[midPoint] 'midPointAccountStatus' cannot have multiple values
Ivan Noris
ivan.noris at evolveum.com
Fri Sep 22 13:37:26 CEST 2017
Hi Oleksandr,
I think Gustav meant to use the limitations in schema handling, not in
schema, as schema may be refreshed and your changes would be lost:
<attribute>
<ref>ri:midPointAccountStatus</ref>
<limitations>
<maxOccurs>1</maxOccurs>
</limitations>
</attribute>
I can't imagine why it works with one resource and not other... For sure
I have not been working with a resource which has multivalue attribute
for account state...
Ivan
On 21.09.2017 17:13, Oleksandr Nekriach wrote:
> Hello Pálos,
> I have tried to apply this limitation on resource schema and the
> limitation doesn't help me too.
>
> <xsd:element minOccurs="0" maxOccurs="1"
> name="midPointAccountStatus" type="xsd:string">
> <xsd:annotation>
> <xsd:appinfo>
> <a:ignore>true</a:ignore>
> <a:displayOrder>140</a:displayOrder>
> <a:matchingRule
> xmlns:qn289="http://prism.evolveum.com/xml/ns/public/matching-rule-3">qn289:stringIgnoreCase</a:matchingRule>
>
> <ra:nativeAttributeName>midPointAccountStatus</ra:nativeAttributeName>
>
> <ra:frameworkAttributeName>midPointAccountStatus</ra:frameworkAttributeName>
> </xsd:appinfo>
> </xsd:annotation>
> </xsd:element>
>
> But the new resource created from scratch works fine. I have compared
> XML of both resources and do not see any differences.
>
>
> 2017-09-21 17:17 GMT+03:00 Pálos Gustáv <gustav.palos at gmail.com
> <mailto:gustav.palos at gmail.com>>:
>
> Hi Oleksandr
>
> try to set up this attribute as single-valued over:
> <limitations>
> <maxOccurs>1</maxOccurs>
> </limitations>
>
>
> Best regards,
>
> Gustav
>
> 2017-09-21 15:58 GMT+02:00 Oleksandr Nekriach
> <o.nekriach at dynatech.lv <mailto:o.nekriach at dynatech.lv>>:
>
> Hello,
> I had followed guides to add enable/disable Resource
> capabilities to my openLdap resource.
> I have configured it and everything was fine I can disable
> resource but when I tried to enable it I have got an error
> "attribute 'midPointAccountStatus' cannot have multiple values".
> I cant understand why connector try to add attribute instead
> of modify it?
> Please help
>
> https://wiki.evolveum.com/display/midPoint/Recommended+OpenLDAP+Structure
> <https://wiki.evolveum.com/display/midPoint/Recommended+OpenLDAP+Structure>
> https://wiki.evolveum.com/display/midPoint/Simulated+Disable+HOWTO
> <https://wiki.evolveum.com/display/midPoint/Simulated+Disable+HOWTO>
> https://wiki.evolveum.com/display/midPoint/Auxiliary+Object+Classes
> <https://wiki.evolveum.com/display/midPoint/Auxiliary+Object+Classes>
>
>
> 2017-09-21 16:44:24,841 [] [Thread-87] ERROR
> (com.evolveum.midpoint.model.impl.lens.ChangeExecutor): Error
> executing changes for (account (default) on
> resource:dd8b9ada-2dfa-4aec-b538-21357d2218be(OpenLdap3)):
> Internal error:
> com.evolveum.midpoint.util.exception.SystemException: Got
> unexpected exception:
> org.identityconnectors.framework.common.exceptions.AlreadyExistsException:
> Error modifying LDAP entry
> uid=testuser6,ou=Users,ou=LV,dc=dyninno,dc=test:
> [add:midPointAccountStatus: enabled,add:objectClass:
> midPointPerson,]: constraintViolation: attribute
> 'midPointAccountStatus' cannot have multiple values (19)
> com.evolveum.midpoint.util.exception.SystemException: Internal
> error: com.evolveum.midpoint.util.exception.SystemException:
> Got unexpected exception:
> org.identityconnectors.framework.common.exceptions.AlreadyExistsException:
> Error modifying LDAP entry
> uid=testuser6,ou=Users,ou=LV,dc=dyninno,dc=test:
> [add:midPointAccountStatus: enabled,add:objectClass:
> midPointPerson,]: constraintViolation: attribute
> 'midPointAccountStatus' cannot have multiple values (19)
> at
> com.evolveum.midpoint.provisioning.impl.ProvisioningServiceImpl.modifyObject(ProvisioningServiceImpl.java:701)
> ~[provisioning-impl-3.6.jar:na]
> at com.evolveum.midpoint.model.im
> <http://com.evolveum.midpoint.model.im>pl.lens.ChangeExecutor.modifyProvisioningObject(ChangeExecutor.java:1397)
> ~[model-impl-3.6.jar:na]
> at com.evolveum.midpoint.model.im
> <http://com.evolveum.midpoint.model.im>pl.lens.ChangeExecutor.executeModification(ChangeExecutor.java:1281)
> ~[model-impl-3.6.jar:na]
> at com.evolveum.midpoint.model.im
> <http://com.evolveum.midpoint.model.im>pl.lens.ChangeExecutor.executeDelta(ChangeExecutor.java:812)
> ~[model-impl-3.6.jar:na]
> at com.evolveum.midpoint.model.im
> <http://com.evolveum.midpoint.model.im>pl.lens.ChangeExecutor.executeChanges(ChangeExecutor.java:308)
> ~[model-impl-3.6.jar:na]
> at com.evolveum.midpoint.model.im
> <http://com.evolveum.midpoint.model.im>pl.lens.Clockwork.lambda$processSecondary$0(Clockwork.java:481)
> [model-impl-3.6.jar:na]
> at com.evolveum.midpoint.model.im
> <http://com.evolveum.midpoint.model.im>pl.lens.LensUtil.partialExecute(LensUtil.java:1253)
> ~[model-impl-3.6.jar:na]
> at com.evolveum.midpoint.model.im
> <http://com.evolveum.midpoint.model.im>pl.lens.LensUtil.partialExecute(LensUtil.java:1240)
> ~[model-impl-3.6.jar:na]
> at com.evolveum.midpoint.model.im
> <http://com.evolveum.midpoint.model.im>pl.lens.Clockwork.processSecondary(Clockwork.java:479)
> [model-impl-3.6.jar:na]
> at com.evolveum.midpoint.model.im
> <http://com.evolveum.midpoint.model.im>pl.lens.Clockwork.click(Clockwork.java:327)
> [model-impl-3.6.jar:na]
> at com.evolveum.midpoint.model.im
> <http://com.evolveum.midpoint.model.im>pl.lens.Clockwork.run(Clockwork.java:203)
> [model-impl-3.6.jar:na]
> at com.evolveum.midpoint.model.im
> <http://com.evolveum.midpoint.model.im>pl.controller.ModelController.executeChanges(ModelController.java:569)
> ~[model-impl-3.6.jar:na]
> at
> sun.reflect.GeneratedMethodAccessor1281.invoke(Unknown Source)
> ~[na:na]
> at
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
> ~[na:1.8.0_131]
> at java.lang.reflect.Method.invoke(Method.java:498)
> ~[na:1.8.0_131]
> at
> org.apache.wicket.proxy.LazyInitProxyFactory$JdkHandler.invoke(LazyInitProxyFactory.java:507)
> ~[wicket-ioc-7.6.0.jar:7.6.0]
> at com.sun.proxy.$Proxy154.executeChanges(Unknown
> Source) ~[na:na]
> at
> com.evolveum.midpoint.web.component.progress.ProgressReporter.lambda$executeChangesAsync$0(ProgressReporter.java:187)
> ~[classes/:na]
> at java.lang.Thread.run(Thread.java:748) ~[na:1.8.0_131]
> Caused by:
> com.evolveum.midpoint.util.exception.SystemException:
> com.evolveum.midpoint.util.exception.SystemException: Got
> unexpected exception:
> org.identityconnectors.framework.common.exceptions.AlreadyExistsException:
> Error modifying LDAP entry
> uid=testuser6,ou=Users,ou=LV,dc=dyninno,dc=test:
> [add:midPointAccountStatus: enabled,add:objectClass:
> midPointPerson,]: constraintViolation: attribute
> 'midPointAccountStatus' cannot have multiple values (19)
> at
> com.evolveum.midpoint.provisioning.consistency.impl.ErrorHandlerFactory.createErrorHandler(ErrorHandlerFactory.java:89)
> ~[provisioning-impl-3.6.jar:na]
> at
> com.evolveum.midpoint.provisioning.impl.ShadowCache.handleError(ShadowCache.java:1128)
> ~[provisioning-impl-3.6.jar:na]
> at
> com.evolveum.midpoint.provisioning.impl.ShadowCache.modifyShadow(ShadowCache.java:691)
> ~[provisioning-impl-3.6.jar:na]
> at
> com.evolveum.midpoint.provisioning.impl.ProvisioningServiceImpl.modifyObject(ProvisioningServiceImpl.java:679)
> ~[provisioning-impl-3.6.jar:na]
> ... 18 common frames omitted
>
>
> --
> Best regards,
>
> Oleksandr Nekriach | Identity and access management engineer
>
> Dynatech, Mednieku str. 4a, Riga, LV-1010, Latvia
>
> +37125314685 <tel:+371%2025%20314%20685>
> ,
> o.nekriach at dynatech.lv <mailto:o.nekriach at dynatech.lv>
> |
> www.dynatech.lv <http://www.dynatech.lv>
>
>
>
>
> Stay connected:
> <https://www.facebook.com/DynatechLatvia/?ref=br_rs>
> <https://www.linkedin.com/company-beta/17893047/>
>
>
> Confidentiality Notice: This message contains confidential
> information and is intended only for the named recipient(s).
> If you are not the addressee you may not copy, distribute or
> perform any other activities with this information. If you
> have received this transmission in error, please notify us by
> e-mail immediately. E-mail transmission cannot be guaranteed
> to be secure or error-free as information could be
> intercepted, corrupted, lost, destroyed, arrive late or
> incomplete, or contain viruses.
>
> _______________________________________________
> midPoint mailing list
> midPoint at lists.evolveum.com <mailto:midPoint at lists.evolveum.com>
> http://lists.evolveum.com/mailman/listinfo/midpoint
> <http://lists.evolveum.com/mailman/listinfo/midpoint>
>
>
>
>
> --
> s pozdravom
>
> Gustáv Pálos
>
> _______________________________________________
> midPoint mailing list
> midPoint at lists.evolveum.com <mailto:midPoint at lists.evolveum.com>
> http://lists.evolveum.com/mailman/listinfo/midpoint
> <http://lists.evolveum.com/mailman/listinfo/midpoint>
>
>
>
>
> --
> Best regards,
>
> Oleksandr Nekriach | Identity and access management engineer
>
> Dynatech, Mednieku str. 4a, Riga, LV-1010, Latvia
>
> +37125314685 <tel:+371%2025%20314%20685>
> ,
> o.nekriach at dynatech.lv <mailto:o.nekriach at dynatech.lv>
> |
> www.dynatech.lv <http://www.dynatech.lv>
>
>
>
>
> Stay connected:
> <https://www.facebook.com/DynatechLatvia/?ref=br_rs>
> <https://www.linkedin.com/company-beta/17893047/>
>
>
> Confidentiality Notice: This message contains confidential information
> and is intended only for the named recipient(s). If you are not the
> addressee you may not copy, distribute or perform any other activities
> with this information. If you have received this transmission in
> error, please notify us by e-mail immediately. E-mail transmission
> cannot be guaranteed to be secure or error-free as information could
> be intercepted, corrupted, lost, destroyed, arrive late or incomplete,
> or contain viruses.
>
>
> _______________________________________________
> midPoint mailing list
> midPoint at lists.evolveum.com
> http://lists.evolveum.com/mailman/listinfo/midpoint
--
Ivan Noris
Senior Identity Engineer
evolveum.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20170922/21183075/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: o.nekriach at dynatech.lv1502777022855-7770
Type: image/png
Size: 2602 bytes
Desc: not available
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20170922/21183075/attachment.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: o.nekriach at dynatech.lv1502777022855-7771
Type: image/png
Size: 790 bytes
Desc: not available
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20170922/21183075/attachment-0001.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: o.nekriach at dynatech.lv1502777022855-7772
Type: image/png
Size: 786 bytes
Desc: not available
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20170922/21183075/attachment-0002.png>
More information about the midPoint
mailing list