Microsoft has released a hotfix rollup package (build 4.1.3508.0) for Microsoft Forefront Identity Manager (FIM) 2010 R2.
“Issues that are fixed or features that are added in this update
This update fixes the following issues that were not previously documented in the Microsoft Knowledge Base.
FIM Service and Portal
If a FIMService instance loses connection to the FIMService database, the FIMService instance may stop processing FIM Service MA export requests. This results in failed FIM Service MA exports that have a run status of stopped-server. Additionally, the following exception is logged in the Forefront Identity Manager event log:
Consider the following scenario:
- A Transition Out management policy rule is using a dynamic set together with a multivalued attribute.
- Two or more elements are removed from the attribute in a single request.
- One of the removed elements triggers the Transition-Out ManagementPolicyRule (MPR) resource.
In this scenario, the request fails. Additionally, you receive the following exception:
When an export that is run in the FIM Service MA includes updates to the Filter attribute of multiple dynamic groups, a failed-modification-via-web-services exception may be returned. When you review the details of the exception, you find that an SQL deadlock occurred.
FIM Synchronization Service
If a multivalued attribute is exported and then changed directly in the target system, the change is not evaluated during delta synchronization. For example, this issue occurs in the following scenario when the Active Directory Management Agent is used:
- A change to proxyAddresses is exported to the Active Directory for User1.
- A second change is made to proxyAddresses directly in Active Directory outside the synchronization service.
- A Delta Import run profile is run to confirm the exported changes.
In this scenario, the next delta sync will not process the change.
If an exception is thrown by the Connector’s password extension during password synchronization, the Connector will be unloaded from memory. This behavior may cause high processor usage on the computer that is hosting the FIM Synchronization Service when that computer processes password synchronization if it is under load or is synchronizing passwords to multiple Connectors.
After this update is installed, exceptions of type PasswordPolicyException and PasswordIllFormedException no longer discard the password interface and unload the Connector. This lets the interface to be reused for another password operation to the connected data source. The password operation will not be retried and is removed from the queue. Any other exception will still unload the Connector and reload it at the next password operation.”