Friday, July 13, 2007
Today I spent some time troubleshooting a problem whereby it wasn't possible to add or edit user profile property import mappings because the 'Data source field to map' drop down and the 'Enter field to map' text box were missing from the 'User Profile Property' page in shared services administration. Instead of seeing this:
I had the following, with the note 'The selection of directory service properties is disabled because the portal is in an untrusted domain or no directory service import is configured yet'.
Additionally, the 'Manage Connections' > 'Edit Connection' page was missing the options to select the active directory source from which to import profiles. Any attempt to change the settings on this page resulted in a popup with the following error. 'This directory service setting has not been validated because the current user is not authenticated to the directory. It may be a valid setting. Do you want to save this directory service connection setting?'
Although not entirely clear, the current user to which this error refers is the account used for the shared service provider application pool. I had it configured to use a local service account which would successfully import profiles from AD (using the default content access account) but this apparently isn't enough to allow you to work with property import mappings. Once I'd switched the SSP application pool to use a domain account everything behaved as expected.