     RollingLog : Resolving LDAP object for task 163
                  01/18/2012 13:49:14 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:14 INFO  5580:1     RollingLog : Resolving LDAP object for task 164
                  01/18/2012 13:49:14 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:15 INFO  5580:1     RollingLog : Resolving LDAP object for task 165
                  01/18/2012 13:49:15 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:15 INFO  5580:1     RollingLog : Resolving LDAP object for task 166
                  01/18/2012 13:49:15 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:16 INFO  5580:1     RollingLog : Resolving LDAP object for task 168
                  01/18/2012 13:49:16 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:16 INFO  5580:1     RollingLog : Resolving LDAP object for task 169
                  01/18/2012 13:49:16 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:16 INFO  5580:1     RollingLog : Resolving LDAP object for task 170
                  01/18/2012 13:49:16 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:17 INFO  5580:1     RollingLog : Resolving LDAP object for task 171
                  01/18/2012 13:49:17 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:17 INFO  5580:1     RollingLog : Resolving LDAP object for task 172
                  01/18/2012 13:49:17 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:17 INFO  5580:1     RollingLog : Resolving LDAP object for task 173
                  01/18/2012 13:49:17 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:18 INFO  5580:1     RollingLog : Resolving LDAP object for task 174
                  01/18/2012 13:49:18 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:18 INFO  5580:1     RollingLog : Resolving LDAP object for task 175
                  01/18/2012 13:49:18 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:18 INFO  5580:1     RollingLog : Resolving LDAP object for task 176
                  01/18/2012 13:49:18 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:19 INFO  5580:1     RollingLog : Resolving LDAP object for task 177
                  01/18/2012 13:49:19 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:19 INFO  5580:1     RollingLog : Resolving LDAP object for task 178
                  01/18/2012 13:49:19 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:20 INFO  5580:1     RollingLog : Resolving LDAP object for task 181
                  01/18/2012 13:49:20 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:20 INFO  5580:1     RollingLog : Resolving LDAP object for task 185
                  01/18/2012 13:49:20 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:20 INFO  5580:1     RollingLog : Resolving LDAP object for task 186
                  01/18/2012 13:49:20 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:20 INFO  5580:1     RollingLog : Resolving LDAP object for task 187
                  01/18/2012 13:49:20 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:21 INFO  5580:1     RollingLog : Resolving LDAP object for task 190
                  01/18/2012 13:49:21 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:21 INFO  5580:1     RollingLog : Resolving LDAP object for task 191
                  01/18/2012 13:49:21 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:21 INFO  5580:1     RollingLog : Resolving LDAP object for task 194
                  01/18/2012 13:49:21 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:22 INFO  5580:1     RollingLog : Resolving LDAP object for task 195
                  01/18/2012 13:49:22 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:22 INFO  5580:1     RollingLog : Resolving LDAP object for task 197
                  01/18/2012 13:49:22 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:22 INFO  5580:1     RollingLog : Resolving LDAP object for task 198
                  01/18/2012 13:49:22 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:22 INFO  5580:1     RollingLog : Resolving LDAP object for task 199
                  01/18/2012 13:49:22 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:23 INFO  5580:1     RollingLog : Resolving LDAP object for task 200
                  01/18/2012 13:49:23 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:23 INFO  5580:1     RollingLog : Resolving LDAP object for task 201
                  01/18/2012 13:49:23 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:23 INFO  5580:1     RollingLog : Resolving LDAP object for task 202
                  01/18/2012 13:49:23 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:23 INFO  5580:1     RollingLog : Resolving LDAP object for task 203
                  01/18/2012 13:49:23 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:23 INFO  5580:1     RollingLog : Resolving LDAP object for task 204
                  01/18/2012 13:49:23 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:23 INFO  5580:1     RollingLog : Resolving LDAP object for task 205
                  01/18/2012 13:49:23 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:24 INFO  5580:1     RollingLog : Resolving LDAP object for task 206
                  01/18/2012 13:49:24 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:24 INFO  5580:1     RollingLog : Resolving LDAP object for task 208
                  01/18/2012 13:49:24 INFO  5580:1     RollingLog : Resolving canonical names
                  01/18/2012 13:49:24 INFO  5580:1     RollingLog : Completed resolving LDAP object for all policies
                  01/18/2012 13:51:01 INFO  6688:1     RollingLog : Resolving LDAP object for all policies
                  01/18/2012 13:51:01 INFO  6688:1     RollingLog : Current language: ENU
                  01/18/2012 13:51:01 INFO  6688:1     RollingLog : Using culture info: en-US
                  01/18/2012 13:51:03 INFO  6688:1     RollingLog : Resolving LDAP object for task 16
                  01/18/2012 13:51:03 INFO  6688:1     RollingLog : Resolving canonical names
                  01/18/2012 13:51:03 INFO  6688:1     RollingLog : Resovling canonical LDAP location for the Computer table.
                  01/18/2012 13:51:04 INFO  6688:1     RollingLog : Resolution of canonical LDAP location for the computer table is complete.
                  01/18/2012 13:51:04 INFO  6688:1     RollingLog : Resolving LDAP object for task 19
                  01/18/2012 13:51:04 INFO  6688:1     RollingLog : Resolving canonical names
                  01/18/2012 13:51:04 INFO  6688:1     RollingLog : Resolving LDAP object for task 26
                  01/18/2012 13:51:04 INFO  6688:1     RollingLog : Resolving canonical names
                  01/18/2012 13:51:05 INFO  6688:1     RollingLog : Resolving LDAP object for task 31
                  01/18/2012 13:51:05 INFO  6688:1     RollingLog : Resolving canonical names
                  01/18/2012 13:51:06 INFO  6688:1     RollingLog : Resolving LDAP object for task 38
                  01/18/2012 13:51:06 INFO  6688:1     RollingLog : Resolving canonical names

                  • 6. Re: Distribution based on LDAP Query
                    Apprentice

                    This has been a known issue in LDMS since at least 8.8SP2 as we've been using LDAP groups to target our weekly reboot tasks.  Essentially, we have to remove all targets (and the supporting query) in order to insure that modifications to the LDAP group get populated correctly the next time the task is ran.  I have openned a couple of cases for this issue--we essentially had over 35 LDAP queries & almost 45 tasks targeting over 4000 clients--the last time was when we migrated to 9.0SP2 and the problem still existed.  The bottom line is that this is how LDMS handles LDAP query results.  Essentially, the task appends the target list rather than completely flushing the target list for the task.  I'm sure that you will find that your tasks will pick up any NEW targets added to your LDAP query but it won't remove any targets that are no longer in the LDAP query.  This behavior is not present if you use queries based on the LANDesk db but is very evident on recurring tasks with LDAP queries.  The solution would require a fundamental feature change as to how LDMS handles LDAP queries in recurring tasks.  Hadn't heard of anyone else doing what we were doing, and having the same issues, so didn't pursue it.  Additionally, we just recently revamped our groupings within AD to streamline the number of tasks & LDAP queries which has helped tremendously but the underlying problem still remains.

                    1 of 1 people found this helpful
                    • 7. Re: Distribution based on LDAP Query
                      harry88 Apprentice

                      Thank you for the reply, you are right and we have the exact situation.  We are in the same boat it seems.  It's a great way to use it if it only worked right.

                      • 8. Re: Distribution based on LDAP Query
                        harry88 Apprentice

                        Sorry to beat this to death.  But since I applied SP3 to LDMS9 , I am getting some weird results.  Since changing my software distribution scheduled task from ldap query to landesk query, I am having issues with machines not getting the jobs set as policy.  Let me explain, I have a computer that has been offline for a good 5 months.  I bring it online and I have a job set based in a user if  'staff' which sets a custom data field to staff = y.  I run inventory on the computer and it checks in all nicely and shows in inventory in custom data as staff = Y as well.  My job is based on a landesk query.  I wait a few hours and the scheduled task still doesn't show the machine in task until I restart the task.  I have the config\scheduler\interval between query evaluations set to 20 minutes but it doesn't seem to be running.  This was working at one point.  I only noticed this after sp3.  Anyone having or heard of this issue? Thanks in advance.

                        • 9. Re: Distribution based on LDAP Query
                          Frank Wils ITSMMVPGroup

                          What delivery method do you use?

                           

                          Frank

                          • 10. Re: Distribution based on LDAP Query
                            tdavenport Specialist

                            We use LDAP queries as well, primarily for SW distiribution (140 currently). We found that the frequency of the scheduler was a problem if we set it under 15 minutes. Anything under that and the scheduler would not complete updating all of the queries before the next scheduled interval. This seemed prevent the saved query from picking up new machines. Even then, we have to restart the scheduler every three or four weeks to "flush it out". It's possible that it's not just the 140 queries that slow things down but the cumulative number of queries (LDAP and all others)  that prevents it from completing fully. While 20 minutes seems like an acceptable time frame, you might try adjusting the scheduler interval. With that being said, our LDAP queriies do work and update properly for us in SP3 - with a little coaxing. Also, as Frank stated, be sure your delivery method is set to policy and required. If applicable, change it from once to periodic.

                            • 11. Re: Distribution based on LDAP Query
                              harry88 Apprentice

                              the method is policy and required with progress.  I am getting closer to figuring whats going on. Looks like now that the ldap queries are working with the change in interval, but the landesk queries dont seem to be running.

                               

                              Does anyone know what this means?

                              in the schedqry.log I got this:

                              Fri, 11 May 2012 10:41:48 Failed to bind ADSI object in getting group members, returning (8007052E)

                              Fri, 11 May 2012 10:41:48 Failed to bind ADSI object in getting group members, returning (80004002)

                              • 12. Re: Distribution based on LDAP Query
                                Apprentice

                                The first return code (8007052E) is a LDAP error for 'unknown username or password', and the second one is probably associated with the first.

                                • 13. Re: Distribution based on LDAP Query
                                  harry88 Apprentice

                                  Would you know where this is coming from? My ldap queries are working and my manage active directory sources is working as well.

                                  • 14. Re: Distribution based on LDAP Query
                                    technobabble Apprentice

                                    We, also, are having this same issue running LDMS 9 SP3 and have not found a resolution.

                                    1 2 Previous Next