Shortly after collection was created and published successfully, all stubs are getting removed fr (4260046)

A collection, where DL is a member, is published by QCS successfully. Several hours later, all stubs are removed from the GAL on the subsription side.

An event is posted to publisher ACSAlert.log:

 [2009/10/25 16:51:12.254] (2) Information    :<AD Sender> (30900) Collection <Pilot>: Removed objects(5):

but there was no modification on the collection or it's membership.

Republication puts the stub object back into GAL on the subscriber side, but again, several hours later they are gone.

Errors similar to the following are logged to Debug\ADManager.log:

15/07 00:38:28:991 | DirectoryObject.cpp(441)       | 4088 | Entering Refresh <GUID=19F26695-CF04-4BD2-BF69-017F111080BC>
15/07 00:38:28:991 | DirectoryObject.cpp(447)       | 4088 | Refresh Attributes:[1]:
distinguishedName

15/07 00:38:28:991 | LDAPSimpleSearch.cpp(130)      | 4088 | Entering CLDAPSimpleSearch::ReadNextData
15/07 00:38:29:038 | LDAPErrorHolder.cpp(78)        | 4088 | 0000208D: NameErr: DSID-03151EFD, problem 2001 (NO_OBJECT), data 0, best match of: ''

15/07 00:38:29:038 | LDAPSimpleSearch.cpp(130)      | 4088 | *** EXCEPTION Exiting CLDAPSimpleSearch::ReadNextData
15/07 00:38:29:038 | FileLoggerErrHandling.h(33)    | 4088 | 0x80040420 Object does not exist.[EIP: 0x05730CF0,0x057309EE]
15/07 00:38:29:038 | LDAPConnection.cpp(394)        | 4088 | *** EXCEPTION Exiting CLDAPConnection::GetADObject
15/07 00:38:29:038 | FileLoggerErrHandling.h(33)    | 4088 | 0x80040420 Object does not exist.[EIP: 0x05730CF0,0x057309EE][EIP: 0x05723C4D,0x05F6841E]
15/07 00:38:29:038 | LDAPConnection.cpp(394)        | 4088 | Entering CLDAPConnection::GetADObject
Â

This can be caused by reboot of the domain controller and lack of permissions on the DL that is a member of collection or lack of rights on other domains in the forest for the QCS service account on the publishing side. When a GC is rebooted, QCS will automatically switch to the next available, and when this GC is in a different domain in the forest where rights are missing, it may return the NO_OBJECT error.

QCS subsequently decides that the objects are gone from the publishing AD and will synchronize this across by removing stub objects from the GAL on subsriber

To resolve this problem, make sure that QCS service account has rights over the DL that is a member of collection, plus at least read permissions to the entire forest and Manage Replication Topology and Replicate Directory Changes rights.