[midPoint] AD account duplication

Pavol Mederly mederly at evolveum.com
Tue Jul 14 11:34:42 CEST 2015


Hello Alexej,

are you sure you need Live Synchronization for Exchange resource? If a 
resource is a target and a source at the same time, problems may occur. 
It is best to avoid this, it it's not strictly necessary.

However, 40 seconds for user creation process is a waaaaay too long. 
Have you any idea why it takes so long?

Pavol

On 14. 7. 2015 11:28, Ващенков Алексей wrote:
>
> Hi, we have one more problem with Exchange.
>
> We create live synchronization task with Exchange connector. And it 
> bring us one problem.
>
> Too many iterations (6) for account(ID 
> {http://midpoint.evolveum.com/xml/ns/public/connector/icf-1/resource-schema-3}uid 
> = [ <GUID=af020927ab893540bf7ca32f4ad86f30> ], type 'default', 
> resource:8790e490-326a-46e9-ba35-9e0c1dcbb41d(Exchange)): cannot 
> determine values that satisfy constraints: Found more than one object 
> with attribute 
> {http://midpoint.evolveum.com/xml/ns/public/connector/icf-1/resource-schema-3}uid 
> = [ <GUID=af020927ab893540bf7ca32f4ad86f30> ], Found more than one 
> object with attribute 
> {http://midpoint.evolveum.com/xml/ns/public/connector/icf-1/resource-schema-3}name 
> = [ CN=abaulin.d.v,OU=???????????? ????,OU=inrights,DC=isim,DC=local ]
>
> I see this situation like “Live synchronization” task was started 
> after user creation process (it take about 40 seconds) and finished 
> before creation process ends. In this case “Live synchronization” see 
> “new” AD account which already created with “Creation process” (but 
> doesn’t ends because waiting for ends of Exchange creation) and create 
> new shadow. After that “Creation process” ends and returns UID of 
> “new” shadow but it doesn’t know that shadow already exists (in “Live 
> synchronization” process).
>
> What can we do with this situation?
>
>
>
> _______________________________________________
> midPoint mailing list
> midPoint at lists.evolveum.com
> http://lists.evolveum.com/mailman/listinfo/midpoint

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20150714/daccb493/attachment.htm>


More information about the midPoint mailing list