<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Hi Nitin,<br>
<br>
<br>
<blockquote
cite="mid:305192DBBFDF8F41AF7879DE170FDEB004F318138C@IND-MHP1MCL001.mastek.com"
type="cite">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<meta name="Generator" content="Microsoft Word 14 (filtered
medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoPlainText, li.MsoPlainText, div.MsoPlainText
{mso-style-priority:99;
mso-style-link:"Plain Text Char";
margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
span.PlainTextChar
{mso-style-name:"Plain Text Char";
mso-style-priority:99;
mso-style-link:"Plain Text";
font-family:"Calibri","sans-serif";}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1">
<p class="MsoPlainText">Thanks Ivan again for such a detailed
explanation.I have made the changes as per your suggestion but
still is not working<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">I get below error if I try to enable my
DB account on the user and try to save it.<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText"><span
style="background:yellow;mso-highlight:yellow">Subresult
com.evolveum.midpoint.provisioning.ucf.api.ConnectorInstance.modifyObject
of operation
com.evolveum.midpoint.provisioning.api.ProvisioningService.modifyObject
is still UNKNOWN during cleanup; during handling of
exception
com.evolveum.midpoint.util.exception.SystemException:
java.lang.NullPointerException: null, Couldn't add object.
Object already exists: Account already exists on the
resource: javax.naming.NameAlreadyBoundException([LDAP:
error code 68 - The entry uid=200395948546,ou=people,o=nhs
cannot be added because an entry with that name already
exists])</span><o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">My requirement is a user is available
in DB needs to synchronized with LDAP<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText"> A user in DB is getting provisioned in
Midpoint i.e both ways Midpt to DB and DB to Midpt and LDAP
account is also assigned after making changes[object template
and system configuration as per your suggestion<o:p></o:p></p>
<p class="MsoPlainText">]but not from Midpt to LDAP<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">I tried to manually assign the account
but still getting above error.I am not able to understand why
midpoint is trying to create account in LDAP which is already
available ideally it should update is that correct?<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
</div>
</blockquote>
<br>
MidPoint has discovered already existing object (account) in your
LDAP.<br>
midPoint does not know (you have not configured it) what to do and
deliberately fails.<br>
Please see <synchronization> .. </synchronization>
section in our LDAP samples and use it. You need to know how to
correlate existing users (correlation expression). This way it
allows to pair the existing account when discovered during the
provisioning and will essentially update it instead of create.<br>
<br>
You can also delete the account now, and try to create it from
midPoint, if you need uncomplicated and easy setup.<br>
<br>
Regards,<br>
Ivan<br>
<pre class="moz-signature" cols="72">--
Ing. Ivan Noris
Senior Identity Management Engineer
evolveum.com
___________________________________________
"Idem per idem - semper idem Vix."
</pre>
</body>
</html>