[midPoint] 'midPointAccountStatus' cannot have multiple values
Ivan Noris
ivan.noris at evolveum.com
Fri Sep 22 15:55:05 CEST 2017
Hi Oleksandr,
it's expected that the attribute was not in schema handling, as it is
handled using activation/administrativeStatus...
My attribute example did not contain any outbound/inbound, so it was
just for configuration reasons - like setting limitations, displayName,
readonly permission etc...
Was the error still the same? Is the other (from scratch) resource
working correctly? I can't seem to understand yet.
Regards,
Ivan
On 22.09.2017 15:09, Oleksandr Nekriach wrote:
> Hello Ivan,
> I had not this attribute in schema handling before only in the schema
> and capabilities sections.
> Anyway the solution of adding this attribute to schema handling did
> not solve my problem with broken resource.
>
> Best regards, Oleksandr
>
>
> 2017-09-22 14:37 GMT+03:00 Ivan Noris <ivan.noris at evolveum.com
> <mailto:ivan.noris at evolveum.com>>:
>
> Hi Oleksandr,
>
> I think Gustav meant to use the limitations in schema handling,
> not in schema, as schema may be refreshed and your changes would
> be lost:
>
> <attribute>
> <ref>ri:midPointAccountStatus</ref>
> <limitations>
> <maxOccurs>1</maxOccurs>
> </limitations>
>
> </attribute>
>
> I can't imagine why it works with one resource and not other...
> For sure I have not been working with a resource which has
> multivalue attribute for account state...
>
> Ivan
>
>
> On 21.09.2017 17:13, Oleksandr Nekriach wrote:
>> Hello Pálos,
>> I have tried to apply this limitation on resource schema and the
>> limitation doesn't help me too.
>>
>> <xsd:element minOccurs="0" maxOccurs="1"
>> name="midPointAccountStatus" type="xsd:string">
>> <xsd:annotation>
>> <xsd:appinfo>
>> <a:ignore>true</a:ignore>
>> <a:displayOrder>140</a:displayOrder>
>> <a:matchingRule
>> xmlns:qn289="http://prism.evolveum.com/xml/ns/public/matching-rule-3
>> <http://prism.evolveum.com/xml/ns/public/matching-rule-3>">qn289:stringIgnoreCase</a:matchingRule>
>>
>> <ra:nativeAttributeName>midPointAccountStatus</ra:nativeAttributeName>
>>
>> <ra:frameworkAttributeName>midPointAccountStatus</ra:frameworkAttributeName>
>> </xsd:appinfo>
>> </xsd:annotation>
>> </xsd:element>
>>
>> But the new resource created from scratch works fine. I have
>> compared XML of both resources and do not see any differences.
>>
>>
>> 2017-09-21 17:17 GMT+03:00 Pálos Gustáv <gustav.palos at gmail.com
>> <mailto:gustav.palos at gmail.com>>:
>>
>> Hi Oleksandr
>>
>> try to set up this attribute as single-valued over:
>> <limitations>
>> <maxOccurs>1</maxOccurs>
>> </limitations>
>>
>>
>> Best regards,
>>
>> Gustav
>>
>> 2017-09-21 15:58 GMT+02:00 Oleksandr Nekriach
>> <o.nekriach at dynatech.lv <mailto:o.nekriach at dynatech.lv>>:
>>
>> Hello,
>> I had followed guides to add enable/disable Resource
>> capabilities to my openLdap resource.
>> I have configured it and everything was fine I can
>> disable resource but when I tried to enable it I have got
>> an error
>> "attribute 'midPointAccountStatus' cannot have multiple
>> values".
>> I cant understand why connector try to add attribute
>> instead of modify it?
>> Please help
>>
>> https://wiki.evolveum.com/display/midPoint/Recommended+OpenLDAP+Structure
>> <https://wiki.evolveum.com/display/midPoint/Recommended+OpenLDAP+Structure>
>> https://wiki.evolveum.com/display/midPoint/Simulated+Disable+HOWTO
>> <https://wiki.evolveum.com/display/midPoint/Simulated+Disable+HOWTO>
>> https://wiki.evolveum.com/display/midPoint/Auxiliary+Object+Classes
>> <https://wiki.evolveum.com/display/midPoint/Auxiliary+Object+Classes>
>>
>>
>> 2017-09-21 16:44:24,841 [] [Thread-87] ERROR
>> (com.evolveum.midpoint.model.impl.lens.ChangeExecutor):
>> Error executing changes for (account (default) on
>> resource:dd8b9ada-2dfa-4aec-b538-21357d2218be(OpenLdap3)):
>> Internal error:
>> com.evolveum.midpoint.util.exception.SystemException: Got
>> unexpected exception:
>> org.identityconnectors.framework.common.exceptions.AlreadyExistsException:
>> Error modifying LDAP entry
>> uid=testuser6,ou=Users,ou=LV,dc=dyninno,dc=test:
>> [add:midPointAccountStatus: enabled,add:objectClass:
>> midPointPerson,]: constraintViolation: attribute
>> 'midPointAccountStatus' cannot have multiple values (19)
>> com.evolveum.midpoint.util.exception.SystemException:
>> Internal error:
>> com.evolveum.midpoint.util.exception.SystemException: Got
>> unexpected exception:
>> org.identityconnectors.framework.common.exceptions.AlreadyExistsException:
>> Error modifying LDAP entry
>> uid=testuser6,ou=Users,ou=LV,dc=dyninno,dc=test:
>> [add:midPointAccountStatus: enabled,add:objectClass:
>> midPointPerson,]: constraintViolation: attribute
>> 'midPointAccountStatus' cannot have multiple values (19)
>> at
>> com.evolveum.midpoint.provisioning.impl.ProvisioningServiceImpl.modifyObject(ProvisioningServiceImpl.java:701)
>> ~[provisioning-impl-3.6.jar:na]
>> at com.evolveum.midpoint.model.im
>> <http://com.evolveum.midpoint.model.im>pl.lens.ChangeExecutor.modifyProvisioningObject(ChangeExecutor.java:1397)
>> ~[model-impl-3.6.jar:na]
>> at com.evolveum.midpoint.model.im
>> <http://com.evolveum.midpoint.model.im>pl.lens.ChangeExecutor.executeModification(ChangeExecutor.java:1281)
>> ~[model-impl-3.6.jar:na]
>> at com.evolveum.midpoint.model.im
>> <http://com.evolveum.midpoint.model.im>pl.lens.ChangeExecutor.executeDelta(ChangeExecutor.java:812)
>> ~[model-impl-3.6.jar:na]
>> at com.evolveum.midpoint.model.im
>> <http://com.evolveum.midpoint.model.im>pl.lens.ChangeExecutor.executeChanges(ChangeExecutor.java:308)
>> ~[model-impl-3.6.jar:na]
>> at com.evolveum.midpoint.model.im
>> <http://com.evolveum.midpoint.model.im>pl.lens.Clockwork.lambda$processSecondary$0(Clockwork.java:481)
>> [model-impl-3.6.jar:na]
>> at com.evolveum.midpoint.model.im
>> <http://com.evolveum.midpoint.model.im>pl.lens.LensUtil.partialExecute(LensUtil.java:1253)
>> ~[model-impl-3.6.jar:na]
>> at com.evolveum.midpoint.model.im
>> <http://com.evolveum.midpoint.model.im>pl.lens.LensUtil.partialExecute(LensUtil.java:1240)
>> ~[model-impl-3.6.jar:na]
>> at com.evolveum.midpoint.model.im
>> <http://com.evolveum.midpoint.model.im>pl.lens.Clockwork.processSecondary(Clockwork.java:479)
>> [model-impl-3.6.jar:na]
>> at com.evolveum.midpoint.model.im
>> <http://com.evolveum.midpoint.model.im>pl.lens.Clockwork.click(Clockwork.java:327)
>> [model-impl-3.6.jar:na]
>> at com.evolveum.midpoint.model.im
>> <http://com.evolveum.midpoint.model.im>pl.lens.Clockwork.run(Clockwork.java:203)
>> [model-impl-3.6.jar:na]
>> at com.evolveum.midpoint.model.im
>> <http://com.evolveum.midpoint.model.im>pl.controller.ModelController.executeChanges(ModelController.java:569)
>> ~[model-impl-3.6.jar:na]
>> at
>> sun.reflect.GeneratedMethodAccessor1281.invoke(Unknown
>> Source) ~[na:na]
>> at
>> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
>> ~[na:1.8.0_131]
>> at
>> java.lang.reflect.Method.invoke(Method.java:498)
>> ~[na:1.8.0_131]
>> at
>> org.apache.wicket.proxy.LazyInitProxyFactory$JdkHandler.invoke(LazyInitProxyFactory.java:507)
>> ~[wicket-ioc-7.6.0.jar:7.6.0]
>> at com.sun.proxy.$Proxy154.executeChanges(Unknown
>> Source) ~[na:na]
>> at
>> com.evolveum.midpoint.web.component.progress.ProgressReporter.lambda$executeChangesAsync$0(ProgressReporter.java:187)
>> ~[classes/:na]
>> at java.lang.Thread.run(Thread.java:748)
>> ~[na:1.8.0_131]
>> Caused by:
>> com.evolveum.midpoint.util.exception.SystemException:
>> com.evolveum.midpoint.util.exception.SystemException: Got
>> unexpected exception:
>> org.identityconnectors.framework.common.exceptions.AlreadyExistsException:
>> Error modifying LDAP entry
>> uid=testuser6,ou=Users,ou=LV,dc=dyninno,dc=test:
>> [add:midPointAccountStatus: enabled,add:objectClass:
>> midPointPerson,]: constraintViolation: attribute
>> 'midPointAccountStatus' cannot have multiple values (19)
>> at
>> com.evolveum.midpoint.provisioning.consistency.impl.ErrorHandlerFactory.createErrorHandler(ErrorHandlerFactory.java:89)
>> ~[provisioning-impl-3.6.jar:na]
>> at
>> com.evolveum.midpoint.provisioning.impl.ShadowCache.handleError(ShadowCache.java:1128)
>> ~[provisioning-impl-3.6.jar:na]
>> at
>> com.evolveum.midpoint.provisioning.impl.ShadowCache.modifyShadow(ShadowCache.java:691)
>> ~[provisioning-impl-3.6.jar:na]
>> at
>> com.evolveum.midpoint.provisioning.impl.ProvisioningServiceImpl.modifyObject(ProvisioningServiceImpl.java:679)
>> ~[provisioning-impl-3.6.jar:na]
>> ... 18 common frames omitted
>>
>>
>> --
>> Best regards,
>>
>> Oleksandr Nekriach | Identity and access management engineer
>>
>> Dynatech, Mednieku str. 4a, Riga, LV-1010, Latvia
>>
>> +37125314685 <tel:+371%2025%20314%20685>
>> ,
>> o.nekriach at dynatech.lv <mailto:o.nekriach at dynatech.lv>
>> |
>> www.dynatech.lv <http://www.dynatech.lv>
>>
>>
>>
>>
>> Stay connected:
>> <https://www.facebook.com/DynatechLatvia/?ref=br_rs>
>> <https://www.linkedin.com/company-beta/17893047/>
>>
>>
>> Confidentiality Notice: This message contains
>> confidential information and is intended only for the
>> named recipient(s). If you are not the addressee you may
>> not copy, distribute or perform any other activities with
>> this information. If you have received this transmission
>> in error, please notify us by e-mail immediately. E-mail
>> transmission cannot be guaranteed to be secure or
>> error-free as information could be intercepted,
>> corrupted, lost, destroyed, arrive late or incomplete, or
>> contain viruses.
>>
>> _______________________________________________
>> midPoint mailing list
>> midPoint at lists.evolveum.com
>> <mailto:midPoint at lists.evolveum.com>
>> http://lists.evolveum.com/mailman/listinfo/midpoint
>> <http://lists.evolveum.com/mailman/listinfo/midpoint>
>>
>>
>>
>>
>> --
>> s pozdravom
>>
>> Gustáv Pálos
>>
>> _______________________________________________
>> midPoint mailing list
>> midPoint at lists.evolveum.com <mailto:midPoint at lists.evolveum.com>
>> http://lists.evolveum.com/mailman/listinfo/midpoint
>> <http://lists.evolveum.com/mailman/listinfo/midpoint>
>>
>>
>>
>>
>> --
>> Best regards,
>>
>> Oleksandr Nekriach | Identity and access management engineer
>>
>> Dynatech, Mednieku str. 4a, Riga, LV-1010, Latvia
>>
>> +37125314685 <tel:+371%2025%20314%20685>
>> ,
>> o.nekriach at dynatech.lv <mailto:o.nekriach at dynatech.lv>
>> |
>> www.dynatech.lv <http://www.dynatech.lv>
>>
>>
>>
>>
>> Stay connected:
>> <https://www.facebook.com/DynatechLatvia/?ref=br_rs>
>> <https://www.linkedin.com/company-beta/17893047/>
>>
>>
>> Confidentiality Notice: This message contains confidential
>> information and is intended only for the named recipient(s). If
>> you are not the addressee you may not copy, distribute or perform
>> any other activities with this information. If you have received
>> this transmission in error, please notify us by e-mail
>> immediately. E-mail transmission cannot be guaranteed to be
>> secure or error-free as information could be intercepted,
>> corrupted, lost, destroyed, arrive late or incomplete, or contain
>> viruses.
>>
>>
>> _______________________________________________
>> midPoint mailing list
>> midPoint at lists.evolveum.com <mailto:midPoint at lists.evolveum.com>
>> http://lists.evolveum.com/mailman/listinfo/midpoint
>> <http://lists.evolveum.com/mailman/listinfo/midpoint>
>
> --
> Ivan Noris
> Senior Identity Engineer
> evolveum.com <http://evolveum.com>
>
>
> _______________________________________________
> midPoint mailing list
> midPoint at lists.evolveum.com <mailto:midPoint at lists.evolveum.com>
> http://lists.evolveum.com/mailman/listinfo/midpoint
> <http://lists.evolveum.com/mailman/listinfo/midpoint>
>
>
>
>
> --
> Best regards,
>
> Oleksandr Nekriach | Identity and access management engineer
>
> Dynatech, Mednieku str. 4a, Riga, LV-1010, Latvia
>
> +37125314685 <tel:+371%2025%20314%20685>
> ,
> o.nekriach at dynatech.lv <mailto:o.nekriach at dynatech.lv>
> |
> www.dynatech.lv <http://www.dynatech.lv>
>
>
>
>
> Stay connected:
> <https://www.facebook.com/DynatechLatvia/?ref=br_rs>
> <https://www.linkedin.com/company-beta/17893047/>
>
>
> Confidentiality Notice: This message contains confidential information
> and is intended only for the named recipient(s). If you are not the
> addressee you may not copy, distribute or perform any other activities
> with this information. If you have received this transmission in
> error, please notify us by e-mail immediately. E-mail transmission
> cannot be guaranteed to be secure or error-free as information could
> be intercepted, corrupted, lost, destroyed, arrive late or incomplete,
> or contain viruses.
>
>
> _______________________________________________
> midPoint mailing list
> midPoint at lists.evolveum.com
> http://lists.evolveum.com/mailman/listinfo/midpoint
--
Ivan Noris
Senior Identity Engineer
evolveum.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20170922/38ca77d3/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: o.nekriach at dynatech.lv1502777022855-7770
Type: image/png
Size: 2602 bytes
Desc: not available
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20170922/38ca77d3/attachment.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: o.nekriach at dynatech.lv1502777022855-7771
Type: image/png
Size: 790 bytes
Desc: not available
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20170922/38ca77d3/attachment-0001.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: o.nekriach at dynatech.lv1502777022855-7772
Type: image/png
Size: 786 bytes
Desc: not available
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20170922/38ca77d3/attachment-0002.png>
More information about the midPoint
mailing list