[midPoint] Reconciliation modify object gives an error

[Oskar Butovič - AMI Praha a.s.]

Hello,

it seems like names which are created during first reconciliation are not
matched by corelation rule during second reconciliation. What is your
mapping which creates users name?

Best Regards

Oskar Butovič

2017-03-07 12:52 GMT+01:00 Dilek Gider <dilek.gider at basistek.com>:

> Hi,
>
> I have reconciliation task in scriptedSQL connector, it creates users in
> midpoint.  First of all, users are created with this task. But when I run
> task twice or more, it gives an error like below for all users:
>
> Error processing focus(user:null(TR45187127836)): constraint violation:
> Found conflicting existing object with property {.../common/common-3}name =
> PP({.../common/common-3}name):[PPV(PolyString:TR45187127836, origin:
> INBOUND:resource:ef2bc59b-76e0-48e2-86d6-3d4f02d420db(TirsanScriptedSQLResource))]:
> user:96dd9828-e16f-4a7c-bebe-74c4d184b340(TR45187127836)
>
> Correlation rule has PolyStringNorm such as:
>
> <synchronization>
>       <objectSynchronization>
>          <objectClass>ri:AccountObjectClass</objectClass>
>          <kind>account</kind>
>          <intent>default</intent>
>          <enabled>true</enabled>
>          <correlation>
>             <q:description>
>                    Correlation expression is a search query.
>                    Following search query will look for users that have
> "name"
>                    equal to the "name" attribute of the account. Simply
> speaking,
>                    it will look for match in usernames in the IDM and the
> resource.
>                    The correlation rule always looks for users, so it will
> not match
>                    any other object type.
> </q:description>
>             <q:equal>
>                <q:matching>PolyStringNorm</q:matching>
>                <q:path>c:name</q:path>
>                <expression>
>                   <c:path>declare namespace ri='http://midpoint.evolveum.
> com/xml/ns/public/resource/instance-3'; $account/attributes/ri:name</
> c:path>
>                </expression>
>             </q:equal>
>          </correlation>
>          <reaction>
>             <situation>linked</situation>
>             <action>
>                <handlerUri>http://midpoint.evolveum.com/xml/ns/public/
> model/action-3#modifyUser</handlerUri>
>             </action>
>          </reaction>
>          <reaction>
>             <situation>deleted</situation>
>             <action>
>                <handlerUri>http://midpoint.evolveum.com/xml/ns/public/
> model/action-3#unlink</handlerUri>
>             </action>
>          </reaction>
>          <reaction>
>             <situation>unlinked</situation>
>             <objectTemplateRef oid="e63e1118-cbe5-11e5-b08e-
> 3c970e44b9e2"/>
>             <action>
>                <handlerUri>http://midpoint.evolveum.com/xml/ns/public/
> model/action-3#link</handlerUri>
>             </action>
>          </reaction>
>          <reaction>
>             <situation>unmatched</situation>
>             <objectTemplateRef oid="e63e1118-cbe5-11e5-b08e-
> 3c970e44b9e2"/>
>             <action>
>                <handlerUri>http://midpoint.evolveum.com/xml/ns/public/
> model/action-3#addUser</handlerUri>
>             </action>
>          </reaction>
>       </objectSynchronization>
>    </synchronization>
>
> What can be a problem? Thanks in advance.
>
> Dilek.
>
> _______________________________________________
> midPoint mailing list
> midPoint at lists.evolveum.com
> http://lists.evolveum.com/mailman/listinfo/midpoint
>
>


-- 

Oskar Butovič
solution architect

gsm: [+420] 774 480 101
e-mail: oskar.butovic at ami.cz


AMI Praha a.s.
Pláničkova 11
162 00 Praha 6
tel.: [+420] 274 783 239
web: www.ami.cz


[image: AMI Praha a.s.]

[image: AMI Praha a.s.]
<http://www.ami.cz/reseni-a-sluzby/bezpecnost-dat/identity-management>

Textem tohoto e-mailu podepisující neslibuje uzavřít ani neuzavírá za
společnost AMI Praha a.s.
jakoukoliv smlouvu. Každá smlouva, pokud bude uzavřena, musí mít výhradně
písemnou formu.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20170307/ca85ac1b/attachment.htm>