<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Hi Jason,<br>
<br>
I've just tried to do similar example on my OpenDJ, which I have
installed locally.<br>
<br>
The iterator worked flawlessly when I also had the
<maxIterations>5</maxIterations> attribute defined
(without this, the request to save failed immediatelly).<br>
<br>
Can you please specify:<br>
- version of midpoint<br>
- version of AD connector (already asked by Pavol)<br>
- version of Connector Server (already asked by Pavol)<br>
<br>
Also, the space after the fullname in CN part is probably not what
you wanted ("cn=Tammy Smith<b>_</b>, ..." - I replaced the space by
the underscore for brevity). The space should not be there. Just
comma.<br>
<br>
Regards,<br>
Ivan<br>
<br>
<br>
<div class="moz-cite-prefix">On 11/18/2014 10:21 PM, Jason Everling
wrote:<br>
</div>
<blockquote
cite="mid:CAFkZXY6BS8L3-bNmA4PUzoctvOLBA-QJFY5G+Q-fF96WkPW+UA@mail.gmail.com"
type="cite">
<div dir="ltr">I have been doing some other testing and it seems
when the user has the same firstname lastname the account will
fail to create on active directory. I double-checked the code
throughout github and it seems correct but I get the error which
even shows that it is not adding the iterationToken to the end
of the lastname like it should from the code,
<div><br>
</div>
<div>
<div> <attribute></div>
<div> <ref>icfs:name</ref></div>
<div> <displayName>Distinguished
Name</displayName></div>
<div> <limitations></div>
<div>
<minOccurs>0</minOccurs></div>
<div> <access></div>
<div> <read>true</read></div>
<div> <add>true</add></div>
<div>
<modify>true</modify></div>
<div> </access></div>
<div> </limitations></div>
<div> <outbound></div>
<div> <source></div>
<div>
<path>$user/givenName</path></div>
<div> </source></div>
<div> <source></div>
<div>
<path>$user/familyName</path></div>
<div> </source></div>
<div> <source></div>
<div>
<path>$user/organization</path></div>
<div> </source></div>
<div> <expression></div>
<div> <script></div>
<div> <code></div>
<div><span class="" style="white-space:pre"> </span>'cn='+givenName+'
'+familyName+iterationToken+' ,'+organization+''</div>
<div> </code></div>
<div> </script></div>
<div> </expression></div>
<div> </outbound></div>
<div> </attribute></div>
</div>
<div><br>
</div>
<div>In there error blow it should be using the persons iterator
which is 2 so it should be trying to create it as
<a class="moz-txt-link-freetext" href="LDAP://dc1.test.local/cn=Tammy">LDAP://dc1.test.local/cn=Tammy</a> Smith2 ,OU=AAD,OU=SHP
Students,DC=TEST,DC=LOCAL but it is not.</div>
<div><br>
</div>
<div>
<div>2014-11-18 15:08:45,314 [MODEL] [http-bio-8080-exec-68]
ERROR
(com.evolveum.midpoint.model.impl.lens.ChangeExecutor):
Error executing changes for (account (default) on
<a class="moz-txt-link-freetext" href="resource:ef2bc95b-76e0-48e2-86d6-3d4f02d3eaef(Active">resource:ef2bc95b-76e0-48e2-86d6-3d4f02d3eaef(Active</a>
Directory: Office 365, Google Apps, Moodle)): Can't process
shadow: null (OID:null): Generic error in connector:
org.identityconnectors.framework.impl.api.remote.RemoteWrappedException(The
object already exists.</div>
<div>: when creating <a class="moz-txt-link-freetext" href="LDAP://dc1.test.local/cn=Tammy">LDAP://dc1.test.local/cn=Tammy</a> Smith
,OU=AAD,OU=SHP Students,DC=TEST,DC=LOCAL)</div>
<div>com.evolveum.midpoint.util.exception.CommunicationException:
Can't process shadow: null (OID:null): Generic error in
connector:
org.identityconnectors.framework.impl.api.remote.RemoteWrappedException(The
object already exists.</div>
<div>: when creating <a class="moz-txt-link-freetext" href="LDAP://dc1.test.local/cn=Tammy">LDAP://dc1.test.local/cn=Tammy</a> Smith
,OU=AAD,OU=SHP Students,DC=TEST,DC=LOCAL)</div>
<div><br>
</div>
<div>Thanks,</div>
</div>
<div>JASON</div>
</div>
<br>
<font size="2"><br>
<br>
CONFIDENTIALITY NOTICE:<br>
This e-mail together with any attachments is proprietary and
confidential; intended for only the recipient(s) named above and
may contain information that is privileged. You should not
retain, copy or use this e-mail or any attachments for any
purpose, or disclose all or any part of the contents to any
person. Any views or opinions expressed in this e-mail are those
of the author and do not represent those of the Baptist School
of Health Professions. If you have received this e-mail in
error, or are not the named recipient(s), you are hereby
notified that any review, dissemination, distribution or copying
of this communication is prohibited by the sender and to do so
might constitute a violation of the Electronic Communications
Privacy Act, 18 U.S.C. section 2510-2521. Please immediately
notify the sender and delete this e-mail and any attachments
from your computer. </font><br>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
midPoint mailing list
<a class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>
<a class="moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
<pre class="moz-signature" cols="72">--
Ing. Ivan Noris
Senior Identity Management Engineer
evolveum.com
___________________________________________
"Idem per idem - semper idem Vix."
</pre>
</body>
</html>