[midPoint] "An attempt to modify an immutable" when tyring to create account in OpenLDAP with 4.10.x

[Pavol Mederly]

Hello Oliver,

immutability is a kind of internal protection of in-memory objects in 
midPoint from unwanted modification. An (unexpected) attempt to change 
an immutable object is manifested via this exception. It is something 
that definitely should not occur.

It could be a bug in midPoint or a problem in your configuration. (The 
fact that it worked with 4.9.x leans towards the former a bit.)

If you provide a stacktrace related to that exception, it could shed 
some light to the situation.

But no promises here - I am just saying that maybe the stacktrace would 
ignite some idea in someone's head.

-- 
Pavol Mederly
Interim Chief Product Officer
evolveum.com

On 20/03/2026 09:51, Oliver Schonefeld via midPoint wrote:
> Hello fellow midPoint users,
>
> when trying to provision accounts in an OpenLDAP-Instance, I get an
> java.lang.IllegalStateException exception:
>
> An attempt to modify an immutable: 
> SAC(attributes):[PCV(null):[RA({.../resource/instance-3}sn):[PPV(String:$REDACTED$)], 
> RA({.../resource/instance-3}departm
> entNumber):[PPV(String:$REDACTED$)], 
> RA({.../resource/instance-3}idsAccountType):[PPV(String:employee)], 
> RA({.../resource/instance-3}uid):[PPV(String:$REDACTED$)], 
> RA({.../resource/instance-3}o):[P
> PV(String:$REDACTED$)], 
> RA({.../resource/instance-3}idsAccountUuid):[PPV(String:$REDACTED$)], 
> RA({.../resource/instance-3}cn):[PPV(String:$REDACTED$)], RA({.../res
> ource/instance-3}dn):[PPV(String:$REDACTED,dc=de)], 
> RA({.../resource/instance-3}givenName):[PPV(String:$REDACTED$)], 
> RA({.../resource/instance-3}mail):[PPV(String
> :$REDACTED$)], 
> RA({.../resource/instance-3}roomNumber):[PPV(String:$REDACTED$)], 
> RA({.../resource/instance-3}telephoneNumber):[PPV(String:+49 
> $REDACTED$)]]]
>
> From the exception I don't understand which attributes or what is 
> "immutable".
>
> If I manually create an Entry on the LDAP server, I can link resource 
> object to a user in midPoint. Also attribute synchronization
>
> The same resource-config works with 4.9.x.
>
> Any hints?
>
>
> Thank you and best regards
>   Oliver
>
> _______________________________________________
> midPoint mailing list
> midPoint at lists.evolveum.com
> https://lists.evolveum.com/mailman/listinfo/midpoint