[midPoint] Error in provisioning of entitlements via LdapConnector

[Marc Fueller]

Dear community,

I am an encountering several SqlExceptions when provisioning an 
entitlement to OpenLDAP via the LdapConnector.

...
Caused by: java.sql.BatchUpdateException: Batch entry 0 insert into m_object_ext_string (item_id, owner_oid, ownerType, stringValue) values (6, 'cee0d4eb-c89a-4ca0-8092-57f4d7c2d93f', 1, 'ou=10c4cfa1-2e39-...') was aborted: ERROR: value too long for type character varying(255)  Call getNextException to see other errors in the batch.
         at org.postgresql.jdbc.BatchResultHandler.handleError(BatchResultHandler.java:169)
         at org.postgresql.core.v3.QueryExecutorImpl.processResults(QueryExecutorImpl.java:2285)
         at org.postgresql.core.v3.QueryExecutorImpl.execute(QueryExecutorImpl.java:520)
         at org.postgresql.jdbc.PgStatement.internalExecuteBatch(PgStatement.java:878)
         at org.postgresql.jdbc.PgStatement.executeBatch(PgStatement.java:901)
         at org.postgresql.jdbc.PgPreparedStatement.executeBatch(PgPreparedStatement.java:1644)
         at com.zaxxer.hikari.pool.ProxyStatement.executeBatch(ProxyStatement.java:127)
         at com.zaxxer.hikari.pool.HikariProxyPreparedStatement.executeBatch(HikariProxyPreparedStatement.java)
         at org.hibernate.engine.jdbc.batch.internal.BatchingBatch.performExecution(BatchingBatch.java:121)
         ... 86 common frames omitted
Caused by: org.postgresql.util.PSQLException: ERROR: value too long for type character varying(255)
         at org.postgresql.core.v3.QueryExecutorImpl.receiveErrorResponse(QueryExecutorImpl.java:2552)
         at org.postgresql.core.v3.QueryExecutorImpl.processResults(QueryExecutorImpl.java:2284)
         ... 93 common frames omitted
2022-03-18 14:11:25,157 [] [pool-3-thread-2] ERROR (com.evolveum.midpoint.gui.impl.page.admin.ProgressAwareChangesExecutorImpl): Error executing changes.
com.evolveum.midpoint.util.exception.SystemException: Caught PSQLException for insert into m_audit_delta (record_id, checksum, delta, deltaOid, deltaType, fullResult, objectName_norm, objectName_orig, resourceName_norm, resourceName_orig, resourceOid, status)
values (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?), (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
        ...

Midpoint ist trying to create a shadow with a DN like this:

ou=10c4cfa1-2e39-44e8-b5a4-224753f11ec9,ou=4082b704-7309-4c47-8435-dff2d7f3e84f,ou=5bc31faf-d864-430b-8b71-7791823090b1,ou=3ee86367-5a97-4cfc-8d54-1581b1a13fed,ou=8743ca4d-217c-4d06-8067-be830d894621,ou=be52f4ef-3c92-4ede-a755-fc6d173c3455,ou=kontakte,dc=example,dc=org

The exceptions indicates that this value is too long (longer than 255 
characters) for at least these table columns

  * table: m_object_ext_string, column: stringValue
  * table: m_audit_delta, columns: objectName_norm, objectName_orig

I suspect that there would be also errors for the table m_shadow as its 
columns name_norm and name_orig are also datatype varchar(255).

As far as I understand, it is not possible to change the attribute to be 
used as name for the shadow object.

Has anybody also encountered this limitation and might be able to give 
me a hint regarding a solution or a workaround?

Thanks in advance!

Best regards,

Marc

-- 
Marc Füller
Consultant

DAASI International GmbH
Europaplatz 3
D-72072 Tübingen
Germany

phone: +49 7071 407109-0
fax:   +49 7071 407109-9
email:marc.fueller at daasi.de
web:www.daasi.de
Sitz der Gesellschaft: Tübingen
Registergericht: Amtsgericht Stuttgart, HRB 382175
Geschäftsleitung: Peter Gietz
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20220318/5f93e2fa/attachment.htm>