[midPoint] 'midPointAccountStatus' cannot have multiple values
Oleksandr Nekriach
o.nekriach at dynatech.lv
Fri Sep 22 16:48:10 CEST 2017
Ivan,
The new created resource has not such problem. It has the same
configuration for midPointAccountStatus attribute.
Export corrupted resource, delete in MidPoint, reboot and import it back
does not solve my problem. Only creating from scratch via configuration
wizard helps me.
Maybe MidPoint has some tools to purge artifacts and cache do you know some
thing about that?
Best regards, Oleksandr
2017-09-22 16:55 GMT+03:00 Ivan Noris <ivan.noris at evolveum.com>:
> Hi Oleksandr,
>
> it's expected that the attribute was not in schema handling, as it is
> handled using activation/administrativeStatus...
>
> My attribute example did not contain any outbound/inbound, so it was just
> for configuration reasons - like setting limitations, displayName, readonly
> permission etc...
>
> Was the error still the same? Is the other (from scratch) resource working
> correctly? I can't seem to understand yet.
>
> Regards,
>
> Ivan
>
> On 22.09.2017 15:09, Oleksandr Nekriach wrote:
>
> Hello Ivan,
> I had not this attribute in schema handling before only in the schema and
> capabilities sections.
> Anyway the solution of adding this attribute to schema handling did not
> solve my problem with broken resource.
>
> Best regards, Oleksandr
>
>
> 2017-09-22 14:37 GMT+03:00 Ivan Noris <ivan.noris at evolveum.com>:
>
>> Hi Oleksandr,
>>
>> I think Gustav meant to use the limitations in schema handling, not in
>> schema, as schema may be refreshed and your changes would be lost:
>>
>> <attribute>
>> <ref>ri:midPointAccountStatus</ref>
>> <limitations>
>> <maxOccurs>1</maxOccurs>
>> </limitations>
>>
>> </attribute>
>> I can't imagine why it works with one resource and not other... For sure
>> I have not been working with a resource which has multivalue attribute for
>> account state...
>>
>> Ivan
>>
>>
>> On 21.09.2017 17:13, Oleksandr Nekriach wrote:
>>
>> Hello Pálos,
>> I have tried to apply this limitation on resource schema and the
>> limitation doesn't help me too.
>>
>> <xsd:element minOccurs="0" maxOccurs="1"
>> name="midPointAccountStatus" type="xsd:string">
>> <xsd:annotation>
>> <xsd:appinfo>
>> <a:ignore>true</a:ignore>
>> <a:displayOrder>140</a:displayOrder>
>> <a:matchingRule xmlns:qn289="http://prism.evol
>> veum.com/xml/ns/public/matching-rule-3">qn289:stringIgnoreCa
>> se</a:matchingRule>
>> <ra:nativeAttributeName>midPoi
>> ntAccountStatus</ra:nativeAttributeName>
>> <ra:frameworkAttributeName>mid
>> PointAccountStatus</ra:frameworkAttributeName>
>> </xsd:appinfo>
>> </xsd:annotation>
>> </xsd:element>
>>
>> But the new resource created from scratch works fine. I have compared XML
>> of both resources and do not see any differences.
>>
>>
>> 2017-09-21 17:17 GMT+03:00 Pálos Gustáv <gustav.palos at gmail.com>:
>>
>>> Hi Oleksandr
>>>
>>> try to set up this attribute as single-valued over:
>>> <limitations>
>>> <maxOccurs>1</maxOccurs>
>>> </limitations>
>>>
>>> Best regards,
>>>
>>> Gustav
>>>
>>> 2017-09-21 15:58 GMT+02:00 Oleksandr Nekriach <o.nekriach at dynatech.lv>:
>>>
>>>> Hello,
>>>> I had followed guides to add enable/disable Resource capabilities to my
>>>> openLdap resource.
>>>> I have configured it and everything was fine I can disable resource but
>>>> when I tried to enable it I have got an error
>>>> "attribute 'midPointAccountStatus' cannot have multiple values".
>>>> I cant understand why connector try to add attribute instead of
>>>> modify it?
>>>> Please help
>>>>
>>>> https://wiki.evolveum.com/display/midPoint/Recommended+OpenL
>>>> DAP+Structure
>>>> https://wiki.evolveum.com/display/midPoint/Simulated+Disable+HOWTO
>>>> https://wiki.evolveum.com/display/midPoint/Auxiliary+Object+Classes
>>>>
>>>>
>>>> 2017-09-21 16:44:24,841 [] [Thread-87] ERROR
>>>> (com.evolveum.midpoint.model.impl.lens.ChangeExecutor): Error
>>>> executing changes for (account (default) on
>>>> resource:dd8b9ada-2dfa-4aec-b538-21357d2218be(OpenLdap3)): Internal
>>>> error: com.evolveum.midpoint.util.exception.SystemException: Got
>>>> unexpected exception: org.identityconnectors.framewo
>>>> rk.common.exceptions.AlreadyExistsException: Error modifying LDAP
>>>> entry uid=testuser6,ou=Users,ou=LV,dc=dyninno,dc=test:
>>>> [add:midPointAccountStatus: enabled,add:objectClass: midPointPerson,]:
>>>> constraintViolation: attribute 'midPointAccountStatus' cannot have multiple
>>>> values (19)
>>>> com.evolveum.midpoint.util.exception.SystemException: Internal error:
>>>> com.evolveum.midpoint.util.exception.SystemException: Got unexpected
>>>> exception: org.identityconnectors.framework.common.exceptions.AlreadyExistsException:
>>>> Error modifying LDAP entry uid=testuser6,ou=Users,ou=LV,dc=dyninno,dc=test:
>>>> [add:midPointAccountStatus: enabled,add:objectClass: midPointPerson,]:
>>>> constraintViolation: attribute 'midPointAccountStatus' cannot have multiple
>>>> values (19)
>>>> at com.evolveum.midpoint.provisioning.impl.ProvisioningServiceI
>>>> mpl.modifyObject(ProvisioningServiceImpl.java:701)
>>>> ~[provisioning-impl-3.6.jar:na]
>>>> at com.evolveum.midpoint.model.impl.lens.ChangeExecutor.modifyP
>>>> rovisioningObject(ChangeExecutor.java:1397) ~[model-impl-3.6.jar:na]
>>>> at com.evolveum.midpoint.model.impl.lens.ChangeExecutor.execute
>>>> Modification(ChangeExecutor.java:1281) ~[model-impl-3.6.jar:na]
>>>> at com.evolveum.midpoint.model.impl.lens.ChangeExecutor.executeDelta(ChangeExecutor.java:812)
>>>> ~[model-impl-3.6.jar:na]
>>>> at com.evolveum.midpoint.model.impl.lens.ChangeExecutor.execute
>>>> Changes(ChangeExecutor.java:308) ~[model-impl-3.6.jar:na]
>>>> at com.evolveum.midpoint.model.impl.lens.Clockwork.lambda$proce
>>>> ssSecondary$0(Clockwork.java:481) [model-impl-3.6.jar:na]
>>>> at com.evolveum.midpoint.model.impl.lens.LensUtil.partialExecute(LensUtil.java:1253)
>>>> ~[model-impl-3.6.jar:na]
>>>> at com.evolveum.midpoint.model.impl.lens.LensUtil.partialExecute(LensUtil.java:1240)
>>>> ~[model-impl-3.6.jar:na]
>>>> at com.evolveum.midpoint.model.impl.lens.Clockwork.processSecondary(Clockwork.java:479)
>>>> [model-impl-3.6.jar:na]
>>>> at com.evolveum.midpoint.model.impl.lens.Clockwork.click(Clockwork.java:327)
>>>> [model-impl-3.6.jar:na]
>>>> at com.evolveum.midpoint.model.impl.lens.Clockwork.run(Clockwork.java:203)
>>>> [model-impl-3.6.jar:na]
>>>> at com.evolveum.midpoint.model.impl.controller.ModelController.
>>>> executeChanges(ModelController.java:569) ~[model-impl-3.6.jar:na]
>>>> at sun.reflect.GeneratedMethodAccessor1281.invoke(Unknown
>>>> Source) ~[na:na]
>>>> at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
>>>> ~[na:1.8.0_131]
>>>> at java.lang.reflect.Method.invoke(Method.java:498)
>>>> ~[na:1.8.0_131]
>>>> at org.apache.wicket.proxy.LazyInitProxyFactory$JdkHandler.invo
>>>> ke(LazyInitProxyFactory.java:507) ~[wicket-ioc-7.6.0.jar:7.6.0]
>>>> at com.sun.proxy.$Proxy154.executeChanges(Unknown Source)
>>>> ~[na:na]
>>>> at com.evolveum.midpoint.web.component.progress.ProgressReporte
>>>> r.lambda$executeChangesAsync$0(ProgressReporter.java:187)
>>>> ~[classes/:na]
>>>> at java.lang.Thread.run(Thread.java:748) ~[na:1.8.0_131]
>>>> Caused by: com.evolveum.midpoint.util.exception.SystemException:
>>>> com.evolveum.midpoint.util.exception.SystemException: Got unexpected
>>>> exception: org.identityconnectors.framework.common.exceptions.AlreadyExistsException:
>>>> Error modifying LDAP entry uid=testuser6,ou=Users,ou=LV,dc=dyninno,dc=test:
>>>> [add:midPointAccountStatus: enabled,add:objectClass: midPointPerson,]:
>>>> constraintViolation: attribute 'midPointAccountStatus' cannot have multiple
>>>> values (19)
>>>> at com.evolveum.midpoint.provisioning.consistency.impl.ErrorHan
>>>> dlerFactory.createErrorHandler(ErrorHandlerFactory.java:89)
>>>> ~[provisioning-impl-3.6.jar:na]
>>>> at com.evolveum.midpoint.provisioning.impl.ShadowCache.handleError(ShadowCache.java:1128)
>>>> ~[provisioning-impl-3.6.jar:na]
>>>> at com.evolveum.midpoint.provisioning.impl.ShadowCache.modifyShadow(ShadowCache.java:691)
>>>> ~[provisioning-impl-3.6.jar:na]
>>>> at com.evolveum.midpoint.provisioning.impl.ProvisioningServiceI
>>>> mpl.modifyObject(ProvisioningServiceImpl.java:679)
>>>> ~[provisioning-impl-3.6.jar:na]
>>>> ... 18 common frames omitted
>>>>
>>>>
>>>> --
>>>> Best regards,
>>>>
>>>> Oleksandr Nekriach | Identity and access management engineer
>>>>
>>>> Dynatech, Mednieku str. 4a, Riga, LV-1010, Latvia
>>>>
>>>> +37125314685 <+371%2025%20314%20685>
>>>> ,
>>>> o.nekriach at dynatech.lv
>>>> |
>>>> www.dynatech.lv
>>>>
>>>>
>>>>
>>>>
>>>> Stay connected:
>>>> <https://www.facebook.com/DynatechLatvia/?ref=br_rs>
>>>> <https://www.linkedin.com/company-beta/17893047/>
>>>>
>>>>
>>>> Confidentiality Notice: This message contains confidential information
>>>> and is intended only for the named recipient(s). If you are not the
>>>> addressee you may not copy, distribute or perform any other activities with
>>>> this information. If you have received this transmission in error, please
>>>> notify us by e-mail immediately. E-mail transmission cannot be guaranteed
>>>> to be secure or error-free as information could be intercepted, corrupted,
>>>> lost, destroyed, arrive late or incomplete, or contain viruses.
>>>>
>>>> _______________________________________________
>>>> midPoint mailing list
>>>> midPoint at lists.evolveum.com
>>>> http://lists.evolveum.com/mailman/listinfo/midpoint
>>>>
>>>>
>>>
>>>
>>> --
>>> s pozdravom
>>>
>>> Gustáv Pálos
>>>
>>> _______________________________________________
>>> midPoint mailing list
>>> midPoint at lists.evolveum.com
>>> http://lists.evolveum.com/mailman/listinfo/midpoint
>>>
>>>
>>
>>
>> --
>> Best regards,
>>
>> Oleksandr Nekriach | Identity and access management engineer
>>
>> Dynatech, Mednieku str. 4a, Riga, LV-1010, Latvia
>>
>> +37125314685 <+371%2025%20314%20685>
>> ,
>> o.nekriach at dynatech.lv
>> |
>> www.dynatech.lv
>>
>>
>>
>>
>> Stay connected:
>> <https://www.facebook.com/DynatechLatvia/?ref=br_rs>
>> <https://www.linkedin.com/company-beta/17893047/>
>>
>>
>> Confidentiality Notice: This message contains confidential information
>> and is intended only for the named recipient(s). If you are not the
>> addressee you may not copy, distribute or perform any other activities with
>> this information. If you have received this transmission in error, please
>> notify us by e-mail immediately. E-mail transmission cannot be guaranteed
>> to be secure or error-free as information could be intercepted, corrupted,
>> lost, destroyed, arrive late or incomplete, or contain viruses.
>>
>>
>> _______________________________________________
>> midPoint mailing listmidPoint at lists.evolveum.comhttp://lists.evolveum.com/mailman/listinfo/midpoint
>>
>>
>> --
>> Ivan Noris
>> Senior Identity Engineerevolveum.com
>>
>>
>> _______________________________________________
>> midPoint mailing list
>> midPoint at lists.evolveum.com
>> http://lists.evolveum.com/mailman/listinfo/midpoint
>>
>>
>
>
> --
> Best regards,
>
> Oleksandr Nekriach | Identity and access management engineer
>
> Dynatech, Mednieku str. 4a, Riga, LV-1010, Latvia
>
> +37125314685 <+371%2025%20314%20685>
> ,
> o.nekriach at dynatech.lv
> |
> www.dynatech.lv
>
>
>
>
> Stay connected:
> <https://www.facebook.com/DynatechLatvia/?ref=br_rs>
> <https://www.linkedin.com/company-beta/17893047/>
>
>
> Confidentiality Notice: This message contains confidential information and
> is intended only for the named recipient(s). If you are not the addressee
> you may not copy, distribute or perform any other activities with this
> information. If you have received this transmission in error, please notify
> us by e-mail immediately. E-mail transmission cannot be guaranteed to be
> secure or error-free as information could be intercepted, corrupted, lost,
> destroyed, arrive late or incomplete, or contain viruses.
>
>
> _______________________________________________
> midPoint mailing listmidPoint at lists.evolveum.comhttp://lists.evolveum.com/mailman/listinfo/midpoint
>
>
> --
> Ivan Noris
> Senior Identity Engineerevolveum.com
>
>
> _______________________________________________
> midPoint mailing list
> midPoint at lists.evolveum.com
> http://lists.evolveum.com/mailman/listinfo/midpoint
>
>
--
Best regards,
Oleksandr Nekriach | Identity and access management engineer
Dynatech, Mednieku str. 4a, Riga, LV-1010, Latvia
+37125314685 <+371%2025%20314%20685>
,
o.nekriach at dynatech.lv
|
www.dynatech.lv
Stay connected:
<https://www.facebook.com/DynatechLatvia/?ref=br_rs>
<https://www.linkedin.com/company-beta/17893047/>
Confidentiality Notice: This message contains confidential information and
is intended only for the named recipient(s). If you are not the addressee
you may not copy, distribute or perform any other activities with this
information. If you have received this transmission in error, please notify
us by e-mail immediately. E-mail transmission cannot be guaranteed to be
secure or error-free as information could be intercepted, corrupted, lost,
destroyed, arrive late or incomplete, or contain viruses.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20170922/27ba7919/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: o.nekriach at dynatech.lv1502777022855-7771
Type: image/png
Size: 790 bytes
Desc: not available
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20170922/27ba7919/attachment.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: o.nekriach at dynatech.lv1502777022855-7772
Type: image/png
Size: 786 bytes
Desc: not available
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20170922/27ba7919/attachment-0001.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: o.nekriach at dynatech.lv1502777022855-7770
Type: image/png
Size: 2602 bytes
Desc: not available
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20170922/27ba7919/attachment-0002.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: o.nekriach at dynatech.lv1502777022855-7771
Type: image/png
Size: 790 bytes
Desc: not available
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20170922/27ba7919/attachment-0003.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: o.nekriach at dynatech.lv1502777022855-7772
Type: image/png
Size: 786 bytes
Desc: not available
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20170922/27ba7919/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: o.nekriach at dynatech.lv1502777022855-7770
Type: image/png
Size: 2602 bytes
Desc: not available
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20170922/27ba7919/attachment-0005.png>
More information about the midPoint
mailing list