A valid entry in the proxyAddresses attribute becomes an eliminated attribute value in the metaverse schema, or the group membership is truncated in the Active Directory Application Mode management agent in Identity Integration Feature Pack

In Microsoft Identity Integration Feature Pack for Microsoft Windows Server Active Directory, you may experience one of the following symptoms.

Symptom 1
When you use the Galsync management agent to call the InsertProxyAddress function in an attribute flow rule, a valid entry in the proxyAddresses attribute becomes an eliminated attribute value in the metaverse schema. This problem occurs when two entries in the attribute flow rule have the same address but have different address type prefixes. For example, the following two entries fit this condition:

• SMTP:user1@microsoft.com
• SIP:user1@microsoft.com

Note When you call the InsertProxyAddress function, one address is eliminated from the proxyAddresses attribute.

Symptom 2
The group membership is truncated in the Active Directory Application Mode management agent when you import groups whose member attribute contains more than 5,000 elements.

This problem occurs because of the following causes:

• Symptom 1 occurs because the Galsync.dll file does not compare the address type prefix when the file looks for duplicate values in the proxyAddresses attribute.
• Symptom 2 occurs because of a problem in Identity Integration Feature Pack for Windows Server Active Directory.

Hotfix information

A supported hotfix is available from Microsoft. However, this hotfix is intended to correct only the problem that is described in this article. Apply this hotfix only to systems that are experiencing this specific problem.

If the hotfix is available for download, there is a "Hotfix download available" section at the top of this Knowledge Base article. If this section does not appear, submit a request to Microsoft Customer Service and Support to obtain the hotfix.

Note If additional issues occur or if any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. For a complete list of Microsoft Customer Service and Support telephone numbers or to create a separate service request, visit the following Microsoft Web site: Note The "Hotfix download available" form displays the languages for which the hotfix is available. If you do not see your language, it is because a hotfix is not available for that language.

File information

The English version of this hotfix has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

A hotfix for this problem is available for the following products:

• Identity Integration Feature Pack for Windows Server Active Directory
  
  
• Microsoft Identity Lifecycle Manager 2007
  
  For more information about the hotfix that is available for Identity Lifecycle Manager, click the following article number to view the article in the Microsoft Knowledge Base:
  940008  (http://support.microsoft.com/kb/940008/ ) An entry in the proxyAddresses attribute becomes an eliminated attribute in the metaverse schema, the group membership is truncated in the ADAM management agent, or you receive an "Indirect reference" error message in Identity Lifecycle Manager 2007
• Microsoft Identity Integration Server 2003
  
  For more information about the hotfix that is available for Microsoft Identity Integration Server 2003, click the following article number to view the article in the Microsoft Knowledge Base:
  937561  (http://support.microsoft.com/kb/937561/ ) An entry in the proxyAddresses attribute becomes an eliminated attribute in the metaverse schema, the group membership is truncated in the ADAM management agent, or you receive an "Indirect reference" error message in Identity Integration Server 2003

For more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base: