<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=koi8-r">
<meta content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style>
<!--
@font-face
{font-family:"Cambria Math"}
@font-face
{font-family:Calibri}
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline}
a:visited, span.MsoHyperlinkFollowed
{color:#954F72;
text-decoration:underline}
.MsoChpDefault
{}
@page WordSection1
{margin:2.0cm 42.5pt 2.0cm 3.0cm}
div.WordSection1
{}
-->
</style>
</head>
<body lang="RU" link="blue" vlink="#954F72">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style>
<!--
@font-face
{font-family:"Cambria Math"}
@font-face
{font-family:Calibri}
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline}
a:visited, span.MsoHyperlinkFollowed
{color:#954F72;
text-decoration:underline}
.MsoChpDefault
{}
@page WordSection1
{margin:2.0cm 42.5pt 2.0cm 3.0cm}
div.WordSection1
{}
-->
</style>
<div class="WordSection1">
<p class="MsoNormal"><span lang="EN-US">I figured out the problem. There were two shadows of one account, that seems to violates unique constraints. First shadow created during import process that passed normally, second shadow created during import process
that failed for some reason. I delete one shadow manually, so sync works now.</span></p>
<p class="MsoNormal"><span lang="EN-US">How many shadows can we have for one account? How to avoid creation of multiple shadows of one account?
</span></p>
<p class="MsoNormal"><span style="font-size:12.0pt; font-family:"Times New Roman",serif"> </span></p>
<p class="MsoNormal"><span style="font-size:12.0pt; font-family:"Times New Roman",serif"> </span></p>
<p class="MsoNormal"><span style="font-size:12.0pt; font-family:"Times New Roman",serif"> </span></p>
<p class="MsoNormal"><span style="font-size:12.0pt; font-family:"Times New Roman",serif"> </span></p>
<p class="MsoNormal"><span style="font-size:12.0pt; font-family:"Times New Roman",serif"> </span></p>
</div>
<div>
<div class="WordSection1">
<p class="MsoNormal"><span lang="EN-US">Hello!</span></p>
<p class="MsoNormal"><span lang="EN-US">I’m trying to import accounts from AD resource. These accounts were already imported (LINKED) from another resource configured with same AD . So, users are the same, ADs are the same, resources configurations only differ.
I would like to get midpoint user linked to two projections (accounts).</span></p>
<p class="MsoNormal"><span lang="EN-US">Midpoint sync process set UNLINKED status for accounts, but then fails them and shows ObjectAlreadyExistsException instead of link the account to midpoint user.
</span></p>
<p class="MsoNormal"><span lang="EN-US">Does it mean that its impossible to have two similar accounts for the same midpoint user? Or something wrong?
</span></p>
<p class="MsoNormal"><span lang="EN-US"> </span></p>
<p class="MsoNormal"><span lang="EN-US">Resource config http://pastebin.com/XX6KrcQB</span></p>
<p class="MsoNormal"><span lang="EN-US"> </span></p>
<p class="MsoNormal"><span lang="EN-US">Exception class com.evolveum.midpoint.util.exception.SystemException thrown by object change listener model synchronization service: com.evolveum.midpoint.util.exception.ObjectAlreadyExistsException: Too many iterations
(6) for account(ID {.../resource/instance-3}objectGUID = [ 2d42b6f0b3554a4cbe75fb9a8f0a1141 ], type 'default', resource:ef2bc95b-76e0-48e2-86d6-3d4f02d3eaed(Active Directory Advanced Sync 1)): cannot determine values that satisfy constraints: Found more than
one object with attribute {.../resource/instance-3}dn = [ CN=Vilk,DC=igp,DC=local]</span></p>
<p class="MsoNormal"><span lang="EN-US">com.evolveum.midpoint.util.exception.SystemException: com.evolveum.midpoint.util.exception.ObjectAlreadyExistsException: Too many iterations (6) for account(ID {.../resource/instance-3}objectGUID = [ 2d42b6f0b3554a4cbe75fb9a8f0a1141
], type 'default', resource:ef2bc95b-76e0-48e2-86d6-3d4f02d3eaed(Active Directory Advanced Sync 1)): cannot determine values that satisfy constraints: Found more than one object with attribute {.../resource/instance-3}dn = [ CN=Vilk,DC=igp,DC=local ]</span></p>
<p class="MsoNormal"><span lang="EN-US"> at com.evolveum.midpoint.model.impl.sync.SynchronizationService.notifyChange_aroundBody0(SynchronizationService.java:298) ~[model-impl-3.3.1.jar:na]</span></p>
<p class="MsoNormal"><span lang="EN-US"> at com.evolveum.midpoint.model.impl.sync.SynchronizationService$AjcClosure1.run(SynchronizationService.java:1) ~[model-impl-3.3.1.jar:na]</span></p>
<p class="MsoNormal"><span lang="EN-US"> </span></p>
<p class="MsoNormal"><span lang="EN-US">Thanks for any suggestions.</span></p>
<p class="MsoNormal"><span lang="EN-US">Anton.</span></p>
<p class="MsoNormal"> </p>
<p class="MsoNormal"><span style="font-size:12.0pt; font-family:"Times New Roman",serif"> </span></p>
</div>
</div>
</body>
</html>