• RSS
  • Twitter
  • FaceBook

Exchange Server Forums

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

OAB / OAL will not generate after migration to 2010 from 2007 (8004010e)

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [Microsoft Exchange 2010] >> General >> OAB / OAL will not generate after migration to 2010 from 2007 (8004010e) Page: [1]
Login
Message << Older Topic   Newer Topic >>
OAB / OAL will not generate after migration to 2010 fro... - 27.Jun.2010 5:57:04 PM   
GarethJones

 

Posts: 3
Joined: 27.Jun.2010
Status: offline 		Hi Guys,

I've been pulling my hair out for days now, let me see if I can describe my problem.

Basically, we are 90% of the way through migrating to Exhcnage 2010 from 2007. Ever since I moved the OAB (or OAL now in 2010) to the new server, I have been getting these errors (this is with logging set to expert)

First I get the logs saying it is starting
Then I get a whole bunch (which are aparently normal) the last being:

Log Name: Application
Source: MSExchangeSA
Date: 28/06/2010 8:46:42 a.m.
Event ID: 9359
Task Category: (13)
Level: Warning
Keywords: Classic
User: N/A
Computer: <server name>
Description:
OALGen truncated or dropped properties for entry 'Joe Tsang' in address list '\Global Address List' because they exceeded the configured size limits for the version 4 offline address list. The affected MAPI ids are: 8008.
- \Default Offline Address Book

I get about 60 or so of these, and then I get:

Log Name: Application
Source: MSExchangeSA
Date: 28/06/2010 8:46:42 a.m.
Event ID: 9339
Task Category: (13)
Level: Error
Keywords: Classic
User: N/A
Computer: <server name>
Description:
Active Directory PDC returned error 8004010e while generating the offline address book for '\Global Address List'. The last recipient returned by the Active Directory was 'Joe Tsang'. This offline address book will not be generated.
- \Default Offline Address Book

And:

Log Name: Application
Source: MSExchangeSA
Date: 28/06/2010 8:46:42 a.m.
Event ID: 9330
Task Category: (13)
Level: Error
Keywords: Classic
User: N/A
Computer: <server name>
Description:
OABGen encountered error 8004010e (internal ID 5001697) accessing Active Directory PDC for '\Global Address List'.
- \Default Offline Address Book

And finally:

Log Name: Application
Source: MSExchangeSA
Date: 28/06/2010 8:46:42 a.m.
Event ID: 9126
Task Category: (13)
Level: Error
Keywords: Classic
User: N/A
Computer: <server name>
Description:
OABGen encountered error 8004010e while calculating the offline address list for address list '\Global Address List'. This offline address list will not be available for client download.
- \Default Offline Address Book.

Now I have spent a-l-o-t of time researching this, and it seems to be an issue going way back to Exchange 2003, and to do with Active Directory corrupt records (specifically the Manager, Secuatary and HomeMDB and ClientMDB values). I ran a tool that was reccomended by Dave Goldman's blog that let me export the entire AD Database (and the correlating values that may be causing the issue) and after manually sifting through 14000 records I concluded that there are no malformed, null or corrupt values in any of those fields or that I lost my mind half way through and I missed them.

I have also tried:
1. Running OABInteg and the proxytest and alltests returns completely normal results.
2. Used the MAPI tool to open up my current OAB and manually checked the previous and following 50 records (as the OAB is generated in bunches of 50) and have found nothing.
3. I have completely remade the OAB (more than once) and get the exact same result. I have also tried using both the web and public folder distribution methods.

The only thing I can find that may help me in this is a mysterious tool developed by the Illumiati branch of Microsoft called "NSPITool" that apparently will in three easy steps tell me where the malformed values are in my active directory and let me resolve it. However this tool is aparently only available via PSS and is something like 600 euros, and i'd rather try post here first before contacting MSPSS.

Any help would be appreicated!!

Gareth
Post #: 1
RE: OAB / OAL will not generate after migration to 2010... - 28.Jun.2010 12:04:32 PM   
Marc.dekeyser

 

Posts: 225
Joined: 19.Apr.2010
Status: offline 		Hi,

Can you post a link where you found you need to pay for the NSPITool? I looked this up as I was surprised to see we'd be charging for tool usage :?

You case looks intresting and I did some searching, but the NSPITool is not guaranteed to fix this. OABValidate might be needed.

I do suggest you open a PSS case for this, it is unlikely you'll have anyone on the forum solving this

Background:
The OAB generation process checks the distinguishedName value for the
attributes listed below for each object that is returned by the filter on the OAB being generated. Any failure will cause the 9339 error event to be thrown during the OAB generation process.
"altRecipient",
"altRecipientBL",
"assistant",
"authOrigBL",
"bridgeheadServerListBL",
"defaultClassStore",
"directReports",
"distinguishedName",
"dLMemRejectPermsBL",
"dLMemSubmitPermsBL",
"dynamicLDAPServer",
"homeMDB",
"homeMTA",
"isPrivilegeHolder",
"kMServer",
"lastKnownParent",
"managedObjects",
"manager",
"masteredBy",
"member",
"memberOf",
"msExchConferenceMailboxBL",
"msExchControllingZone",
"msExchIMVirtualServer",
"msExchQueryBaseDN",
"msExchUseOAB",
"netbootSCPBL",
"nonSecurityMemberBL",
"ownerBL",
"preferredOU",
"publicDelegates",
"publicDelegatesBL",
"queryPolicyBL",
"secretary",
"seeAlso",
"serverReferenceBL",
"showInAddressBook",
"siteObjectBL",
"unAuthOrigBL"

_____________________________

* No rights or priviliges can be taken from my posts.
* Always make a backup!
* http://kb.geminon.be

(in reply to GarethJones)
Post #: 2
RE: OAB / OAL will not generate after migration to 2010... - 28.Jun.2010 6:09:37 PM   
GarethJones

 

Posts: 3
Joined: 27.Jun.2010
Status: offline 		Hi Marc,
Thanks for that. I think you're right, i'm going to have to log a PSS case. In regards to my comment about NSPITool - to get the tool I would have to log a PSS case, and they are around 600 euros per call here. I wasn't implying i'd have to pay for the tool, but for the support case to acquire the tool.

I noticed during some checking that I am getting a bunch of errors in my OABInteg checking:

Processing Address Book Entry #23 of 50.

Display Name = Backups@marketpulse.biz
Object is a Distribution list object
ERROR: LegacyExchangeDN has the '@' character present. This is a PDN issue and this can cause full downloads.

however the summary is:

Scan Finished
+-------------+
Total number of entries processed in the address book: 258
Total number of entries skipped: 0
Total number of contacts: 4
Total number of mailboxes: 139
Total number of distribution lists: 83
Total number of groups: 0
Total number of folders: 32
Total number of Address Book Container objects found: 0
Total number of temp legacyExchangeDN's found: 0
Total number of objects that are missing some main attributes: 0
Total number of objects that mail and proxy attribute don't match: 0
Total number of objects that do not have a domain value: 0
Total number of objects that do not have a valid unicode domain value: 0
Total number of objects that do not have a valid SMTP Domain because first character is not greater than '/': 0
Total number of objects that do not start with /o= or /O=: 0
Total user objects that are missing the Primary Proxy address attribute: 0
Total user objects with proxy addresses equal to or over 64 characters: 0
Total objects with the '@' character in the legacyExchangeDN: 8
Total objects with bad Active Directory Backlinks: 0
Total objects that have a legacyExchangeDN of ADCDisableMail: 0
Total objects that have a legacyExchangeDN of ADCDisableMailByADC: 0


You dont think that might be causing it, as I see you mentioned the DN field?

Thanks
Gareth

(in reply to Marc.dekeyser)
Post #: 3
RE: OAB / OAL will not generate after migration to 2010... - 29.Jun.2010 2:57:30 AM   
Marc.dekeyser

 

Posts: 225
Joined: 19.Apr.2010
Status: offline 		Not really sure Gareth, legacyDN is different from the regular DN. Since it's only 8 objects you might want to try to export the mailbox, mail disable the users, run cleanup agent, mail enable the users.

See if that fixes anything...

Sorry for the confusion there :) I know that the charges are around 300 - 450 euro excl VAT for PSS support, still a good price imho :). Consultants are more expensive xD

_____________________________

* No rights or priviliges can be taken from my posts.
* Always make a backup!
* http://kb.geminon.be

(in reply to GarethJones)
Post #: 4
RE: OAB / OAL will not generate after migration to 2010... - 30.Jun.2010 10:01:38 AM   
Exchange_Geek

 

Posts: 1249
Joined: 31.Dec.2006
Status: offline
quote:

ORIGINAL: GarethJones
Processing Address Book Entry #23 of 50.

Display Name = Backups@marketpulse.biz
Object is a Distribution list object
ERROR: LegacyExchangeDN has the '@' character present. This is a PDN issue and this can cause full downloads.


I have worked a lot with OAB Integ and love it more than OABValidate.

Why not export all users / groups to an excel - filter it with LegacyExchangeDN and Display Name - hunt for this @ - get rid of them in ADUC and that should be it.

Regards,
Exchange_Geek

(in reply to GarethJones)
Post #: 5
RE: OAB / OAL will not generate after migration to 2010... - 1.Jul.2010 2:48:30 AM   
Marc.dekeyser

 

Posts: 225
Joined: 19.Apr.2010
Status: offline 		Changing the LegacyExchangeDN can cause some serious issues ranging from mailflow to not being able to access your mailbox. I'd go the mail disable, mail enable way if the mailboxes aren't to big... You can always export to pst.

_____________________________

* No rights or priviliges can be taken from my posts.
* Always make a backup!
* http://kb.geminon.be

(in reply to Exchange_Geek)
Post #: 6
RE: OAB / OAL will not generate after migration to 2010... - 1.Jul.2010 5:00:29 AM   
Exchange_Geek

 

Posts: 1249
Joined: 31.Dec.2006
Status: offline
quote:

Changing the LegacyExchangeDN can cause some serious issues ranging from mailflow to not being able to access your mailbox. I'd go the mail disable, mail enable way if the mailboxes aren't to big... You can always export to pst.


Mail disabling and re-enabling is definitely a safe option. Else, I do not see why changing legacyExchangeDN causes a problem if done logically.

LegacyExchangeDN is nothing but

/o=OrgName/ou=AGNAme/cn=Recipients/cn=mailNickName

-I'm sure that is well known.

Regards,
Exchange_Geek

(in reply to Marc.dekeyser)
Post #: 7
RE: OAB / OAL will not generate after migration to 2010... - 1.Jul.2010 5:17:19 AM   
Marc.dekeyser

 

Posts: 225
Joined: 19.Apr.2010
Status: offline 		LegacyExchangeDN is linked to other environmentals in the exchange organisation. If that environmental does not exist (or the GUID is different) it can cause a break, but not necessarely...

_____________________________

* No rights or priviliges can be taken from my posts.
* Always make a backup!
* http://kb.geminon.be

(in reply to Exchange_Geek)
Post #: 8
RE: OAB / OAL will not generate after migration to 2010... - 1.Jul.2010 5:20:03 AM   
Exchange_Geek

 

Posts: 1249
Joined: 31.Dec.2006
Status: offline 		Well, it may or may not be - but i leave it to Gareth, what ever suits him best. After all we are here to solve issues, I would be happy to see the issue resolved, be it your solution or mine - that does not matter much :)

Regards,
Exchange_Geek

(in reply to Marc.dekeyser)
Post #: 9
RE: OAB / OAL will not generate after migration to 2010... - 1.Jul.2010 5:23:27 AM   
Marc.dekeyser

 

Posts: 225
Joined: 19.Apr.2010
Status: offline 		E_Geek, I'm here for the same reason as you :)! I just want everything to be out in the open based on my own experiences and knowlegde :). That's the only reason I mentioned that in my previous posts ;)

_____________________________

* No rights or priviliges can be taken from my posts.
* Always make a backup!
* http://kb.geminon.be

(in reply to Exchange_Geek)
Post #: 10
RE: OAB / OAL will not generate after migration to 2010... - 1.Jul.2010 4:45:50 PM   
GarethJones

 

Posts: 3
Joined: 27.Jun.2010
Status: offline 		Hi Guys,
Thanks for all the help so far - I have sucessfully taken out the '@' symbols from my legacyDN fields - and OABInteg is now completely happy with the setup - yet I get nothing being generated.

Even better now though - I try and force a rebuild of the OAB, and I get the event saying it starts.....and then nothing else about it from SA. Been like this for two days now.

Going to have to call PSS :(

(in reply to Marc.dekeyser)
Post #: 11
RE: OAB / OAL will not generate after migration to 2010... - 2.Jul.2010 4:07:37 AM   
Marc.dekeyser

 

Posts: 225
Joined: 19.Apr.2010
Status: offline 		What events get logged if you increase the logging to 7 on OAB Generator?

_____________________________

* No rights or priviliges can be taken from my posts.
* Always make a backup!
* http://kb.geminon.be

(in reply to GarethJones)
Post #: 12
RE: OAB / OAL will not generate after migration to 2010... - 2.Jul.2010 5:44:27 AM   
Exchange_Geek

 

Posts: 1249
Joined: 31.Dec.2006
Status: offline 		Ideally you should get an event stating OAB has started generation - event id 9106
and it should end with event 9107 - OAB has ended generation.

Good idea to set up OAB diag logging to 7.

Infact I would suggest to restart System Attendant -since OABGen is dependant on mad.exe, so restart of SA should work and leave the diagnostic to '7' and wait for event generation at 5am every day OR hit a rebuild and follow the events appearing on application log.

ExBPA health check mode - is it clean ?

Worst case scenario - delete the default OAB and recreate one (works wonders, infact PSS may end up doing that too).

Regards,
Exchange_Geek

(in reply to GarethJones)
Post #: 13

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [Microsoft Exchange 2010] >> General >> OAB / OAL will not generate after migration to 2010 from 2007 (8004010e) Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts


Follow TechGenix on Twitter