<html dir="ltr">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=koi8-r">
<style type="text/css" id="owaParaStyle"></style><style type="text/css"></style>
</head>
<body fpstyle="1" ocsi="0">
<div style="direction: ltr;font-family: Tahoma;color: #000000;font-size: 10pt;">Hi. We have problems assigning temporary AD membership to users.
<div>We use Exchange connector, and when permanent (no validFrom or validTo) assignment is assigned, everything is all right (we really see that AD user is a member of corresponding AD group).</div>
<div>But, assignments with validFrom in future make no effects - at the time when validFrom comes we see that user is not a member of corresponding AD group.</div>
<div><br>
</div>
<div>"Validity scanner" task is runnable every 15 seconds. Seems that it does some calculations, because we see progress "0/1", when "1/1".</div>
<div>In time of these calculations, logs are flood with errors:</div>
<div>...</div>
<div>
<div>2015-07-16 14:12:52,153 [UCF] [midPointScheduler_Worker-8] ERROR (com.evolveum.midpoint.provisioning.ucf.impl.IcfUtil): ICF Exception org.identityconnectors.framework.impl.api.remote.RemoteWrappedException in connector:77c1ca49-0c76-40d4-a633-ef3f4b2be30f(ICF
Org.IdentityConnectors.Exchange.ExchangeConnector v1.4.1.20283 @localhost ICF connector (port 8759)): resource:8790e490-326a-46e9-ba35-9e0c1dcbb41d(Exchange) while updating object identified by ICF UID '<GUID=f536a14e0ff0cc43be613eb07e5d53be>': Remote exception:
Cannot process argument transformation on parameter 'PrimarySmtpAddress'. Cannot convert null to type "Microsoft.Exchange.Data.SmtpAddress".</div>
<div><br>
</div>
<div>org.identityconnectors.framework.impl.api.remote.RemoteWrappedException: Remote exception: Cannot process argument transformation on parameter 'PrimarySmtpAddress'. Cannot convert null to type "Microsoft.Exchange.Data.SmtpAddress".</div>
<div><br>
</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at org.identityconnectors.framework.impl.serializer.CommonObjectHandlers$17.deserialize(CommonObjectHandlers.java:293) ~[CommonObjectHandlers$17.class:na]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at org.identityconnectors.framework.impl.serializer.binary.BinaryObjectDecoder$InternalDecoder.readObject(BinaryObjectDecoder.java:154) ~[BinaryObjectDecoder$InternalDecoder.class:na]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at org.identityconnectors.framework.impl.serializer.binary.BinaryObjectDecoder.readObject(BinaryObjectDecoder.java:293) ~[BinaryObjectDecoder.class:na]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at org.identityconnectors.framework.impl.serializer.binary.BinaryObjectDecoder.readObjectField(BinaryObjectDecoder.java:413) ~[BinaryObjectDecoder.class:na]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at org.identityconnectors.framework.impl.serializer.MessageHandlers$5.deserialize(MessageHandlers.java:139) ~[MessageHandlers$5.class:na]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at org.identityconnectors.framework.impl.serializer.binary.BinaryObjectDecoder$InternalDecoder.readObject(BinaryObjectDecoder.java:154) ~[BinaryObjectDecoder$InternalDecoder.class:na]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at org.identityconnectors.framework.impl.serializer.binary.BinaryObjectDecoder.readObject(BinaryObjectDecoder.java:293) ~[BinaryObjectDecoder.class:na]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at org.identityconnectors.framework.impl.api.remote.RemoteFrameworkConnection.readObject(RemoteFrameworkConnection.java:155) ~[RemoteFrameworkConnection.class:na]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at org.identityconnectors.framework.impl.api.remote.RemoteOperationInvocationHandler.invoke(RemoteOperationInvocationHandler.java:95) ~[RemoteOperationInvocationHandler.class:na]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at com.sun.proxy.$Proxy188.update(Unknown Source) ~[na:na]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) ~[na:1.7.0_79]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57) ~[na:1.7.0_79]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) ~[na:1.7.0_79]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at java.lang.reflect.Method.invoke(Method.java:606) ~[na:1.7.0_79]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at org.identityconnectors.framework.impl.api.DelegatingTimeoutProxy.invoke(DelegatingTimeoutProxy.java:99) ~[DelegatingTimeoutProxy.class:na]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at com.sun.proxy.$Proxy188.update(Unknown Source) ~[na:na]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) ~[na:1.7.0_79]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57) ~[na:1.7.0_79]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) ~[na:1.7.0_79]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at java.lang.reflect.Method.invoke(Method.java:606) ~[na:1.7.0_79]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at org.identityconnectors.framework.impl.api.LoggingProxy.invoke(LoggingProxy.java:83) ~[LoggingProxy.class:na]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at com.sun.proxy.$Proxy188.update(Unknown Source) ~[na:na]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at org.identityconnectors.framework.impl.api.AbstractConnectorFacade.update(AbstractConnectorFacade.java:187) ~[AbstractConnectorFacade.class:na]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at com.evolveum.midpoint.provisioning.ucf.impl.ConnectorInstanceIcfImpl.modifyObject_aroundBody14(ConnectorInstanceIcfImpl.java:1518) [ConnectorInstanceIcfImpl.class:na]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at com.evolveum.midpoint.provisioning.ucf.impl.ConnectorInstanceIcfImpl$AjcClosure15.run(ConnectorInstanceIcfImpl.java:1) [ConnectorInstanceIcfImpl$AjcClosure15.class:na]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at org.aspectj.runtime.reflect.JoinPointImpl.proceed(JoinPointImpl.java:149) [JoinPointImpl.class:na]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at com.evolveum.midpoint.util.aspect.MidpointAspect.wrapSubsystem(MidpointAspect.java:178) [MidpointAspect.class:na]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at com.evolveum.midpoint.util.aspect.MidpointAspect.ajc$inlineAccessMethod$com_evolveum_midpoint_util_aspect_MidpointAspect$com_evolveum_midpoint_util_aspect_MidpointAspect$wrapSubsystem(MidpointAspect.java:1)
[MidpointAspect.class:na]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at com.evolveum.midpoint.util.aspect.MidpointAspect.processUcfNdc(MidpointAspect.java:78) [MidpointAspect.class:na]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at com.evolveum.midpoint.provisioning.ucf.impl.ConnectorInstanceIcfImpl.modifyObject(ConnectorInstanceIcfImpl.java:1291) [ConnectorInstanceIcfImpl.class:na]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at com.evolveum.midpoint.provisioning.ucf.impl.ConnectorInstanceIcfImpl.modifyObject(ConnectorInstanceIcfImpl.java:1) [ConnectorInstanceIcfImpl.class:na]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at com.evolveum.midpoint.provisioning.impl.ResourceObjectConverter.executeModify(ResourceObjectConverter.java:579) [ResourceObjectConverter.class:na]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at com.evolveum.midpoint.provisioning.impl.ResourceObjectConverter.modifyResourceObject(ResourceObjectConverter.java:471) [ResourceObjectConverter.class:na]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at com.evolveum.midpoint.provisioning.impl.ShadowCache.modifyShadow(ShadowCache.java:438) [ShadowCache.class:na]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at com.evolveum.midpoint.provisioning.impl.ProvisioningServiceImpl.modifyObject_aroundBody10(ProvisioningServiceImpl.java:878) [ProvisioningServiceImpl.class:na]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at com.evolveum.midpoint.provisioning.impl.ProvisioningServiceImpl$AjcClosure11.run(ProvisioningServiceImpl.java:1) [ProvisioningServiceImpl$AjcClosure11.class:na]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at org.aspectj.runtime.reflect.JoinPointImpl.proceed(JoinPointImpl.java:149) [JoinPointImpl.class:na]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at com.evolveum.midpoint.util.aspect.MidpointAspect.wrapSubsystem(MidpointAspect.java:178) [MidpointAspect.class:na]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at com.evolveum.midpoint.util.aspect.MidpointAspect.ajc$inlineAccessMethod$com_evolveum_midpoint_util_aspect_MidpointAspect$com_evolveum_midpoint_util_aspect_MidpointAspect$wrapSubsystem(MidpointAspect.java:1)
[MidpointAspect.class:na]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at com.evolveum.midpoint.util.aspect.MidpointAspect.processProvisioningNdc(MidpointAspect.java:68) [MidpointAspect.class:na]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at com.evolveum.midpoint.provisioning.impl.ProvisioningServiceImpl.modifyObject(ProvisioningServiceImpl.java:839) [ProvisioningServiceImpl.class:na]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at com.evolveum.midpoint.model.impl.lens.ChangeExecutor.modifyProvisioningObject(ChangeExecutor.java:1166) [ChangeExecutor.class:na]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at com.evolveum.midpoint.model.impl.lens.ChangeExecutor.executeModification(ChangeExecutor.java:1032) [ChangeExecutor.class:na]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at com.evolveum.midpoint.model.impl.lens.ChangeExecutor.executeDelta(ChangeExecutor.java:630) [ChangeExecutor.class:na]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at com.evolveum.midpoint.model.impl.lens.ChangeExecutor.executeChanges(ChangeExecutor.java:282) [ChangeExecutor.class:na]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at com.evolveum.midpoint.model.impl.lens.Clockwork.processSecondary(Clockwork.java:439) [Clockwork.class:na]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at com.evolveum.midpoint.model.impl.lens.Clockwork.click(Clockwork.java:269) [Clockwork.class:na]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at com.evolveum.midpoint.model.impl.lens.Clockwork.run(Clockwork.java:191) [Clockwork.class:na]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at com.evolveum.midpoint.model.impl.sync.FocusValidityScannerTaskHandler.recomputeUser(FocusValidityScannerTaskHandler.java:169) [FocusValidityScannerTaskHandler.class:na]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at com.evolveum.midpoint.model.impl.sync.FocusValidityScannerTaskHandler.access$2(FocusValidityScannerTaskHandler.java:162) [FocusValidityScannerTaskHandler.class:na]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at com.evolveum.midpoint.model.impl.sync.FocusValidityScannerTaskHandler$1.handleObject(FocusValidityScannerTaskHandler.java:154) [FocusValidityScannerTaskHandler$1.class:na]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at com.evolveum.midpoint.model.impl.util.AbstractSearchIterativeResultHandler.processRequest(AbstractSearchIterativeResultHandler.java:274) [AbstractSearchIterativeResultHandler.class:na]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at com.evolveum.midpoint.model.impl.util.AbstractSearchIterativeResultHandler.handle(AbstractSearchIterativeResultHandler.java:146) [AbstractSearchIterativeResultHandler.class:na]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at com.evolveum.midpoint.repo.cache.RepositoryCache$1.handle(RepositoryCache.java:201) [RepositoryCache$1.class:na]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at com.evolveum.midpoint.repo.sql.SqlRepositoryServiceImpl.searchObjectsIterativeAttempt(SqlRepositoryServiceImpl.java:1813) [SqlRepositoryServiceImpl.class:na]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at com.evolveum.midpoint.repo.sql.SqlRepositoryServiceImpl.searchObjectsIterative_aroundBody26(SqlRepositoryServiceImpl.java:1784) [SqlRepositoryServiceImpl.class:na]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at com.evolveum.midpoint.repo.sql.SqlRepositoryServiceImpl$AjcClosure27.run(SqlRepositoryServiceImpl.java:1) [SqlRepositoryServiceImpl$AjcClosure27.class:na]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at org.aspectj.runtime.reflect.JoinPointImpl.proceed(JoinPointImpl.java:149) [JoinPointImpl.class:na]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at com.evolveum.midpoint.util.aspect.MidpointAspect.wrapSubsystem(MidpointAspect.java:178) [MidpointAspect.class:na]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at com.evolveum.midpoint.util.aspect.MidpointAspect.ajc$inlineAccessMethod$com_evolveum_midpoint_util_aspect_MidpointAspect$com_evolveum_midpoint_util_aspect_MidpointAspect$wrapSubsystem(MidpointAspect.java:1)
[MidpointAspect.class:na]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at com.evolveum.midpoint.util.aspect.MidpointAspect.processRepositoryNdc(MidpointAspect.java:58) [MidpointAspect.class:na]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at com.evolveum.midpoint.repo.sql.SqlRepositoryServiceImpl.searchObjectsIterative(SqlRepositoryServiceImpl.java:1745) [SqlRepositoryServiceImpl.class:na]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at com.evolveum.midpoint.repo.cache.RepositoryCache.searchObjectsIterative_aroundBody6(RepositoryCache.java:204) [RepositoryCache.class:na]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at com.evolveum.midpoint.repo.cache.RepositoryCache$AjcClosure7.run(RepositoryCache.java:1) [RepositoryCache$AjcClosure7.class:na]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at org.aspectj.runtime.reflect.JoinPointImpl.proceed(JoinPointImpl.java:149) [JoinPointImpl.class:na]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at com.evolveum.midpoint.util.aspect.MidpointAspect.wrapSubsystem(MidpointAspect.java:178) [MidpointAspect.class:na]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at com.evolveum.midpoint.util.aspect.MidpointAspect.ajc$inlineAccessMethod$com_evolveum_midpoint_util_aspect_MidpointAspect$com_evolveum_midpoint_util_aspect_MidpointAspect$wrapSubsystem(MidpointAspect.java:1)
[MidpointAspect.class:na]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at com.evolveum.midpoint.util.aspect.MidpointAspect.processRepositoryNdc(MidpointAspect.java:58) [MidpointAspect.class:na]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at com.evolveum.midpoint.repo.cache.RepositoryCache.searchObjectsIterative(RepositoryCache.java:192) [RepositoryCache.class:na]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at com.evolveum.midpoint.model.impl.ModelObjectResolver.searchIterative(ModelObjectResolver.java:224) [ModelObjectResolver.class:na]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at com.evolveum.midpoint.model.impl.util.AbstractSearchIterativeTaskHandler.run(AbstractSearchIterativeTaskHandler.java:162) [AbstractSearchIterativeTaskHandler.class:na]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at com.evolveum.midpoint.task.quartzimpl.execution.JobExecutor.executeHandler(JobExecutor.java:479) [JobExecutor.class:na]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at com.evolveum.midpoint.task.quartzimpl.execution.JobExecutor.executeRecurrentTask(JobExecutor.java:359) [JobExecutor.class:na]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at com.evolveum.midpoint.task.quartzimpl.execution.JobExecutor.execute(JobExecutor.java:162) [JobExecutor.class:na]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at org.quartz.core.JobRunShell.run(JobRunShell.java:213) [JobRunShell.class:na]</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:557) [SimpleThreadPool$WorkerThread.class:na]</div>
</div>
<div>...</div>
<div><br>
</div>
<div>Here is our user mapping:</div>
<div><br>
</div>
<div>
<div> <attribute></div>
<div> <c:ref>ri:PrimarySmtpAddress</c:ref></div>
<div> <displayName>áÄÒÅÓ × Exchange</displayName></div>
<div> <exclusiveStrong>false</exclusiveStrong></div>
<div> <tolerant>false</tolerant></div>
<div> <inbound></div>
<div> <name>áÄÒÅÓ × Exchange</name></div>
<div> <authoritative>true</authoritative></div>
<div> <exclusive>false</exclusive></div>
<div> <strength>normal</strength></div>
<div> <target></div>
<div> <c:path>$focus/emailAddress</c:path></div>
<div> </target></div>
<div> </inbound></div>
<div> </attribute></div>
</div>
<div><br>
</div>
<div>If there's no outbound mapping, connector should not try to write null PrimarySmtpAddress, am I right?</div>
<div><br>
</div>
<div>Our association configuration:</div>
<div><br>
</div>
<div>
<div> <association></div>
<div> <c:ref>group</c:ref></div>
<div> <displayName>AD Group Membership</displayName></div>
<div> <exclusiveStrong>false</exclusiveStrong></div>
<div> <tolerant>false</tolerant></div>
<div> <kind>entitlement</kind></div>
<div> <intent>default</intent></div>
<div> <direction>objectToSubject</direction></div>
<div> <associationAttribute>ri:member</associationAttribute></div>
<div> <valueAttribute>icfs:name</valueAttribute></div>
<div> <explicitReferentialIntegrity>false</explicitReferentialIntegrity></div>
<div> </association></div>
</div>
<div><br>
</div>
<div>Our metarole used for AD membership:</div>
<div><br>
</div>
<div>
<div><role xmlns="http://midpoint.evolveum.com/xml/ns/public/common/common-3"</div>
<div> xmlns:icfs="http://midpoint.evolveum.com/xml/ns/public/connector/icf-1/resource-schema-3"</div>
<div> xmlns:t="http://prism.evolveum.com/xml/ns/public/types-3"</div>
<div> xmlns:c="http://midpoint.evolveum.com/xml/ns/public/common/common-3"</div>
<div> xmlns:q="http://prism.evolveum.com/xml/ns/public/query-3"</div>
<div> xmlns:ri="http://midpoint.evolveum.com/xml/ns/public/resource/instance-3"</div>
<div> oid="e1b56b20-9d09-472a-9ede-8fa19b0c112b"</div>
<div> version="45"></div>
<div> <name>Metarole for account</name></div>
<div> <metadata></div>
<div> <createTimestamp>2015-05-06T17:38:28.517+03:00</createTimestamp></div>
<div> <creatorRef oid="00000000-0000-0000-0000-000000000002" type="c:UserType"><!-- administrator --></creatorRef></div>
<div> <createChannel>http://midpoint.evolveum.com/xml/ns/public/model/channels-3#objectImport</createChannel></div>
<div> </metadata></div>
<div> <inducement></div>
<div> <construction></div>
<div> <resourceRef oid="8790e490-326a-46e9-ba35-9e0c1dcbb41d" type="c:ResourceType"><!-- Exchange --></resourceRef></div>
<div> <kind>account</kind></div>
<div> <intent>default</intent></div>
<div> <association></div>
<div> <c:ref>group</c:ref></div>
<div> <outbound></div>
<div> <expression></div>
<div> <associationFromLink></div>
<div> <projectionDiscriminator></div>
<div> <kind>entitlement</kind></div>
<div> <intent>default</intent></div>
<div> </projectionDiscriminator></div>
<div> </associationFromLink></div>
<div> </expression></div>
<div> </outbound></div>
<div> </association></div>
<div> </construction></div>
<div> <order>2</order></div>
<div> </inducement></div>
<div></role></div>
</div>
<div><br>
</div>
<div><span style="font-size: 13.3333330154419px;">Regards, Oleg Getmansky</span></div>
<div><br>
</div>
<div>P.S.: Same errors occur when the time of validTo comes and user should be expelled from the corresponding AD group</div>
</div>
</body>
</html>