Problem deploying BAM security - names with dots fails

Topics: Bindings File, Settings Management and SSO, General Questions, Getting Started/Beginner, Server Deployment, Tips and Tricks, Visual Studio Integration
Sep 13, 2011 at 3:50 PM

Hello !

I am having some issues while deploying the BAM activities and views of our BizTalk applications, I realized that in some cases, if we have name with dots, the framework tries to deploy an empty view and empty account, for example in the environment settings we have:

BAMSE:DEVAW\BAMAdeccoSEGroup;BAMSE:OLECENTER\AdeccoWebReadDatabaseGroup;BAMSE:DEVAW\BAM.SE

and when we perform the deploy we are getting the following:

 

MSBUILD : warning MSB3073: The command ""C:\Program Files (x86)\Microsoft BizTa

lk Server 2010\Tracking\bm.exe" add-account -View:"BAMSE" -AccountName:"OLECENT

ER\AdeccoWebReadDatabaseGroup"" exited with code 2. [D:\Packages\AdeccoWeb\Depl

oymentSE\BizTalk\BizTalk\Installation\CapGemini.Adecco.AW.Bts.SE\Deployment\Cap

Gemini.Adecco.AW.Bts.SE.Deployment.btdfproj]

  The previous error was converted to a warning because the task was called wit

  h ContinueOnError=true.

  Build continuing because "ContinueOnError" on the task "Exec" is set to "true

  ".

  "C:\Program Files (x86)\Microsoft BizTalk Server 2010\Tracking\bm.exe" add-ac

  count -View:"" -AccountName:""

  Microsoft (R) Business Activity Monitoring Utility Version 3.9.469.0

  Copyright (C) Microsoft Corporation. All rights reserved.

 

  ERROR: Invalid value for parameter 'View'.

 

  bm.exe add-account

         -AccountName:<account name>

         -View:<view name>

         [ -Server:<server> ]

         [ -Database:<database> ]

 

  Adds user or group to a view role.

 

  - EXAMPLES -

  bm.exe add-account -AccountName:john -View:PurchaseOrder

  bm.exe add-account -AccountName:Agents -View:PO -Server:Srv1 -Database:Db2

 

MSBUILD : warning MSB3073: The command ""C:\Program Files (x86)\Microsoft BizTa

lk Server 2010\Tracking\bm.exe" add-account -View:"" -AccountName:""" exited wi

th code 1. [D:\Packages\AdeccoWeb\DeploymentSE\BizTalk\BizTalk\Installation\Cap

Gemini.Adecco.AW.Bts.SE\Deployment\CapGemini.Adecco.AW.Bts.SE.Deployment.btdfpr

oj]

  The previous error was converted to a warning because the task was called wit

  h ContinueOnError=true.

  Build continuing because "ContinueOnError" on the task "Exec" is set to "true

  ".

  Finished deploying BAM security.

 it seems that when we have a AD group name with dots (i.e BAMSE:DEVAW\BAM.SE ) the security deploy fails, could be a bug ? what special considerations we must take to have name with dots ?

Thank you very much!

Julian R Berlin

Coordinator
Sep 13, 2011 at 5:37 PM

Hi Julian,

I guess the dot is not playing well with the regular expression used to separate the name and accounts, which is (?'viewName'[\w\s]+)\s*:\s*(?'groupNames'[\w\s\\,]+)$.  I think I'm being too specific on the expression and should just take everything after the colon as the group name, like (?'viewName'[\w\s]+)\s*:\s*(?'groupNames'.+)$.

Unfortunately, the only way for you to bypass this temporarily is to duplicate the entire DeployBam target from BizTalkDeploymentFramework.targets into your .btdfproj then modify the regular expression.  That overrides the default implementation, but it's ugly.  I'll forward this to a work item for the next release and relax the validation on that expression.

Thanks,
Tom

Coordinator
Sep 13, 2011 at 5:38 PM
This discussion has been copied to a work item. Click here to go to the work item and continue the discussion.