All emails are being deleted when using "Exclude mode - Archive item for users in your organization..."

Versions / Builds Affected

20141117, 20150218 (different behaviour)

Status

Open

TT / JIRAID

2850

How to Identify

The following combination of settings / circumstances cause that all emails are getting deleted and none being archived (read: data loss): 1. Having the Archive Restriction setting [Using an exclusion list & Archive item for users in your organization. Users in restriction list will not be able to view it] configured 2. Having a group in the list which was deleted from AD GFI Archiver 2015 build 20141117 Emails will get downloaded and deleted from the journal mailbox, but none would get archived. They flow through Core\Pickup and Core\Queue and get deleted instead of being passed to Store for archival. When opening [Configuration > Archive Restrictions] the list would contain a group entry which is shown as: GUID [Deleted] LogScheduler.log 2015-01-07,18:15:12,462,1,"#000012A0","#00000016","info ","LogScheduler","Processing folder: Queue (normal)" 2015-01-07,18:15:12,469,1,"#000012A0","#00000016","info ","LogScheduler","Pooling batch #1, Size:35, binsize:4555809" 2015-01-07,18:15:12,470,1,"#000012A0","#0000003D","info ","LogScheduler","Loading file: Queue\0269a219-7de2-4534-88ae-d74f6d8ecade.envelope" ... 2015-01-07,18:15:12,504,1,"#000012A0","#0000003D","info ","LogScheduler","Filter: MArc.Logging.TicketFilter" 2015-01-07,18:15:12,514,1,"#000012A0","#0000003D","info ","LogScheduler","Filter: MArc.Logging.DirectionFilter" 2015-01-07,18:15:12,527,1,"#000012A0","#0000003D","info ","LogScheduler","Filter: MArc.Logging.ExcludeFilter" 2015-01-07,18:15:15,942,1,"#000012A0","#0000003D","info ","LogScheduler","Filter requested to stop processing file: Queue\0269a219-7de2-4534-88ae-d74f6d8ecade.envelope" ... 2015-01-07,18:15:15,947,1,"#000012A0","#0000003D","info ","LogScheduler","No files left in the batch. Stop processing" (above is happening for all emails) LogFilters.log 2015-01-07,18:15:12,527,1,"#000012A0","#0000003D","info ","LogFilters","ExcludeFilter - process" 2015-01-07,18:15:12,527,1,"#000012A0","#0000003D","info ","LogFilters","Processing: Queue\0269a219-7de2-4534-88ae-d74f6d8ecade.envelope" 2015-01-07,18:15:12,667,1,"#000012A0","#0000003D","warning","LogFilters","Warning: CheckUserInGroup failed with [System.DirectoryServices.DirectoryServicesCOMException (0x80072030): There is no such object on the server. ; ; ;Server stack trace: ; at System.DirectoryServices.DirectoryEntry.Bind(Boolean throwIfFail) ; at System.DirectoryServices.DirectoryEntry.Bind() ; at System.DirectoryServices.DirectoryEntry.get_AdsObject() ; at System.DirectoryServices.PropertyValueCollection.PopulateList() ; at System.DirectoryServices.PropertyValueCollection..ctor(DirectoryEntry entry, String propertyName) ; at System.DirectoryServices.PropertyCollection.get_Item(String propertyName) ; at MArc.Ada.DE.AdaEngineDS.IsUserInGroup(String sUserID, String sGroupID, Boolean suppressException) ; at MArc.Ada.DE.AdaDirectoryCache.IsUserInGroup(String sUserID, String sGroupID, Boolean suppressException) ; at MArc.Ada.Services.AdaInformation.IsUserInGroup(String userID, String groupID, Boolean suppressException) ; at System.Runtime.Remoting.Messaging.StackBuilderSink._PrivateProcessMessage(IntPtr md, Object[] args, Object server, Int32 methodPtr, Boolean fExecuteInContext, Object[]& outArgs) ; at System.Runtime.Remoting.Messaging.StackBuilderSink.SyncProcessMessage(IMessage msg, Int32 methodPtr, Boolean fExecuteInContext) ; ;Exception rethrown at [0]: ; at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg) ; at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type) ; at MArc.Ada.Services.AdaInformation.IsUserInGroup(String userID, String groupID, Boolean suppressException) ; at MArc.Logging.ExcludeFilter.CheckUserInGroup(String userID, String groupID, ExcludeMode mode)]. Returning [True] using [LooseExclude] mode" 2015-01-07,18:15:12,668,1,"#000012A0","#0000003D","info ","LogFilters","LooseExcludeFilter - result - Archive: False" AdaEngineADDSHostplugin2.log 2015-01-07,18:15:12,530,1,"#000012A0","#0000002D","info ","AdaEngineADDSHost plugin 2","IsUserInGroup[9e5ad741f2f0af43bf564d8a3cf362ea][3d5eeef210e79d4d9285f977a8e5c82a]: >>" 2015-01-07,18:15:12,595,1,"#000012A0","#0000002D","error ","AdaEngineADDSHost plugin 2","ERROR: IsUserInGroup: exception while enumerating user groups[There is no such object on the server. ;]" GFI Archiver 2015 SR1 build 20150218 In this version the issue is not fixed, but a code change did cause a change in the behaviour. In this version and the constellation above emails are getting archived, but without ownership.

Workaround / Fix Details

1. Open [Configuration > Archive Restrictions] and remove any groups which have been deleted 2. Add a new group / users if needed 3. Stop/start services 4. From this point archival should work OK again The IET can be used in import emails which still exist in the user mailboxes into GFI Archiver. Best to specify the time range accordingly to match the gap while the issue was occurring.

Required Actions

Work through the workaround section and consult with PSG if needed