[midPoint] Stackoverflow when configuring AdLdap connector

Nicolas Bouillon nicolas at bouillon.net
Wed Jul 24 16:57:42 CEST 2019


I think I must try to add the following part part as explained in the
wiki page :

        <icfc:resultsHandlerConfiguration>
            <icfc:enableNormalizingResultsHandler>false</icfc:enableNormalizingResultsHandler>
            <icfc:enableFilteredResultsHandler>false</icfc:enableFilteredResultsHandler>
            <icfc:enableAttributesToGetSearchResultsHandler>false</icfc:enableAttributesToGetSearchResultsHandler>
        </icfc:resultsHandlerConfiguration>

I will see if it give better results.

Thanks.

Le mer. 24 juil. 2019 à 16:52, <JStanczak at vinu.edu> a écrit :
>
> I'm somewhat new myself but do either of these help? I know the schema gave me issues until I limited it.
>
> https://wiki.evolveum.com/display/midPoint/Active+Directory+with+LDAP+connector
> Full Active Directory Schema
>
>
> https://wiki.evolveum.com/pages/viewpage.action?pageId=22741393
> ConnId Result Handlers
>
>
> Justin Stanczak
> rizenine at gmail.com
> https://github.com/rizenine
>
> -----"midPoint" <midpoint-bounces at lists.evolveum.com> wrote: -----
> To: midpoint at lists.evolveum.com
> From: "Nicolas Bouillon"
> Sent by: "midPoint"
> Date: 07/22/2019 05:18PM
> Subject: [midPoint] Stackoverflow when configuring AdLdap connector
>
> Hi,
>
> I discovered Midpoint lately and I'm evaluating how it could suit the
> need we have to control our users accesses.
>
> Unfortunately, my experience is not getting starting so good, as I
> have issue when configuring my first resource with the AdLdapConnector
> (midpoint 3.9).
> After a bit of struggle, I finally got the configuration below working.
>
> The configuration tests correctly, but I think when midpoint try to
> get the data, I get an error 500 on the GUI, and no way to go back to
> resources list (error 500 again).
> (I'm testing with embedded h2 database, so the only way I found to try
> again is to delete the db file)
>
> The stacktrace in midpoint.log is not very helpful
>
> 2019-07-22 22:51:44,511 [] [http-nio-8080-exec-10] ERROR
> (com.evolveum.midpoint.web.util.MidPointProfilingServletFilter):
> Encountered exception: javax.servlet.ServletException: Filter
> execution threw an exception
> javax.servlet.ServletException: Filter execution threw an exception
>     at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:200)
>     at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
>    (...)
> Caused by: java.lang.StackOverflowError: null
>     at java.io.ObjectOutputStream.writeSerialData(ObjectOutputStream.java:1495)
>     at java.io.ObjectOutputStream.writeOrdinaryObject(ObjectOutputStream.java:1432)
>     at java.io.ObjectOutputStream.writeObject0(ObjectOutputStream.java:1178)
>     at java.io.ObjectOutputStream.defaultWriteFields(ObjectOutputStream.java:1548)
>     at java.io.ObjectOutputStream.writeSerialData(ObjectOutputStream.java:1509)
>     at java.io.ObjectOutputStream.writeOrdinaryObject(ObjectOutputStream.java:1432)
>     at java.io.ObjectOutputStream.writeObject0(ObjectOutputStream.java:1178)
>     at java.io.ObjectOutputStream.defaultWriteFields(ObjectOutputStream.java:1548)
>
> I'm new to midpoint, so please excuse me if something is obviously
> wrong in the configuration I tried.
>
> Thank you.
>
> Nicolas.
>
>     <connectorConfiguration
> xmlns:icfc="http://midpoint.evolveum.com/xml/ns/public/connector/icf-1/connector-schema-3">
>         <icfc:configurationProperties
> xmlns:gen449="http://midpoint.evolveum.com/xml/ns/public/connector/icf-1/bundle/com.evolveum.polygon.connector-ldap/com.evolveum.polygon.connector.ldap.ad.AdLdapConnector">
>             <gen449:host>company.lan</gen449:host>
>             <gen449:port>636</gen449:port>
>             <gen449:connectionSecurity>ssl</gen449:connectionSecurity>
>             <gen449:bindDn>CN=Service Account for LDAP
> login,OU=Service Accounts,OU=Main,DC=company,DC=lan</gen449:bindDn>
>             <gen449:bindPassword>
>                 <t:encryptedData>
>                     <t:encryptionMethod>
>
> <t:algorithm>http://www.w3.org/2001/04/xmlenc#aes128-cbc</t:algorithm>
>                     </t:encryptionMethod>
>                     <t:keyInfo>
>                         <t:keyName>removed</t:keyName>
>                     </t:keyInfo>
>                     <t:cipherData>
>                         <t:cipherValue>removed</t:cipherValue>
>                     </t:cipherData>
>                 </t:encryptedData>
>             </gen449:bindPassword>
>             <gen449:baseContext>OU=Main,DC=company,DC=lan</gen449:baseContext>
>             <gen449:servers>10.200.0.10</gen449:servers>
>             <gen449:servers>10.200.0.11</gen449:servers>
>             <gen449:baseContextsToSynchronize>OU=Main,DC=company,DC=lan</gen449:baseContextsToSynchronize>
>             <gen449:baseContextsToSynchronize>OU=Groups,DC=company,DC=lan</gen449:baseContextsToSynchronize>
>             <gen449:objectClassesToSynchronize>user</gen449:objectClassesToSynchronize>
>             <gen449:objectClassesToSynchronize>group</gen449:objectClassesToSynchronize>
>             <gen449:attributesToSynchronize>cn</gen449:attributesToSynchronize>
>             <gen449:attributesToSynchronize>distinguishedName</gen449:attributesToSynchronize>
>             <gen449:attributesToSynchronize>name</gen449:attributesToSynchronize>
>             <gen449:attributesToSynchronize>sAMAccountName</gen449:attributesToSynchronize>
>             <gen449:attributesToSynchronize>member</gen449:attributesToSynchronize>
>             <gen449:attributesToSynchronize>objectClass</gen449:attributesToSynchronize>
>             <gen449:attributesToSynchronize>givenName</gen449:attributesToSynchronize>
>             <gen449:attributesToSynchronize>displayName</gen449:attributesToSynchronize>
>             <gen449:attributesToSynchronize>mail</gen449:attributesToSynchronize>
>             <gen449:attributesToSynchronize>sn</gen449:attributesToSynchronize>
>             <gen449:attributesToSynchronize>userPrincipalName</gen449:attributesToSynchronize>
>         </icfc:configurationProperties>
>     </connectorConfiguration>
> _______________________________________________
> midPoint mailing list
> midPoint at lists.evolveum.com
> http://lists.evolveum.com/mailman/listinfo/midpoint
> _______________________________________________
> midPoint mailing list
> midPoint at lists.evolveum.com
> http://lists.evolveum.com/mailman/listinfo/midpoint



More information about the midPoint mailing list