[midPoint] Multi-value attribute in LDAP Connector

Pavol Mederly mederly at evolveum.com
Tue Jul 9 21:25:48 CEST 2019


Hello Keith,

this must be something wrong with the schema. Could you please export 
your OpenLDAP resource XML object and sent it here? (without any 
sensitive information, of course)

Best regards,

Pavol Mederly
Software developer
evolveum.com

On 09.07.2019 20:41, Keith LeValley wrote:
> I have a basic demo environment setup, a CSV connector pushing users 
> into Midpoint and an LDAP connector live syncing users to an openldap 
> server.  It is working well except when I introduce multi-value 
> attributes.  In this case it is roles, subtype -> employeeType.  After 
> a user is in the system and I add a role from the CSV feed it simply 
> rotates which value to display in LDAP, if I delete the user and 
> re-import starting off with a multi-valued attribute I get the 
> following error:
>
> Operation
>     operation.com.evolveum.midpoint.model.impl.lens.projector.Projector.projectProjection
> Message
>     Attempt to replace 2 values to a single-valued item
>     attributes/employeeType; values: [PPV(String:Staff),
>     PPV(String:Alumni)]
> Parameters
>     projection 	[resource:ebd0bf7b-7e80-4175-ba5e-4fd5de2ecd62(LDAP
>     Server (OpenLDAP) over new LDAPConn.)(default)]
>
> Error
>     Attempt to replace 2 values to a single-valued item
>     attributes/employeeType; values: [PPV(String:Staff),
>     PPV(String:Alumni)]
>     show
>     com.evolveum.midpoint.util.exception.SchemaException: Attempt to
>     replace 2 values to a single-valued item attributes/employeeType;
>     values: [PPV(String:Staff), PPV(String:Alumni)] at
>     com.evolveum.midpoint.prism.delta.ItemDelta.validate(ItemDelta.java:1004)
>     at
>     com.evolveum.midpoint.prism.delta.ItemDelta.validate(ItemDelta.java:991)
>     at
>     com.evolveum.midpoint.model.impl.lens.projector.ConsolidationProcessor.consolidateItem(ConsolidationProcessor.java:489)
>     at
>     com.evolveum.midpoint.model.impl.lens.projector.ConsolidationProcessor.consolidateAttribute(ConsolidationProcessor.java:324)
>     at
>     com.evolveum.midpoint.model.impl.lens.projector.ConsolidationProcessor.consolidateAttributes(ConsolidationProcessor.java:295)
>     at
>     com.evolveum.midpoint.model.impl.lens.projector.ConsolidationProcessor.consolidateValuesToModifyDelta(ConsolidationProcessor.java:201)
>     at
>     com.evolveum.midpoint.model.impl.lens.projector.ConsolidationProcessor.consolidateValuesModifyProjection(ConsolidationProcessor.java:599)
>     at
>     com.evolveum.midpoint.model.impl.lens.projector.ConsolidationProcessor.consolidateValues(ConsolidationProcessor.java:131)
>     at
>     com.evolveum.midpoint.model.impl.lens.projector.ProjectionValuesProcessor.processProjections(ProjectionValuesProcessor.java:232)
>     at
>     com.evolveum.midpoint.model.impl.lens.projector.ProjectionValuesProcessor.process(ProjectionValuesProcessor.java:138)
>     at
>     com.evolveum.midpoint.model.impl.lens.projector.Projector.lambda$projectProjection$3(Projector.java:353)
>     at
>     com.evolveum.midpoint.model.impl.lens.ClockworkMedic.partialExecute(ClockworkMedic.java:174)
>     at
>     com.evolveum.midpoint.model.impl.lens.ClockworkMedic.partialExecute(ClockworkMedic.java:154)
>     at
>     com.evolveum.midpoint.model.impl.lens.projector.Projector.projectProjection(Projector.java:350)
>     at
>     com.evolveum.midpoint.model.impl.lens.projector.Projector.lambda$projectInternal$2(Projector.java:253)
>     at
>     com.evolveum.midpoint.model.impl.lens.ClockworkMedic.partialExecute(ClockworkMedic.java:174)
>     at
>     com.evolveum.midpoint.model.impl.lens.ClockworkMedic.partialExecute(ClockworkMedic.java:154)
>     at
>     com.evolveum.midpoint.model.impl.lens.projector.Projector.projectInternal(Projector.java:252)
>     at
>     com.evolveum.midpoint.model.impl.lens.projector.Projector.project(Projector.java:101)
>     at
>     com.evolveum.midpoint.model.impl.lens.Clockwork.click(Clockwork.java:455)
>     at
>     com.evolveum.midpoint.model.impl.lens.Clockwork.run(Clockwork.java:213)
>     at
>     com.evolveum.midpoint.model.impl.sync.SynchronizationServiceImpl.reactToChange(SynchronizationServiceImpl.java:809)
>     at
>     com.evolveum.midpoint.model.impl.sync.SynchronizationServiceImpl.notifyChange(SynchronizationServiceImpl.java:203)
>     at
>     com.evolveum.midpoint.provisioning.impl.ChangeNotificationDispatcherImpl.notifyChange(ChangeNotificationDispatcherImpl.java:152)
>     at
>     com.evolveum.midpoint.model.impl.sync.SynchronizeAccountResultHandler.handleObjectInternal(SynchronizeAccountResultHandler.java:198)
>     at
>     com.evolveum.midpoint.model.impl.sync.SynchronizeAccountResultHandler.handleObject(SynchronizeAccountResultHandler.java:121)
>     at
>     com.evolveum.midpoint.repo.common.task.AbstractSearchIterativeResultHandler.processRequest(AbstractSearchIterativeResultHandler.java:325)
>     at
>     com.evolveum.midpoint.repo.common.task.AbstractSearchIterativeResultHandler.handle(AbstractSearchIterativeResultHandler.java:183)
>     at
>     com.evolveum.midpoint.model.impl.importer.ImportAccountsFromResourceTaskHandler.importSingleShadow(ImportAccountsFromResourceTaskHandler.java:313)
>     at
>     com.evolveum.midpoint.model.impl.controller.ModelController.importFromResource(ModelController.java:1534)
>     at sun.reflect.GeneratedMethodAccessor1312.invoke(Unknown Source)
>     at
>     sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
>     at java.lang.reflect.Method.invoke(Method.java:498) at
>     org.apache.wicket.proxy.LazyInitProxyFactory$JdkHandler.invoke(LazyInitProxyFactory.java:508)
>     at com.sun.proxy.$Proxy202.importFromResource(Unknown Source) at
>     com.evolveum.midpoint.web.page.admin.resources.ResourceContentPanel.importResourceObject(ResourceContentPanel.java:977)
>     at
>     com.evolveum.midpoint.web.page.admin.resources.ResourceContentPanel$13$1.onSubmit(ResourceContentPanel.java:878)
>     at
>     com.evolveum.midpoint.web.component.data.column.InlineMenuButtonColumn.buttonMenuItemClickPerformed(InlineMenuButtonColumn.java:153)
>     at
>     com.evolveum.midpoint.web.component.data.column.InlineMenuButtonColumn.access$400(InlineMenuButtonColumn.java:50)
>     at
>     com.evolveum.midpoint.web.component.data.column.InlineMenuButtonColumn$1.lambda$createButton$76db38be$1(InlineMenuButtonColumn.java:121)
>     at
>     com.evolveum.midpoint.web.component.data.MultiButtonPanel$1.onClick(MultiButtonPanel.java:77)
>     at
>     org.apache.wicket.ajax.markup.html.AjaxLink$1.onEvent(AjaxLink.java:85)
>     at
>     org.apache.wicket.ajax.AjaxEventBehavior.respond(AjaxEventBehavior.java:155)
>     at
>     org.apache.wicket.ajax.AbstractDefaultAjaxBehavior.onRequest(AbstractDefaultAjaxBehavior.java:601)
>     at sun.reflect.GeneratedMethodAccessor454.invoke(Unknown Source)
>     at
>     sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
>     at java.lang.reflect.Method.invoke(Method.java:498) at
>     org.apache.wicket.RequestListenerInterface.internalInvoke(RequestListenerInterface.java:258)
>     at
>     org.apache.wicket.RequestListenerInterface.invoke(RequestListenerInterface.java:241)
>     at
>     org.apache.wicket.core.request.handler.ListenerInterfaceRequestHandler.invokeListener(ListenerInterfaceRequestHandler.java:248)
>     at
>     org.apache.wicket.core.request.handler.ListenerInterfaceRequestHandler.respond(ListenerInterfaceRequestHandler.java:234)
>     at
>     org.apache.wicket.request.cycle.RequestCycle$HandlerExecutor.respond(RequestCycle.java:895)
>     at
>     org.apache.wicket.request.RequestHandlerStack.execute(RequestHandlerStack.java:64)
>     at
>     org.apache.wicket.request.cycle.RequestCycle.execute(RequestCycle.java:265)
>     at
>     org.apache.wicket.request.cycle.RequestCycle.processRequest(RequestCycle.java:222)
>     at
>     org.apache.wicket.request.cycle.RequestCycle.processRequestAndDetach(RequestCycle.java:293)
>     at
>     org.apache.wicket.protocol.http.WicketFilter.processRequestCycle(WicketFilter.java:261)
>     at
>     org.apache.wicket.protocol.http.WicketFilter.processRequest(WicketFilter.java:203)
>     at
>     org.apache.wicket.protocol.http.WicketFilter.doFilter(WicketFilter.java:284)
>     at
>     org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
>     at
>     org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
>     at
>     com.evolveum.midpoint.web.util.MidPointProfilingServletFilter.doFilter(MidPointProfilingServletFilter.java:87)
>     at
>     org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
>     at
>     org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
>     at
>     org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:320)
>     at
>     org.springframework.security.web.access.intercept.FilterSecurityInterceptor.invoke(FilterSecurityInterceptor.java:127)
>     at
>     org.springframework.security.web.access.intercept.FilterSecurityInterceptor.doFilter(FilterSecurityInterceptor.java:91)
>     at
>     org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)
>     at
>     org.springframework.security.web.access.ExceptionTranslationFilter.doFilter(ExceptionTranslationFilter.java:119)
>     at
>     org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)
>     at
>     org.springframework.security.web.session.SessionManagementFilter.doFilter(SessionManagementFilter.java:137)
>     at
>     org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)
>     at
>     org.springframework.security.web.authentication.AnonymousAuthenticationFilter.doFilter(AnonymousAuthenticationFilter.java:111)
>     at
>     org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)
>     at
>     org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestFilter.doFilter(SecurityContextHolderAwareRequestFilter.java:170)
>     at
>     org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)
>     at
>     org.springframework.security.web.savedrequest.RequestCacheAwareFilter.doFilter(RequestCacheAwareFilter.java:63)
>     at
>     org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)
>     at
>     org.springframework.security.web.session.ConcurrentSessionFilter.doFilter(ConcurrentSessionFilter.java:155)
>     at
>     org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)
>     at
>     org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter.doFilter(AbstractAuthenticationProcessingFilter.java:200)
>     at
>     org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)
>     at
>     org.springframework.security.web.authentication.logout.LogoutFilter.doFilter(LogoutFilter.java:116)
>     at
>     org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)
>     at
>     org.springframework.security.web.csrf.CsrfFilter.doFilterInternal(CsrfFilter.java:100)
>     at
>     org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107)
>     at
>     org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)
>     at
>     org.springframework.security.web.context.SecurityContextPersistenceFilter.doFilter(SecurityContextPersistenceFilter.java:105)
>     at
>     org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)
>     at
>     org.springframework.security.web.context.request.async.WebAsyncManagerIntegrationFilter.doFilterInternal(WebAsyncManagerIntegrationFilter.java:56)
>     at
>     org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107)
>     at
>     org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)
>     at
>     org.springframework.security.web.FilterChainProxy.doFilterInternal(FilterChainProxy.java:215)
>     at
>     org.springframework.security.web.FilterChainProxy.doFilter(FilterChainProxy.java:178)
>     at
>     org.springframework.web.filter.DelegatingFilterProxy.invokeDelegate(DelegatingFilterProxy.java:357)
>     at
>     org.springframework.web.filter.DelegatingFilterProxy.doFilter(DelegatingFilterProxy.java:270)
>     at
>     org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
>     at
>     org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
>     at
>     org.springframework.web.filter.RequestContextFilter.doFilterInternal(RequestContextFilter.java:99)
>     at
>     org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107)
>     at
>     org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
>     at
>     org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
>     at
>     org.springframework.web.filter.HttpPutFormContentFilter.doFilterInternal(HttpPutFormContentFilter.java:109)
>     at
>     org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107)
>     at
>     org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
>     at
>     org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
>     at
>     org.springframework.web.filter.HiddenHttpMethodFilter.doFilterInternal(HiddenHttpMethodFilter.java:93)
>     at
>     org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107)
>     at
>     org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
>     at
>     org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
>     at
>     org.springframework.web.filter.CharacterEncodingFilter.doFilterInternal(CharacterEncodingFilter.java:200)
>     at
>     org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107)
>     at
>     org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
>     at
>     org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
>     at
>     org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:198)
>     at
>     org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:96)
>     at
>     org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:496)
>     at
>     org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:140)
>     at
>     org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:81)
>     at
>     org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:87)
>     at
>     com.evolveum.midpoint.web.boot.TomcatRootValve.invoke(TomcatRootValve.java:64)
>     at
>     org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:342)
>     at
>     org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:803)
>     at
>     org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:66)
>     at
>     org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:790)
>     at
>     org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1468)
>     at
>     org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49)
>     at
>     java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
>     at
>     java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
>     at
>     org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
>     at java.lang.Thread.run(Thread.java:748)
>
> I have confirmed that the value is in fact multi-valued in ldap and I 
> can assign multiple values.  The schema is set to maxoccur="unbound" 
> for the attribute.  Not sure if anyone else has run into this issue?  
> It seems like a really simple fix, but it has stumped me to this point 
> and any help would be greatly appreciated.
>
>
> -- 
> Keith LeValley
> Identity Services Architect, Davenport University
> klevalley2 at davenport.edu
> <mailto:klevalley2 at davenport.edu>
>
> _______________________________________________
> midPoint mailing list
> midPoint at lists.evolveum.com
> http://lists.evolveum.com/mailman/listinfo/midpoint
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20190709/3429ae3e/attachment.htm>


More information about the midPoint mailing list