[midPoint] 'midPointAccountStatus' cannot have multiple values

Ivan Noris ivan.noris at evolveum.com
Fri Sep 22 13:37:26 CEST 2017


Hi Oleksandr,

I think Gustav meant to use the limitations in schema handling, not in
schema, as schema may be refreshed and your changes would be lost:

<attribute>
  <ref>ri:midPointAccountStatus</ref>
  <limitations>
    <maxOccurs>1</maxOccurs>
  </limitations>

</attribute>

I can't imagine why it works with one resource and not other... For sure
I have not been working with a resource which has multivalue attribute
for account state...

Ivan

On 21.09.2017 17:13, Oleksandr Nekriach wrote:
> Hello Pálos,
> I have tried to apply this limitation on resource schema and the
> limitation doesn't help me too.
>
>                   <xsd:element minOccurs="0" maxOccurs="1"
> name="midPointAccountStatus" type="xsd:string">
>                      <xsd:annotation>
>                         <xsd:appinfo>
>                            <a:ignore>true</a:ignore>
>                            <a:displayOrder>140</a:displayOrder>
>                            <a:matchingRule
> xmlns:qn289="http://prism.evolveum.com/xml/ns/public/matching-rule-3">qn289:stringIgnoreCase</a:matchingRule>
>                           
> <ra:nativeAttributeName>midPointAccountStatus</ra:nativeAttributeName>
>                           
> <ra:frameworkAttributeName>midPointAccountStatus</ra:frameworkAttributeName>
>                         </xsd:appinfo>
>                      </xsd:annotation>
>                   </xsd:element>
>
> But the new resource created from scratch works fine. I have compared
> XML of both resources and do not see any differences.
>
>
> 2017-09-21 17:17 GMT+03:00 Pálos Gustáv <gustav.palos at gmail.com
> <mailto:gustav.palos at gmail.com>>:
>
>     Hi Oleksandr
>
>     try to set up this attribute as single-valued over:
>     <limitations>
>     <maxOccurs>1</maxOccurs>
>     </limitations>
>
>
>     Best regards,
>
>     Gustav
>
>     2017-09-21 15:58 GMT+02:00 Oleksandr Nekriach
>     <o.nekriach at dynatech.lv <mailto:o.nekriach at dynatech.lv>>:
>
>         Hello,
>         I had followed guides to add enable/disable Resource
>         capabilities to my openLdap resource.
>         I have configured it and everything was fine I can disable
>         resource but when I tried to enable it I have got an error
>         "attribute 'midPointAccountStatus' cannot have multiple values".
>          I cant understand why connector  try to add attribute instead
>         of modify it?
>         Please help
>
>         https://wiki.evolveum.com/display/midPoint/Recommended+OpenLDAP+Structure
>         <https://wiki.evolveum.com/display/midPoint/Recommended+OpenLDAP+Structure>
>         https://wiki.evolveum.com/display/midPoint/Simulated+Disable+HOWTO
>         <https://wiki.evolveum.com/display/midPoint/Simulated+Disable+HOWTO>
>         https://wiki.evolveum.com/display/midPoint/Auxiliary+Object+Classes
>         <https://wiki.evolveum.com/display/midPoint/Auxiliary+Object+Classes>
>
>
>         2017-09-21 16:44:24,841 [] [Thread-87] ERROR
>         (com.evolveum.midpoint.model.impl.lens.ChangeExecutor): Error
>         executing changes for (account (default) on
>         resource:dd8b9ada-2dfa-4aec-b538-21357d2218be(OpenLdap3)):
>         Internal error:
>         com.evolveum.midpoint.util.exception.SystemException: Got
>         unexpected exception:
>         org.identityconnectors.framework.common.exceptions.AlreadyExistsException:
>         Error modifying LDAP entry
>         uid=testuser6,ou=Users,ou=LV,dc=dyninno,dc=test:
>         [add:midPointAccountStatus: enabled,add:objectClass:
>         midPointPerson,]: constraintViolation: attribute
>         'midPointAccountStatus' cannot have multiple values (19)
>         com.evolveum.midpoint.util.exception.SystemException: Internal
>         error: com.evolveum.midpoint.util.exception.SystemException:
>         Got unexpected exception:
>         org.identityconnectors.framework.common.exceptions.AlreadyExistsException:
>         Error modifying LDAP entry
>         uid=testuser6,ou=Users,ou=LV,dc=dyninno,dc=test:
>         [add:midPointAccountStatus: enabled,add:objectClass:
>         midPointPerson,]: constraintViolation: attribute
>         'midPointAccountStatus' cannot have multiple values (19)
>                 at
>         com.evolveum.midpoint.provisioning.impl.ProvisioningServiceImpl.modifyObject(ProvisioningServiceImpl.java:701)
>         ~[provisioning-impl-3.6.jar:na]
>                 at com.evolveum.midpoint.model.im
>         <http://com.evolveum.midpoint.model.im>pl.lens.ChangeExecutor.modifyProvisioningObject(ChangeExecutor.java:1397)
>         ~[model-impl-3.6.jar:na]
>                 at com.evolveum.midpoint.model.im
>         <http://com.evolveum.midpoint.model.im>pl.lens.ChangeExecutor.executeModification(ChangeExecutor.java:1281)
>         ~[model-impl-3.6.jar:na]
>                 at com.evolveum.midpoint.model.im
>         <http://com.evolveum.midpoint.model.im>pl.lens.ChangeExecutor.executeDelta(ChangeExecutor.java:812)
>         ~[model-impl-3.6.jar:na]
>                 at com.evolveum.midpoint.model.im
>         <http://com.evolveum.midpoint.model.im>pl.lens.ChangeExecutor.executeChanges(ChangeExecutor.java:308)
>         ~[model-impl-3.6.jar:na]
>                 at com.evolveum.midpoint.model.im
>         <http://com.evolveum.midpoint.model.im>pl.lens.Clockwork.lambda$processSecondary$0(Clockwork.java:481)
>         [model-impl-3.6.jar:na]
>                 at com.evolveum.midpoint.model.im
>         <http://com.evolveum.midpoint.model.im>pl.lens.LensUtil.partialExecute(LensUtil.java:1253)
>         ~[model-impl-3.6.jar:na]
>                 at com.evolveum.midpoint.model.im
>         <http://com.evolveum.midpoint.model.im>pl.lens.LensUtil.partialExecute(LensUtil.java:1240)
>         ~[model-impl-3.6.jar:na]
>                 at com.evolveum.midpoint.model.im
>         <http://com.evolveum.midpoint.model.im>pl.lens.Clockwork.processSecondary(Clockwork.java:479)
>         [model-impl-3.6.jar:na]
>                 at com.evolveum.midpoint.model.im
>         <http://com.evolveum.midpoint.model.im>pl.lens.Clockwork.click(Clockwork.java:327)
>         [model-impl-3.6.jar:na]
>                 at com.evolveum.midpoint.model.im
>         <http://com.evolveum.midpoint.model.im>pl.lens.Clockwork.run(Clockwork.java:203)
>         [model-impl-3.6.jar:na]
>                 at com.evolveum.midpoint.model.im
>         <http://com.evolveum.midpoint.model.im>pl.controller.ModelController.executeChanges(ModelController.java:569)
>         ~[model-impl-3.6.jar:na]
>                 at
>         sun.reflect.GeneratedMethodAccessor1281.invoke(Unknown Source)
>         ~[na:na]
>                 at
>         sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
>         ~[na:1.8.0_131]
>                 at java.lang.reflect.Method.invoke(Method.java:498)
>         ~[na:1.8.0_131]
>                 at
>         org.apache.wicket.proxy.LazyInitProxyFactory$JdkHandler.invoke(LazyInitProxyFactory.java:507)
>         ~[wicket-ioc-7.6.0.jar:7.6.0]
>                 at com.sun.proxy.$Proxy154.executeChanges(Unknown
>         Source) ~[na:na]
>                 at
>         com.evolveum.midpoint.web.component.progress.ProgressReporter.lambda$executeChangesAsync$0(ProgressReporter.java:187)
>         ~[classes/:na]
>                 at java.lang.Thread.run(Thread.java:748) ~[na:1.8.0_131]
>         Caused by:
>         com.evolveum.midpoint.util.exception.SystemException:
>         com.evolveum.midpoint.util.exception.SystemException: Got
>         unexpected exception:
>         org.identityconnectors.framework.common.exceptions.AlreadyExistsException:
>         Error modifying LDAP entry
>         uid=testuser6,ou=Users,ou=LV,dc=dyninno,dc=test:
>         [add:midPointAccountStatus: enabled,add:objectClass:
>         midPointPerson,]: constraintViolation: attribute
>         'midPointAccountStatus' cannot have multiple values (19)
>                 at
>         com.evolveum.midpoint.provisioning.consistency.impl.ErrorHandlerFactory.createErrorHandler(ErrorHandlerFactory.java:89)
>         ~[provisioning-impl-3.6.jar:na]
>                 at
>         com.evolveum.midpoint.provisioning.impl.ShadowCache.handleError(ShadowCache.java:1128)
>         ~[provisioning-impl-3.6.jar:na]
>                 at
>         com.evolveum.midpoint.provisioning.impl.ShadowCache.modifyShadow(ShadowCache.java:691)
>         ~[provisioning-impl-3.6.jar:na]
>                 at
>         com.evolveum.midpoint.provisioning.impl.ProvisioningServiceImpl.modifyObject(ProvisioningServiceImpl.java:679)
>         ~[provisioning-impl-3.6.jar:na]
>                 ... 18 common frames omitted
>
>
>         -- 
>         Best regards,
>
>         Oleksandr Nekriach | Identity and access management engineer
>
>         Dynatech, Mednieku str. 4a, Riga, LV-1010, Latvia
>
>         +37125314685 <tel:+371%2025%20314%20685>
>         ,
>         o.nekriach at dynatech.lv <mailto:o.nekriach at dynatech.lv>
>         |
>         www.dynatech.lv <http://www.dynatech.lv>
>
>
>
>
>         Stay connected:
>         <https://www.facebook.com/DynatechLatvia/?ref=br_rs>
>         <https://www.linkedin.com/company-beta/17893047/>
>
>
>         Confidentiality Notice: This message contains confidential
>         information and is intended only for the named recipient(s).
>         If you are not the addressee you may not copy, distribute or
>         perform any other activities with this information. If you
>         have received this transmission in error, please notify us by
>         e-mail immediately. E-mail transmission cannot be guaranteed
>         to be secure or error-free as information could be
>         intercepted, corrupted, lost, destroyed, arrive late or
>         incomplete, or contain viruses.
>
>         _______________________________________________
>         midPoint mailing list
>         midPoint at lists.evolveum.com <mailto:midPoint at lists.evolveum.com>
>         http://lists.evolveum.com/mailman/listinfo/midpoint
>         <http://lists.evolveum.com/mailman/listinfo/midpoint>
>
>
>
>
>     -- 
>     s pozdravom
>
>     Gustáv Pálos
>
>     _______________________________________________
>     midPoint mailing list
>     midPoint at lists.evolveum.com <mailto:midPoint at lists.evolveum.com>
>     http://lists.evolveum.com/mailman/listinfo/midpoint
>     <http://lists.evolveum.com/mailman/listinfo/midpoint>
>
>
>
>
> -- 
> Best regards,
>
> Oleksandr Nekriach | Identity and access management engineer
>
> Dynatech, Mednieku str. 4a, Riga, LV-1010, Latvia
>
> +37125314685 <tel:+371%2025%20314%20685>
> ,
> o.nekriach at dynatech.lv <mailto:o.nekriach at dynatech.lv>
> |
> www.dynatech.lv <http://www.dynatech.lv>
>
>
>
>
> Stay connected:
> <https://www.facebook.com/DynatechLatvia/?ref=br_rs>
> <https://www.linkedin.com/company-beta/17893047/>
>
>
> Confidentiality Notice: This message contains confidential information
> and is intended only for the named recipient(s). If you are not the
> addressee you may not copy, distribute or perform any other activities
> with this information. If you have received this transmission in
> error, please notify us by e-mail immediately. E-mail transmission
> cannot be guaranteed to be secure or error-free as information could
> be intercepted, corrupted, lost, destroyed, arrive late or incomplete,
> or contain viruses.
>
>
> _______________________________________________
> midPoint mailing list
> midPoint at lists.evolveum.com
> http://lists.evolveum.com/mailman/listinfo/midpoint

-- 
Ivan Noris
Senior Identity Engineer
evolveum.com

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20170922/21183075/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: o.nekriach at dynatech.lv1502777022855-7770
Type: image/png
Size: 2602 bytes
Desc: not available
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20170922/21183075/attachment.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: o.nekriach at dynatech.lv1502777022855-7771
Type: image/png
Size: 790 bytes
Desc: not available
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20170922/21183075/attachment-0001.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: o.nekriach at dynatech.lv1502777022855-7772
Type: image/png
Size: 786 bytes
Desc: not available
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20170922/21183075/attachment-0002.png>


More information about the midPoint mailing list