<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">Jason,<br>
<br>
silly me... I interchanged m_user with m_shadow. Sorry for that.
:(<br>
<br>
You say that name_orig in m_shadow looks fine. But below you show
that the name is "cn=Sam� V. Student" -> i.e. it does contain
diacritics. So I'm a bit confused. :) What is the content of the
name_orig in m_shadow / m_object?<br>
<br>
Also, the problematic can be the <icfs:name> value. It is in
the table m_object_ext_string in column stringvalue in a row with
owner_oid = Shadow OID and ename =
'<a class="moz-txt-link-freetext" href="http://midpoint.evolveum.com/xml/ns/public/connector/icf-1/resource-schema-3#name">http://midpoint.evolveum.com/xml/ns/public/connector/icf-1/resource-schema-3#name</a>'.
You could check that one as well.<br>
<br>
Before trying to update the database directly, I would try to fix
the name/icfs:name via debug pages (if you haven't already tried
that), and then delete it.<br>
<br>
If that's not possible (as I expect), I see two possible ways out:<br>
<br>
1) fix the name/icfs:name in the database and then delete the
shadow via repository objects functionality<br>
<br>
or<br>
<br>
2) directly delete the relevant records in m_shadow, m_object and
m_object_ext_string. Hopefully I haven't left out any relevant
table... (if yes, you'd probably get reference violation error).<br>
<br>
Of course, directly editing/modifying the database data can be a
bit dangerous. I'm not sure if anyone actually tried that in this
way.<br>
<br>
So, I'd prefer to be 100% sure in identifying the exact cause of
the problem before trying to remediate it. <br>
<br>
If you could send me (either here or in private) <br>
1) the value m_shadow.name_orig, m_object.name_orig,
m_object_ext_string.stringvalue for rows with corresponding
oid/owner_oid,<br>
2) the exact stack trace of the exception you get when trying to
delete the shadow via Repository Objects,<br>
I/we would be hopefully able to provide some hints.<br>
<br>
Overall, as you've asked, if you would not worry about this, it
should not be an immediate problem. However, I'm not quite sure
how would the DB react when it would encounter such a shadow e.g.
when doing a reconciliation or something like that. I'd expect
that you would (at least) get some exceptions in the log, or (in
the worst case) interruptions of tasks' executions. So I'd suggest
to solve that somehow :)<br>
<br>
Best regards,<br>
Pavol<br>
<br>
On 12. 11. 2015 20:25, Jason Everling wrote:<br>
</div>
<blockquote
cite="mid:CAFkZXY5e9=Yqwno7H=QxysZ_uXEaAJydc0nwt7Kz7caNJoJo2w@mail.gmail.com"
type="cite">
<div dir="ltr">
<div>Below is from debug and only place it exist, i changed the
last names and oid's on purpose</div>
<div><br>
</div>
<div><shadow xmlns="<a moz-do-not-send="true"
href="http://midpoint.evolveum.com/xml/ns/public/common/common-3">http://midpoint.evolveum.com/xml/ns/public/common/common-3</a>"</div>
<div> xmlns:icfs="<a moz-do-not-send="true"
href="http://midpoint.evolveum.com/xml/ns/public/connector/icf-1/resource-schema-3">http://midpoint.evolveum.com/xml/ns/public/connector/icf-1/resource-schema-3</a>"</div>
<div> xmlns:t="<a moz-do-not-send="true"
href="http://prism.evolveum.com/xml/ns/public/types-3">http://prism.evolveum.com/xml/ns/public/types-3</a>"</div>
<div> xmlns:c="<a moz-do-not-send="true"
href="http://midpoint.evolveum.com/xml/ns/public/common/common-3">http://midpoint.evolveum.com/xml/ns/public/common/common-3</a>"</div>
<div> xmlns:q="<a moz-do-not-send="true"
href="http://prism.evolveum.com/xml/ns/public/query-3">http://prism.evolveum.com/xml/ns/public/query-3</a>"</div>
<div> xmlns:ri="<a moz-do-not-send="true"
href="http://midpoint.evolveum.com/xml/ns/public/resource/instance-3">http://midpoint.evolveum.com/xml/ns/public/resource/instance-3</a>"</div>
<div> oid="00000000000000000000000000000000000"</div>
<div> version="0"></div>
<div> <name>cn=Sam� V.
Student,OU=Dept,OU=Students,DC=DOMAIN,DC=EDU</name></div>
<div> <metadata></div>
<div>
<createTimestamp>2015-11-12T08:21:54.668-06:00</createTimestamp></div>
<div> <creatorRef
oid="aafcf63e-4f7d-4d3a-97d6-6f6c79b89ef2"
type="c:UserType"><!-- jeverling
--></creatorRef></div>
<div> <createChannel><a moz-do-not-send="true"
href="http://midpoint.evolveum.com/xml/ns/public/provisioning/channels-3#liveSync">http://midpoint.evolveum.com/xml/ns/public/provisioning/channels-3#liveSync</a></createChannel></div>
<div> </metadata></div>
<div> <resourceRef
oid="10000000-2000-3000-4000-10000000ad01"
type="c:ResourceType"><!-- Active Directory
--></resourceRef></div>
<div>
<objectClass>ri:AccountObjectClass</objectClass></div>
<div> <kind>account</kind></div>
<div> <intent>default</intent></div>
<div> <iteration>0</iteration></div>
<div> <iterationToken/></div>
<div> <attributes></div>
<div>
<icfs:uid><GUID=12345678910111213456677></icfs:uid></div>
<div> <icfs:name>cn=sam� v.
student,ou=dept,ou=students,dc=domain,dc=edu</icfs:name></div>
<div> </attributes></div>
<div> <activation></div>
<div>
<administrativeStatus>enabled</administrativeStatus></div>
<div>
<enableTimestamp>2015-11-12T08:21:54.281-06:00</enableTimestamp></div>
<div> </activation></div>
<div></shadow></div>
</div>
<div class="gmail_extra"><br clear="all">
<div>
<div class="gmail_signature">
<div dir="ltr">JASON</div>
</div>
</div>
<br>
<div class="gmail_quote">On Thu, Nov 12, 2015 at 1:21 PM, Jason
Everling <span dir="ltr"><<a moz-do-not-send="true"
href="mailto:jeverling@bshp.edu" target="_blank">jeverling@bshp.edu</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr">I checked the m_user, does not exist,
probably because I deleted in gui,
<div><br>
</div>
<div>m_shadow does not have diacritic, name_norm and
name_orig look fine</div>
<div><br>
</div>
<div>m_object also does not have the diacritic either</div>
<div><br>
</div>
<div>I don't know where else to look, would it hurt
anything if I do not worry about?</div>
<div><br>
</div>
<div>JASON</div>
</div>
<div class="gmail_extra"><span class="HOEnZb"><font
color="#888888"><br clear="all">
<div>
<div>
<div dir="ltr">JASON</div>
</div>
</div>
</font></span>
<div>
<div class="h5">
<br>
<div class="gmail_quote">On Thu, Nov 12, 2015 at 1:03
PM, Jason Everling <span dir="ltr"><<a
moz-do-not-send="true"
href="mailto:jeverling@bshp.edu" target="_blank"><a class="moz-txt-link-abbreviated" href="mailto:jeverling@bshp.edu">jeverling@bshp.edu</a></a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr">Yeah it is in the shadow and the
only attributes are <name>,
<icfs:name>, <icfs:uid>
<div><br>
</div>
<div>After I update using sql statements I
should be able to delete it?</div>
<div><br>
</div>
<div>Thanks Ivan, ill see what I come up with</div>
<div><br>
</div>
<div>JASON</div>
</div>
<div class="gmail_extra"><span><font
color="#888888"><br clear="all">
<div>
<div>
<div dir="ltr">JASON</div>
</div>
</div>
</font></span>
<div>
<div>
<br>
<div class="gmail_quote">On Thu, Nov 12,
2015 at 12:22 PM, Pavol Mederly <span
dir="ltr"><<a moz-do-not-send="true"
href="mailto:mederly@evolveum.com"
target="_blank">mederly@evolveum.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote"
style="margin:0 0 0 .8ex;border-left:1px
#ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
<div>Ivo,<br>
<br>
the error actually comes from the
repository; even if it is invoked by
the provisioning (as it deals with
shadows).<br>
<br>
I'm afraid it would be necessary to
do some SQL magic :| Something like
(writing from my head, hope it would
work)<br>
<br>
update m_user set givenname_orig =
'x' where oid='y'<br>
<br>
(provided the problem is in given
name, not in name itself - in that
case it would be necessary to update
name_orig in m_user and m_object
tables as well.<span><font
color="#888888"><br>
<br>
Pavol<br>
<br>
</font></span></div>
<div>
<div>
<blockquote type="cite"> You can
use something like:<br>
<span></span><br>
basic.norm(basic.stringify(givenName))?.replaceAll(/\w+/,
{ it[0].toUpperCase() +
((it.size() > 1) ? it[1..-1]
: '') } )?.replace(' ', '')<br>
<div><br>
(this was not invented by me)<br>
<br>
Regarding the error - it's
strange. AFAIK debug pages are
not using provisioning, and
this error seems to come from
provisioning. I don't
understand this...<br>
<br>
Ivan<br>
<br>
On 11/12/2015 06:37 PM, Jason
Everling wrote:<br>
</div>
<blockquote type="cite">
<div dir="ltr">I had my
username geenration using
that format but I need to do
that also for the regular
givenName and familyName
attributes,
<div><br>
</div>
<div>Which function removes
the diacritics while
preserving the first
letter uppercase?</div>
<div><br>
</div>
<div>I was able to delete
the user from the GUI but
it got an error afterwards
while trying to remove the
shadow. The user is gone
in the gui users list but
in the debug pages shadow
I can still see the old
shadow. When trying to
delete from the debug side
is where i get there
error. I attached a
screenshot of the error</div>
<div><br>
</div>
<div>JASON</div>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On
Thu, Nov 12, 2015 at 11:14
AM, Ivan Noris <span
dir="ltr"><<a
moz-do-not-send="true"
href="mailto:ivan.noris@evolveum.com" target="_blank"><a class="moz-txt-link-abbreviated" href="mailto:ivan.noris@evolveum.com">ivan.noris@evolveum.com</a></a>></span>
wrote:<br>
<blockquote
class="gmail_quote"
style="margin:0 0 0
.8ex;border-left:1px
#ccc
solid;padding-left:1ex">
<div text="#000000"
bgcolor="#FFFFFF"> Hi
Jason,<br>
<br>
I always use
basic.norm because our
language has many
diacritic characters
unsuitable for most
systems...<br>
<br>
Example from my object
template for Users:<br>
(mapping, where
user/givenName and
user/familyName are
sources)<br>
<br>
tmpGivenName =
basic.norm(basic.stringify(givenName))?.tr('
', '.')<br>
tmpFamilyName =
basic.norm(basic.stringify(familyName))?.tr('
', '.')<br>
return tmpGivenName +
'.' + tmpFamilyName +
iterationToken<br>
<br>
(everything is
"normalized",
diacritic characters
replaced by ASCII,
spaces are then
replaced by dot
(because basic.norm
returns spaces as
well)<br>
<br>
Regarding deleting
shadow: how are you
trying to delete it
and what error you
get? Are you deleting
from "normal" GUI
(editing user) or in
Repository objects
GUI?<br>
<br>
Regards,<br>
Ivan
<div>
<div><br>
<br>
<div>On 11/12/2015
05:49 PM, Jason
Everling wrote:<br>
</div>
</div>
</div>
<blockquote
type="cite">
<div>
<div>
<div dir="ltr">Ohhh,
I need to use
the basic.
functions when
importing the
first and last
names so that
the diacritics
are removed,
<div><br>
</div>
<div>Now I
just need to
get the old
shadow deleted
from midpoint,
it doesn't let
me?</div>
<div><br>
</div>
<div>JASON</div>
</div>
<div
class="gmail_extra"><br>
<div
class="gmail_quote">On
Thu, Nov 12,
2015 at 10:17
AM, Jason
Everling <span
dir="ltr"><<a
moz-do-not-send="true" href="mailto:jeverling@bshp.edu" target="_blank"><a class="moz-txt-link-abbreviated" href="mailto:jeverling@bshp.edu">jeverling@bshp.edu</a></a>></span>
wrote:<br>
<blockquote
class="gmail_quote"
style="margin:0
0 0
.8ex;border-left:1px
#ccc
solid;padding-left:1ex">
<div dir="ltr">It
was because a
name had a ~
symbol above
the last
letter in
their first
name, I had to
manually
delete from AD
and fix in our
system.
<div><br>
</div>
<div>I cannot
delete the AD
shadow from
midpoint</div>
<div><br>
</div>
<div>Or how
can my user
creation
template
remove these
values, I
attached a
screenshot of
what it looks
like.</div>
<span><font
color="#888888">
<div><br>
</div>
<div><br
clear="all">
<div><br>
</div>
-- <br>
<div>
<div dir="ltr">JASON</div>
</div>
</div>
</font></span></div>
</blockquote>
</div>
<br>
<br
clear="all">
<div><br>
</div>
-- <br>
<div>
<div dir="ltr">JASON</div>
</div>
</div>
<br>
</div>
</div>
<font size="2"><br>
<br>
CONFIDENTIALITY
NOTICE:<br>
This e-mail
together with any
attachments is
proprietary and
confidential;
intended for only
the recipient(s)
named above and
may contain
information that
is privileged. You
should not retain,
copy or use this
e-mail or any
attachments for
any purpose, or
disclose all or
any part of the
contents to any
person. Any views
or opinions
expressed in this
e-mail are those
of the author and
do not represent
those of the
Baptist School of
Health
Professions. If
you have received
this e-mail in
error, or are not
the named
recipient(s), you
are hereby
notified that any
review,
dissemination,
distribution or
copying of this
communication is
prohibited by the
sender and to do
so might
constitute a
violation of the
Electronic
Communications
Privacy Act, 18
U.S.C. section
2510-2521. Please
immediately notify
the sender and
delete this e-mail
and any
attachments from
your computer. </font><br>
<br>
<fieldset></fieldset>
<br>
<pre>_______________________________________________
midPoint mailing list
<a moz-do-not-send="true" href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a>
<a moz-do-not-send="true" href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><span><font color="#888888">
</font></span></pre>
<span><font
color="#888888">
</font></span></blockquote>
<span><font
color="#888888"> <br>
<pre cols="72">--
Ing. Ivan Noris
Senior Identity Management Engineer & IDM Architect
<a moz-do-not-send="true" href="http://evolveum.com" target="_blank">evolveum.com</a> <a moz-do-not-send="true" href="http://evolveum.com/blog/" target="_blank">evolveum.com/blog/</a>
___________________________________________________
"Semper Id(e)M Vix."
</pre>
</font></span></div>
<br>
_______________________________________________<br>
midPoint mailing list<br>
<a
moz-do-not-send="true"
href="mailto:midPoint@lists.evolveum.com" target="_blank"><a class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a></a><br>
<a
moz-do-not-send="true"
href="http://lists.evolveum.com/mailman/listinfo/midpoint"
rel="noreferrer"
target="_blank"><a class="moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</a></a><br>
<br>
</blockquote>
</div>
<br>
<br clear="all">
<div><br>
</div>
-- <br>
<div>
<div dir="ltr">JASON</div>
</div>
</div>
<br>
<font size="2"><br>
<br>
CONFIDENTIALITY NOTICE:<br>
This e-mail together with
any attachments is
proprietary and
confidential; intended for
only the recipient(s) named
above and may contain
information that is
privileged. You should not
retain, copy or use this
e-mail or any attachments
for any purpose, or disclose
all or any part of the
contents to any person. Any
views or opinions expressed
in this e-mail are those of
the author and do not
represent those of the
Baptist School of Health
Professions. If you have
received this e-mail in
error, or are not the named
recipient(s), you are hereby
notified that any review,
dissemination, distribution
or copying of this
communication is prohibited
by the sender and to do so
might constitute a violation
of the Electronic
Communications Privacy Act,
18 U.S.C. section 2510-2521.
Please immediately notify
the sender and delete this
e-mail and any attachments
from your computer. </font><br>
<br>
<fieldset></fieldset>
<br>
<pre>_______________________________________________
midPoint mailing list
<a moz-do-not-send="true" href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a>
<a moz-do-not-send="true" href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
<pre cols="72">--
Ing. Ivan Noris
Senior Identity Management Engineer & IDM Architect
<a moz-do-not-send="true" href="http://evolveum.com" target="_blank">evolveum.com</a> <a moz-do-not-send="true" href="http://evolveum.com/blog/" target="_blank">evolveum.com/blog/</a>
___________________________________________________
"Semper Id(e)M Vix."
</pre>
<br>
<fieldset></fieldset>
<br>
<pre>_______________________________________________
midPoint mailing list
<a moz-do-not-send="true" href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a>
<a moz-do-not-send="true" href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
</div>
</div>
</div>
<br>
_______________________________________________<br>
midPoint mailing list<br>
<a moz-do-not-send="true"
href="mailto:midPoint@lists.evolveum.com"
target="_blank">midPoint@lists.evolveum.com</a><br>
<a moz-do-not-send="true"
href="http://lists.evolveum.com/mailman/listinfo/midpoint"
rel="noreferrer" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
<br>
</blockquote>
</div>
<br>
</div>
</div>
</div>
</blockquote>
</div>
<br>
</div>
</div>
</div>
</blockquote>
</div>
<br>
</div>
<br>
<font size="2"><br>
<br>
CONFIDENTIALITY NOTICE:<br>
This e-mail together with any attachments is proprietary and
confidential; intended for only the recipient(s) named above and
may contain information that is privileged. You should not
retain, copy or use this e-mail or any attachments for any
purpose, or disclose all or any part of the contents to any
person. Any views or opinions expressed in this e-mail are those
of the author and do not represent those of the Baptist School
of Health Professions. If you have received this e-mail in
error, or are not the named recipient(s), you are hereby
notified that any review, dissemination, distribution or copying
of this communication is prohibited by the sender and to do so
might constitute a violation of the Electronic Communications
Privacy Act, 18 U.S.C. section 2510-2521. Please immediately
notify the sender and delete this e-mail and any attachments
from your computer. </font><br>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
midPoint mailing list
<a class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>
<a class="moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
</body>
</html>