[midPoint] Found AD Sync Error, how to cleanup

Jason Everling jeverling at bshp.edu
Thu Nov 12 20:03:31 CET 2015


Yeah it is in the shadow and the only attributes are <name>, <icfs:name>,
<icfs:uid>

After I update using sql statements I should be able to delete it?

Thanks Ivan, ill see what I come up with

JASON

JASON

On Thu, Nov 12, 2015 at 12:22 PM, Pavol Mederly <mederly at evolveum.com>
wrote:

> Ivo,
>
> the error actually comes from the repository; even if it is invoked by the
> provisioning (as it deals with shadows).
>
> I'm afraid it would be necessary to do some SQL magic :| Something like
> (writing from my head, hope it would work)
>
> update m_user set givenname_orig = 'x' where oid='y'
>
> (provided the problem is in given name, not in name itself - in that case
> it would be necessary to update name_orig in m_user and m_object tables as
> well.
>
> Pavol
>
> You can use something like:
>
> basic.norm(basic.stringify(givenName))?.replaceAll(/\w+/, {
> it[0].toUpperCase() + ((it.size() > 1) ? it[1..-1] : '') } )?.replace(' ',
> '')
>
> (this was not invented by me)
>
> Regarding the error - it's strange. AFAIK debug pages are not using
> provisioning, and this error seems to come from provisioning. I don't
> understand this...
>
> Ivan
>
> On 11/12/2015 06:37 PM, Jason Everling wrote:
>
> I had my username geenration using that format but I need to do that also
> for the regular givenName and familyName attributes,
>
> Which function removes the diacritics while preserving the first letter
> uppercase?
>
> I was able to delete the user from the GUI but it got an error afterwards
> while trying to remove the shadow. The user is gone in the gui users list
> but in the debug pages shadow I can still see the old shadow. When trying
> to delete from the debug side is where i get there error. I attached a
> screenshot of the error
>
> JASON
>
> On Thu, Nov 12, 2015 at 11:14 AM, Ivan Noris <ivan.noris at evolveum.com>
> wrote:
>
>> Hi Jason,
>>
>> I always use basic.norm because our language has many diacritic
>> characters unsuitable for most systems...
>>
>> Example from my object template for Users:
>> (mapping, where user/givenName and user/familyName are sources)
>>
>> tmpGivenName = basic.norm(basic.stringify(givenName))?.tr(' ', '.')
>> tmpFamilyName = basic.norm(basic.stringify(familyName))?.tr(' ', '.')
>> return tmpGivenName + '.' + tmpFamilyName + iterationToken
>>
>> (everything is "normalized", diacritic characters replaced by ASCII,
>> spaces are then replaced by dot (because basic.norm returns spaces as well)
>>
>> Regarding deleting shadow: how are you trying to delete it and what error
>> you get? Are you deleting from "normal" GUI (editing user) or in Repository
>> objects GUI?
>>
>> Regards,
>> Ivan
>>
>>
>> On 11/12/2015 05:49 PM, Jason Everling wrote:
>>
>> Ohhh, I need to use the basic. functions when importing the first and
>> last names so that the diacritics are removed,
>>
>> Now I just need to get the old shadow deleted from midpoint, it doesn't
>> let me?
>>
>> JASON
>>
>> On Thu, Nov 12, 2015 at 10:17 AM, Jason Everling < <jeverling at bshp.edu>
>> jeverling at bshp.edu> wrote:
>>
>>> It was because a name had a ~ symbol above the last letter in their
>>> first name, I had to manually delete from AD and fix in our system.
>>>
>>> I cannot delete the AD shadow from midpoint
>>>
>>> Or how can my user creation template remove these values, I attached a
>>> screenshot of what it looks like.
>>>
>>>
>>>
>>> --
>>> JASON
>>>
>>
>>
>>
>> --
>> JASON
>>
>>
>>
>> CONFIDENTIALITY NOTICE:
>> This e-mail together with any attachments is proprietary and
>> confidential; intended for only the recipient(s) named above and may
>> contain information that is privileged. You should not retain, copy or use
>> this e-mail or any attachments for any purpose, or disclose all or any part
>> of the contents to any person. Any views or opinions expressed in this
>> e-mail are those of the author and do not represent those of the Baptist
>> School of Health Professions. If you have received this e-mail in error, or
>> are not the named recipient(s), you are hereby notified that any review,
>> dissemination, distribution or copying of this communication is prohibited
>> by the sender and to do so might constitute a violation of the Electronic
>> Communications Privacy Act, 18 U.S.C. section 2510-2521. Please immediately
>> notify the sender and delete this e-mail and any attachments from your
>> computer.
>>
>>
>> _______________________________________________
>> midPoint mailing listmidPoint at lists.evolveum.comhttp://lists.evolveum.com/mailman/listinfo/midpoint
>>
>>
>> --
>>   Ing. Ivan Noris
>>   Senior Identity Management Engineer & IDM Architect
>>   evolveum.com                     evolveum.com/blog/
>>   ___________________________________________________
>>   "Semper Id(e)M Vix."
>>
>>
>> _______________________________________________
>> midPoint mailing list
>> midPoint at lists.evolveum.com
>> http://lists.evolveum.com/mailman/listinfo/midpoint
>>
>>
>
>
> --
> JASON
>
>
>
> CONFIDENTIALITY NOTICE:
> This e-mail together with any attachments is proprietary and confidential;
> intended for only the recipient(s) named above and may contain information
> that is privileged. You should not retain, copy or use this e-mail or any
> attachments for any purpose, or disclose all or any part of the contents to
> any person. Any views or opinions expressed in this e-mail are those of the
> author and do not represent those of the Baptist School of Health
> Professions. If you have received this e-mail in error, or are not the
> named recipient(s), you are hereby notified that any review, dissemination,
> distribution or copying of this communication is prohibited by the sender
> and to do so might constitute a violation of the Electronic Communications
> Privacy Act, 18 U.S.C. section 2510-2521. Please immediately notify the
> sender and delete this e-mail and any attachments from your computer.
>
>
> _______________________________________________
> midPoint mailing listmidPoint at lists.evolveum.comhttp://lists.evolveum.com/mailman/listinfo/midpoint
>
>
> --
>   Ing. Ivan Noris
>   Senior Identity Management Engineer & IDM Architect
>   evolveum.com                     evolveum.com/blog/
>   ___________________________________________________
>   "Semper Id(e)M Vix."
>
>
>
> _______________________________________________
> midPoint mailing listmidPoint at lists.evolveum.comhttp://lists.evolveum.com/mailman/listinfo/midpoint
>
>
>
> _______________________________________________
> midPoint mailing list
> midPoint at lists.evolveum.com
> http://lists.evolveum.com/mailman/listinfo/midpoint
>
>

-- 


CONFIDENTIALITY NOTICE:
This e-mail together with any attachments is proprietary and confidential; 
intended for only the recipient(s) named above and may contain information 
that is privileged. You should not retain, copy or use this e-mail or any 
attachments for any purpose, or disclose all or any part of the contents to 
any person. Any views or opinions expressed in this e-mail are those of the 
author and do not represent those of the Baptist School of Health 
Professions. If you have received this e-mail in error, or are not the 
named recipient(s), you are hereby notified that any review, dissemination, 
distribution or copying of this communication is prohibited by the sender 
and to do so might constitute a violation of the Electronic Communications 
Privacy Act, 18 U.S.C. section 2510-2521. Please immediately notify the 
sender and delete this e-mail and any attachments from your computer. 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20151112/c07196be/attachment.htm>


More information about the midPoint mailing list