We suffered a DoS attack recently. The admins upgraded the VM frmaware and since that time FIM has had problems.
I have isolated the [FIM] problem to a specific MA.
FIM Synchronization server fails whenever a full synchronization requires to read/write the connector space of the problematic MA.
I cannot dump the whole of the CS with csexport.exe
PS C:\Program Files\Microsoft Forefront Identity Manager\2010\Synchronization Service\bin> .\csexport.exe "User MA" c:\t
emp\userMAdump.xml
Microsoft Identity Integration Server Connector Space Export Utility v4.1.2273.0
© 2012 Microsoft Corporation. All rights reserved
[560/2944]Failed to export connector space.
Error: <error>The search token appears to be invalid.</error>
PS C:\Program Files\Microsoft Forefront Identity Manager\2010\Synchronization Service\bin>
I cannot search the whole CS using the FIM Sync GUI.
I cannot even delete the CS using the Delete CS only option from Delete MA option of FIM Sync GUI. !!
When I ran the csexport.exe, FIM Sync service stopped. In the Event Log I see these 3 error entries:
The server encountered an unexpected error creating performance counters for management agent "User MA".
Performance counters will not be available for this management agent.
Application: miiserver.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: exception code c0000005, exception address 000000007391E4F5
Faulting application name: miiserver.exe, version: 4.1.2273.0, time stamp: 0x4f91c0b8
Faulting module name: MSVCR90.dll, version: 9.0.30729.6161, time stamp: 0x4dace4e7
Exception code: 0xc0000005
Fault offset: 0x000000000001e4f5
Faulting process id: 0xf44
Faulting application start time: 0x01d1e7097503f47f
Faulting application path: C:\Program Files\Microsoft Forefront Identity Manager\2010\Synchronization Service\Bin\miiserver.exe
Faulting module path: C:\Windows\WinSxS\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_08e61857a83bc251\MSVCR90.dll
Report Id: 8594fe56-5303-11e6-858f-005056bd2558
I want to scratch this User MA and all its connections to the MV and rebuild the MA again. What options do I have?
If I try to Delete the User MA (and its CS) and it fails, I guess only option thereafter is to restore the DataBases, but what about the FIM code?