[midPoint] bug in reading LDAP attribute sambaPwdLastSet

Pascal Perichon pascal.perichon at u-paris.fr
Mon Jun 15 13:42:19 CEST 2020


hi,

i have in a LDAP an attribute "sambaPwdLastSet" with the value 
"1363792363240".

Midpoint crashed on reading it:

ERROR ConnId Exception java.lang.NumberFormatException in 
connector:9cb79691-944b-40cf-a95c-6f053d4920db(ConnId 
com.evolveum.polygon.connector.ldap.LdapConnector v3.0): 
ConnectorSpec(resource:u75-connecteur-LDAP-U75proxyP7(LDAP proxy P7), 
name=null, oid=9cb79691-944b-40cf-a95c-6f053d4920db): For input string: 
"1363792363240" java.lang.NumberFormatException: For input string: 
"1363792363240

And midpoint stop reading any other LDAP accounts (and this account is 
in the first one)

The definition of sambaPwdLastSet is:

attributeTypes: ( 1.3.6.1.4.1.7165.2.1.27 NAME 'sambaPwdLastSet' DESC 
'Timestamp of the last password update' EQUALITY integerMatch SYNTAX 
1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE X-SCHEMA-FILE '05-samba.ldif' )

1.3.6.1.4.1.1466.115.121.1.27 => it's an integer.

1363792363240 is too big a java integer... but a valid integer (maybe a 
java type long).

Then I try that :

/            <attribute>//
//                <ref>ri:sambaPwdLastSet</ref>//
//                <limitations>//
//                    <access>//
//                        <read>false</read>//
//                        <add>false</add>//
//                        <modify>false</modify>//
//                    </access>//
//                </limitations>//
//            </attribute>//
/

but with no effect :(

I must let the the schema loading like that :

/    <schema>/
/        <generationConstraints>/
/              .../
/<generateObjectClass>ri:sambaSamAccount</generateObjectClass>/
/              .../
/        </generationConstraints>/
/    </schema>/

because without midpoint shout.

And I didn't have "/sambaSamAccount"/ class in any "auxiliaryObjectClass"

I read a similar problem in 
https://lists.evolveum.com/pipermail/midpoint/2018-February/004493.html... 
and it seems to be a problem in other attributes

*QUESTION : how can I avoid reading this attribute if midpoint can't 
read it ?*

thanks

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20200615/90a3990e/attachment.htm>


More information about the midPoint mailing list