Import export utility user not found

Question

I'm getting the following error when running the 9.3.1 ImportExportUtility on a 9.2.0.2 version of Shared Services. NTLM is used as the authentication provider.
2009-06-19 08:49:30,642 Export : Exception encountered while retrieving user ntlm://SID=S-1-5-21-2134593322-327503246-231145771-21130?USER
2009-06-19 08:49:30,642 Export : Root cause : User not found with identity = ntlm://SID=S-1-5-21-2134593322-327503246-231145771-21130?USER
2009-06-19 08:49:30,658 Export : Silently ignoring the last error
There were 99 users extracted and this message appeared for 36 of the 99. Could someone tell me where the users are not in sync. Is it between Open Ldap and NTLM, Open Ldap and the application repository, etc. Also, is there a way of identifying the user Id. from the message.
Thanks,
Tom

Answer 1

I finally found a real solution to this problem and I wish I had found it sooner.......
Starting sometime around 9.2, Oracle started including a tool called : UpdateNativeDir
The primary purpose of the tool (as I understand it) is to allow you to do a refresh between your external provider (i.e. Active Directory) and the native (OpenLDAP) directory in the event you moved directories around. This tool will also purge any invalid entries that are in the local (LDAP) directory that are not in the external provider.
The tool is pretty straight forward and the readme file explains the details of how to use it.
I've tested this tool in our dev and production environments now and it does exactly what I need. The additional benefit is that I can schedule this to run periodically to ensure the directories are sync'd.
The tool is going to be on your Shared Services machine and comes zipped in a file called UpdateNativeDir.zip
According to the documention (9.2.0.3) it is located at :
<Hyperion_Home>/common/utilities/nativedirectoryupdateutility
On our 9.3.1 Shared Services box, I located it at :
<Hyperion_Home>/common/utilities/SyncOpenLdapUtility