<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Hi Anton,<br>
<br>
one account can have only one shadow. The shadow contains
information about account "name" and identifier. In case of LDAP
this is DN and entryUUID/objectGUID.<br>
<br>
Theoretically it should not happen to have two or more shadows for
the same account. Not sure about import, but reconciliation should
get rid of such shadows.<br>
<br>
Ivan<br>
<br>
<div class="moz-cite-prefix">On 06/02/2016 08:01 AM, Ерошенко Антон
wrote:<br>
</div>
<blockquote
cite="mid:eef0f0a264d346518ea33e47a8c45e87@exch.sc.exsc.ru"
type="cite">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered
medium)">
<style>
<!--
@font-face
{font-family:"Cambria Math"}
@font-face
{font-family:Calibri}
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline}
a:visited, span.MsoHyperlinkFollowed
{color:#954F72;
text-decoration:underline}
.MsoChpDefault
{}
@page WordSection1
{margin:2.0cm 42.5pt 2.0cm 3.0cm}
div.WordSection1
{}
-->
</style>
<meta name="Generator" content="Microsoft Word 15 (filtered
medium)">
<style>
<!--
@font-face
{font-family:"Cambria Math"}
@font-face
{font-family:Calibri}
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline}
a:visited, span.MsoHyperlinkFollowed
{color:#954F72;
text-decoration:underline}
.MsoChpDefault
{}
@page WordSection1
{margin:2.0cm 42.5pt 2.0cm 3.0cm}
div.WordSection1
{}
-->
</style>
<div class="WordSection1">
<p class="MsoNormal"><span lang="EN-US">I figured out the
problem. There were two shadows of one account, that seems
to violates unique constraints. First shadow created during
import process that passed normally, second shadow created
during import process that failed for some reason. I delete
one shadow manually, so sync works now.</span></p>
<p class="MsoNormal"><span lang="EN-US">How many shadows can we
have for one account? How to avoid creation of multiple
shadows of one account?
</span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;
font-family:"Times New Roman",serif"> </span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;
font-family:"Times New Roman",serif"> </span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;
font-family:"Times New Roman",serif"> </span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;
font-family:"Times New Roman",serif"> </span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;
font-family:"Times New Roman",serif"> </span></p>
</div>
<div>
<div class="WordSection1">
<p class="MsoNormal"><span lang="EN-US">Hello!</span></p>
<p class="MsoNormal"><span lang="EN-US">I’m trying to import
accounts from AD resource. These accounts were already
imported (LINKED) from another resource configured with
same AD . So, users are the same, ADs are the same,
resources configurations only differ. I would like to get
midpoint user linked to two projections (accounts).</span></p>
<p class="MsoNormal"><span lang="EN-US">Midpoint sync process
set UNLINKED status for accounts, but then fails them and
shows ObjectAlreadyExistsException instead of link the
account to midpoint user.
</span></p>
<p class="MsoNormal"><span lang="EN-US">Does it mean that its
impossible to have two similar accounts for the same
midpoint user? Or something wrong?
</span></p>
<p class="MsoNormal"><span lang="EN-US"> </span></p>
<p class="MsoNormal"><span lang="EN-US">Resource config
<a class="moz-txt-link-freetext" href="http://pastebin.com/XX6KrcQB">http://pastebin.com/XX6KrcQB</a></span></p>
<p class="MsoNormal"><span lang="EN-US"> </span></p>
<p class="MsoNormal"><span lang="EN-US">Exception class
com.evolveum.midpoint.util.exception.SystemException
thrown by object change listener model synchronization
service:
com.evolveum.midpoint.util.exception.ObjectAlreadyExistsException:
Too many iterations (6) for account(ID
{.../resource/instance-3}objectGUID = [
2d42b6f0b3554a4cbe75fb9a8f0a1141 ], type 'default',
<a class="moz-txt-link-freetext" href="resource:ef2bc95b-76e0-48e2-86d6-3d4f02d3eaed(Active">resource:ef2bc95b-76e0-48e2-86d6-3d4f02d3eaed(Active</a>
Directory Advanced Sync 1)): cannot determine values that
satisfy constraints: Found more than one object with
attribute {.../resource/instance-3}dn = [
CN=Vilk,DC=igp,DC=local]</span></p>
<p class="MsoNormal"><span lang="EN-US">com.evolveum.midpoint.util.exception.SystemException:
com.evolveum.midpoint.util.exception.ObjectAlreadyExistsException:
Too many iterations (6) for account(ID
{.../resource/instance-3}objectGUID = [
2d42b6f0b3554a4cbe75fb9a8f0a1141 ], type 'default',
<a class="moz-txt-link-freetext" href="resource:ef2bc95b-76e0-48e2-86d6-3d4f02d3eaed(Active">resource:ef2bc95b-76e0-48e2-86d6-3d4f02d3eaed(Active</a>
Directory Advanced Sync 1)): cannot determine values that
satisfy constraints: Found more than one object with
attribute {.../resource/instance-3}dn = [
CN=Vilk,DC=igp,DC=local ]</span></p>
<p class="MsoNormal"><span lang="EN-US"> at
com.evolveum.midpoint.model.impl.sync.SynchronizationService.notifyChange_aroundBody0(SynchronizationService.java:298)
~[model-impl-3.3.1.jar:na]</span></p>
<p class="MsoNormal"><span lang="EN-US"> at
com.evolveum.midpoint.model.impl.sync.SynchronizationService$AjcClosure1.run(SynchronizationService.java:1)
~[model-impl-3.3.1.jar:na]</span></p>
<p class="MsoNormal"><span lang="EN-US"> </span></p>
<p class="MsoNormal"><span lang="EN-US">Thanks for any
suggestions.</span></p>
<p class="MsoNormal"><span lang="EN-US">Anton.</span></p>
<p class="MsoNormal"> </p>
<p class="MsoNormal"><span style="font-size:12.0pt;
font-family:"Times New Roman",serif"> </span></p>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
midPoint mailing list
<a class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>
<a class="moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
<pre class="moz-signature" cols="72">--
Ing. Ivan Noris
Senior Identity Management Engineer & IDM Architect
evolveum.com evolveum.com/blog/
___________________________________________________
"Semper ID(e)M Vix."
</pre>
</body>
</html>