[midPoint] Found AD Sync Error, how to cleanup

Pavol Mederly mederly at evolveum.com
Thu Nov 12 19:22:17 CET 2015


Ivo,

the error actually comes from the repository; even if it is invoked by 
the provisioning (as it deals with shadows).

I'm afraid it would be necessary to do some SQL magic :| Something like  
(writing from my head, hope it would work)

update m_user set givenname_orig = 'x' where oid='y'

(provided the problem is in given name, not in name itself - in that 
case it would be necessary to update name_orig in m_user and m_object 
tables as well.

Pavol

> You can use something like:
>
> basic.norm(basic.stringify(givenName))?.replaceAll(/\w+/, { 
> it[0].toUpperCase() + ((it.size() > 1) ? it[1..-1] : '') } 
> )?.replace(' ', '')
>
> (this was not invented by me)
>
> Regarding the error - it's strange. AFAIK debug pages are not using 
> provisioning, and this error seems to come from provisioning. I don't 
> understand this...
>
> Ivan
>
> On 11/12/2015 06:37 PM, Jason Everling wrote:
>> I had my username geenration using that format but I need to do that 
>> also for the regular givenName and familyName attributes,
>>
>> Which function removes the diacritics while preserving the first 
>> letter uppercase?
>>
>> I was able to delete the user from the GUI but it got an error 
>> afterwards while trying to remove the shadow. The user is gone in the 
>> gui users list but in the debug pages shadow I can still see the old 
>> shadow. When trying to delete from the debug side is where i get 
>> there error. I attached a screenshot of the error
>>
>> JASON
>>
>> On Thu, Nov 12, 2015 at 11:14 AM, Ivan Noris <ivan.noris at evolveum.com 
>> <mailto:ivan.noris at evolveum.com>> wrote:
>>
>>     Hi Jason,
>>
>>     I always use basic.norm because our language has many diacritic
>>     characters unsuitable for most systems...
>>
>>     Example from my object template for Users:
>>     (mapping, where user/givenName and user/familyName are sources)
>>
>>     tmpGivenName = basic.norm(basic.stringify(givenName))?.tr(' ', '.')
>>     tmpFamilyName = basic.norm(basic.stringify(familyName))?.tr(' ', '.')
>>     return tmpGivenName + '.' + tmpFamilyName + iterationToken
>>
>>     (everything is "normalized", diacritic characters replaced by
>>     ASCII, spaces are then replaced by dot (because basic.norm
>>     returns spaces as well)
>>
>>     Regarding deleting shadow: how are you trying to delete it and
>>     what error you get? Are you deleting from "normal" GUI (editing
>>     user) or in Repository objects GUI?
>>
>>     Regards,
>>     Ivan
>>
>>
>>     On 11/12/2015 05:49 PM, Jason Everling wrote:
>>>     Ohhh, I need to use the basic. functions when importing the
>>>     first and last names so that the diacritics are removed,
>>>
>>>     Now I just need to get the old shadow deleted from midpoint, it
>>>     doesn't let me?
>>>
>>>     JASON
>>>
>>>     On Thu, Nov 12, 2015 at 10:17 AM, Jason Everling
>>>     <jeverling at bshp.edu> wrote:
>>>
>>>         It was because a name had a ~ symbol above the last letter
>>>         in their first name, I had to manually delete from AD and
>>>         fix in our system.
>>>
>>>         I cannot delete the AD shadow from midpoint
>>>
>>>         Or how can my user creation template remove these values, I
>>>         attached a screenshot of what it looks like.
>>>
>>>
>>>
>>>         -- 
>>>         JASON
>>>
>>>
>>>
>>>
>>>     -- 
>>>     JASON
>>>
>>>
>>>
>>>     CONFIDENTIALITY NOTICE:
>>>     This e-mail together with any attachments is proprietary and
>>>     confidential; intended for only the recipient(s) named above and
>>>     may contain information that is privileged. You should not
>>>     retain, copy or use this e-mail or any attachments for any
>>>     purpose, or disclose all or any part of the contents to any
>>>     person. Any views or opinions expressed in this e-mail are those
>>>     of the author and do not represent those of the Baptist School
>>>     of Health Professions. If you have received this e-mail in
>>>     error, or are not the named recipient(s), you are hereby
>>>     notified that any review, dissemination, distribution or copying
>>>     of this communication is prohibited by the sender and to do so
>>>     might constitute a violation of the Electronic Communications
>>>     Privacy Act, 18 U.S.C. section 2510-2521. Please immediately
>>>     notify the sender and delete this e-mail and any attachments
>>>     from your computer.
>>>
>>>
>>>     _______________________________________________
>>>     midPoint mailing list
>>>     midPoint at lists.evolveum.com <mailto:midPoint at lists.evolveum.com>
>>>     http://lists.evolveum.com/mailman/listinfo/midpoint
>>
>>     -- 
>>        Ing. Ivan Noris
>>        Senior Identity Management Engineer & IDM Architect
>>        evolveum.com <http://evolveum.com>                      evolveum.com/blog/ <http://evolveum.com/blog/>
>>        ___________________________________________________
>>        "Semper Id(e)M Vix."
>>
>>
>>     _______________________________________________
>>     midPoint mailing list
>>     midPoint at lists.evolveum.com <mailto:midPoint at lists.evolveum.com>
>>     http://lists.evolveum.com/mailman/listinfo/midpoint
>>
>>
>>
>>
>> -- 
>> JASON
>>
>>
>>
>> CONFIDENTIALITY NOTICE:
>> This e-mail together with any attachments is proprietary and 
>> confidential; intended for only the recipient(s) named above and may 
>> contain information that is privileged. You should not retain, copy 
>> or use this e-mail or any attachments for any purpose, or disclose 
>> all or any part of the contents to any person. Any views or opinions 
>> expressed in this e-mail are those of the author and do not represent 
>> those of the Baptist School of Health Professions. If you have 
>> received this e-mail in error, or are not the named recipient(s), you 
>> are hereby notified that any review, dissemination, distribution or 
>> copying of this communication is prohibited by the sender and to do 
>> so might constitute a violation of the Electronic Communications 
>> Privacy Act, 18 U.S.C. section 2510-2521. Please immediately notify 
>> the sender and delete this e-mail and any attachments from your 
>> computer.
>>
>>
>> _______________________________________________
>> midPoint mailing list
>> midPoint at lists.evolveum.com
>> http://lists.evolveum.com/mailman/listinfo/midpoint
>
> -- 
>    Ing. Ivan Noris
>    Senior Identity Management Engineer & IDM Architect
>    evolveum.com                     evolveum.com/blog/
>    ___________________________________________________
>    "Semper Id(e)M Vix."
>
>
> _______________________________________________
> midPoint mailing list
> midPoint at lists.evolveum.com
> http://lists.evolveum.com/mailman/listinfo/midpoint

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20151112/de4a60f7/attachment.htm>


More information about the midPoint mailing list