Skip to main content


 

 

druva_logo.pngDruva
|
Documentation

How can we help you?

Trending articles:

 

Druva Documentation

Exchange Online restore fails with Server not reachable error for users provisioned from Azure to Druva using SCIM

  1. Last updated
  2. Save as PDF
Heads up!

We've transitioned to a new documentation portal to serve you better. Access the latest content by clicking here.

Problem description

When performing a restore of Exchange Online backed-up data, the restore gets triggered but fails instantly with the following error.

Error: Server not reachable. (#100000011)

After further investigation with Support, we find the following error: 

The primary SMTP address must be specified.

Cause

This issue has a series of steps as follows: 

  1. On the Azure AD -> Enterprise Applications -> Druva’s SCIM app -> Provisioning -> Attribute Mapping section, the following mapped: 

undefined

Azure AD userPrincipalName was mapped with Druva UserName.

2. There is no mapping of the mail attribute from Azure to Druva.

3. The UPN and PrimarySMTPAddress in Microsoft 365 are different. For example: 

UserPrincipalName in Microsoft 365 is set to “EXO_Test@ragnhildindia1.onmicrosoft.com” value. However, the Primary SMTP Address is set to “EXO@ragnhildindia1.onmicrosoft.com” value.

4. On the inSync Management Console menu bar,  click the Left_Navigation_Bar_Hamburger_Icon.png icon to access the global navigation panel.

5. Click SaaS Apps.

6. Click Microsoft 365. 

7. Click Overview. 

8. Click on the More icon on the top-right corner and click Settings.

image2.png

9. The Access user account using dropdown is set to inSync Email ID.

image15.png

This leads to the following workflow: 

  1. With SCIM Provisioning, the user was added to Druva from Azure with the UserPrincipalName attribute under Druva’s UserName attribute.

image3.png

  1. In inSync, the UserName attribute translates to inSync Email ID. 

Hence, inSync Email ID is now EXO_Test@ragnhildindia1.onmicrosoft.com whereas in Microsoft 365, the user’s PrimarySMTPAddress is EXO@ragnhildindia1.onmicrosoft.com 

 

image6.png

  1. inSync will send the EXO_Test@ragnhildindia1.onmicrosoft.com to Exchange Online at the time of the restore job.

  2. Since there is a mismatch of the SMTP Address, Exchange Online will reject the request and Druva will get the error: The primary SMTP address must be specified.

  3. In the user’s restore logs, we get the Server not reachable error.

Note: This setup does not impact backup operation as Exchange Online will match the inSync Email ID with either the SMTP, alias, or UserPrincipalName of the user and will allow Druva to read the data.

The issue only occurs when we are trying to write the data to Exchange Online when Microsoft specifically needs the proper SMTP address.

Download the user’s logs using the following steps:

  1. Navigate to the inSync Management Console.
  2. Click Users.
  3. Click on the affected user’s account.
  4. Click on the More icon next to the Restore button.
  5. Select Download Debug Logs.

image12.png

Resolution

Step 1: Fix the attribute mappings in Azure AD - Druva SCIM App.

The following provision should be set via the SCIM App in Azure AD: 

(source) Azure AD Attribute

(target) Druva Attribute

mail

userName

userPrincipalName

urn:ietf:params:scim:schemas:extension:Druva:2.0:User:userPrincipalName

Note: The Druva Attributes translates to: 

userName = inSync Email Address

urn:ietf:params:scim:schemas:extension:Druva:2.0:User:userPrincipalName = userPrincipalName.

The userPrincipalName in Druva is not access on the inSync Management Console. It is updated on the backend in database.

Follow the below steps to achieve the above configuration: 

To add a userPrincipalName attribute for Druva in the Attribute Mapping:

  1. Select Show advanced options.

  2. Click the Edit attribute list for the Druva link.

ShowAdvancedOptions.png

3. On the Edit Attribute List windows, set all values as follows:

  • Name: urn:ietf:params:scim:schemas:extension:Druva:2.0:User:userPrincipalName

  • Type: String

image11.png

4. Click Save.

5. Navigate to Druva App Provisioning and click userPrincipalName attribute.

6. Change it to mail as follows.

image7.png

Hence, the Azure AD mail attribute is now targeting Druva’s userName attribute.

7. Click Add New Mapping.

8. Select Source attribute as userPrincipalName  and Target attribute as urn:ietf:params:scim:schemas:extension:Druva:2.0:User:userPrincipalName.

image13.png

9. Click  Save. The attribute appears in the Attribute Mappings.

image1.png

10. Azure has a default auto-provisioning cycle of 40 minutes since the last provisioning cycle. You may wait until then or you may run the manual provisioning with the Provision on Demand option.

image9.png

11. After the user provisioning is completed, you may attempt the restore once again.

Step 2: Change inSync’s settings to access user account in Microsoft 365:

To ensure that both OneDrive and Exchange Online continue to get backed up successfully, implement the following changes:

  1. On the inSync Management Console menu bar,  click the Left_Navigation_Bar_Hamburger_Icon.png icon to access the global navigation panel.
  2. Click SaaS Apps.
  3. Click Microsoft 365.
  4. Click Overview.
  5. Click on the More icon next to the Reconfigure button.
  6. Click Settings: 

image2.png

7. Click on the Access user accounts using dropdown and set it to AD Attribute.

image14.png

8. Click Save.