[midPoint] attributeOrValueExists ERROR LDAP

oleg okunev legeech at inbox.ru
Wed Dec 21 13:44:30 CET 2016


Hi!
But I do not use custom class

i use this 
<schema>
  <generationConstraints>
   <generateObjectClass>ri:user</generateObjectClass>
   <generateObjectClass>ri:group</generateObjectClass>
   <generateObjectClass>ri:organizationalUnit</generateObjectClass>
  </generationConstraints> 
</schema>



>Среда, 21 декабря 2016, 15:03 +03:00 от Wojciech Staszewski <wojciech.staszewski at diagnostyka.pl>:
>
>I have the same issue with LDAP with attributes from some objectclasses (e.g. SambaSamAccount).
>And when I'm using my own custom auxiliary objectclass (OC), Midpoint tries to add this objectclass to LDAP accounts which already have this OC and I got errors.
>I temoprary removed these OC from schema and don't use attributes from them.
>
>
>W dniu 21.12.2016 o 07:17, oleg okunev pisze:
>> Hello.
>> 
>> Strange problem i get when trying to modify decription in user which have link to AD account
>> config of schema handling
>> 
>> <attribute>
>>     <ref>ri:description</ref>
>>        <outbound>
>>          <source>
>>              <path>description</path>
>>          </source>
>>        </outbound>
>>        <inbound>
>>          <target>
>>              <path>description</path>
>>          </target>
>>        </inbound>
>> </attribute>
>> 
>> 
>> *Preview changes*
>> 
>> 
>>       Modify User Archangel Gabriel (Gabriel)
>> 
>> 
>> Item	Old value	New value
>> Description	New Desc	New Desc NEW
>> 
>> 
>> 
>>       Secondary changes: 2 objects
>> 
>> 
>> 
>> 
>>       Modify User Archangel Gabriel (Gabriel)
>> 
>> 
>> Item	Old value	New value
>> Description	New Desc	New Desc NEW
>> 
>> 
>>       Modify Shadow CN=Archangel Gabriel,OU=Sky,OU=Earth,DC=abb-test,DC=akbars,DC=ru
>> 
>> 
>> Item	Value
>> resourceRef	 Active Directory Medusa (LDAPS) v2
>> kind	ACCOUNT
>> intent	default
>> 
>> 
>>       Modify attributes
>> 
>> 
>> Item	Old value	New value
>> description	 	New Desc NEW
>> 
>> 
>> 
>> GOT this ERROR
>> 
>> Schema violation during processing shadow:
>> shadow: CN=Archangel Gabriel,OU=Sky,OU=Earth,DC=abb-test,DC=akbars,DC=ru (OID:92d4a278-8d4f-46a3-af88-56bdf8529a95):
>> Schema violation: Invalid attribute: org.identityconnectors.framework.common.exceptions.InvalidAttributeValueException(Error modifying LDAP entry CN=Archangel Gabriel,OU=Sky,OU=Earth,DC=abb-test,DC=akbars,DC=ru: [add:description: New Desc Second,]: attributeOrValueExists: 00002081: AtrErr: DSID-030F154F, #1:??0: 00002081: DSID-030F154F, problem 1006 (ATT_OR_VALUE_EXISTS), data 0, Att d (description)?? (20)):
>> 
>> it looks like midpoint trying to add NEW attribute - i cant understand why not modify existing attribute value
>> 
>> I know it must be simple but i trying to search and failed(((
>> i got 3 object classes : user group and OU
>> 
>> and one more thing
>> after error decription is different - in user new - in AD old
>> if i make reconcile -  in AD it became emty
>> and after that any first decription  writes well in AD.
>> 
>> 
>> 
>> -- 
>> oleg okunev
>> 
>> --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
>> 
>> 
>> _______________________________________________
>> midPoint mailing list
>>  midPoint at lists.evolveum.com
>>  http://lists.evolveum.com/mailman/listinfo/midpoint
>>
>Numer KRS: 0000381559 (Sąd Rejonowy dla Krakowa-Śródmieścia w Krakowie, XI Wydział Gospodarczy KRS)
>NIP: 675-12-65-009; REGON: 356366975
>Kapitał zakładowy: 33 756 500 zł.
>
>Pomyśl o środowisku zanim wydrukujesz ten e-mail.
>_______________________________________________
>midPoint mailing list
>midPoint at lists.evolveum.com
>http://lists.evolveum.com/mailman/listinfo/midpoint

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20161221/c6aafa2b/attachment.htm>


More information about the midPoint mailing list