<div dir="ltr">Hello, <div><br></div><div>So I'm attempting to upgrade from 3.3.1 to the latest build. Before starting the tomcat server with the latest built, I applied this patch to the DB server (<a href="http://pastebin.com/jZJtbtUT" target="_blank">http://pastebin.com/jZJtbtUT</a>). <br></div><div><br></div><div>Everything comes up fine, but when I try to unassign a role I get an error. Here's all the relevant configuration, as well as the error with the log level set to trace for the loggers you requested. <br><br><ul><li>Connector Schema Handling section (<a href="http://pastebin.com/j4UWFrBU" target="_blank">http://pastebin.com/j4UWFrBU</a>). In here there are the following </li><ul><li>Default account -- used for real People </li><li>Service account -- used for service accounts</li><li>User Group Possix Entitlement -- used for user groups that are posix groups </li><li>User Group Group of Names Entitlement -- used for user groups that are group of names groups</li><li>Service Groups Entitlement -- used for service groups </li><li>Openstack Domains/Groups Entitlement -- used for Openstack groups </li></ul><li>This is the metarole assigned to the role I'm trying to unassign from the user (<a href="http://pastebin.com/fhcXnDXE" target="_blank">http://pastebin.com/fhcXnDXE</a>) </li><ul><li></li><li>the first twos inducements are of order one and creates two LDAP groups, one posix and one group of names</li><li>the second inducement is an order two inducement that create a 'default' account if the employee type is equal to 'user' and associates the user with the two created groups</li><li>the third inducement is an order two inducement that create a 'service' account if the employee type is equal to 'service' and associates the user with the two created groups</li><li>the fourth and fifth are both second order inducements that generate a gid and uid for the user </li></ul></ul></div><div><br></div><div>So I couldn't actually send you the TRACE level logs as there's a lot of information in those logs, I'm not permitted to divulge on a mailing list. Plus they were crazy huge. However, the DEBUG level seem fine: <a href="http://pastebin.com/UXMDpsDr">http://pastebin.com/UXMDpsDr</a></div><div><br></div><div>You can see from the logs that from some reason, when I unassign the user from the role, it tries to modify the user and add a bunch of auxiliary object classes that should've been already created. </div><div><br></div><div>So I just checked the Shadow object for my user account and there's only the following object classes:<br><br><div> <objectClass>ri:inetOrgPerson</objectClass></div><div> <auxiliaryObjectClass>ri:ldapPublicKey</auxiliaryObjectClass></div><div> <auxiliaryObjectClass>ri:inetUser</auxiliaryObjectClass></div><div> <auxiliaryObjectClass>ri:shadowAccount</auxiliaryObjectClass></div><div> <auxiliaryObjectClass>ri:posixAccount</auxiliaryObjectClass></div></div><div><br></div><div>when there should've been all of the following:<br><br><div> <objectClass>ri:inetOrgPerson</objectClass></div><div> <auxiliaryObjectClass>ri:ldapPublicKey</auxiliaryObjectClass></div><div> <auxiliaryObjectClass>ri:inetUser</auxiliaryObjectClass></div><div> <auxiliaryObjectClass>ri:organizationalPerson</auxiliaryObjectClass></div><div> <auxiliaryObjectClass>ri:person</auxiliaryObjectClass></div><div> <auxiliaryObjectClass>ri:posixAccount</auxiliaryObjectClass></div><div> <auxiliaryObjectClass>ri:shadowAccount</auxiliaryObjectClass></div><div> <auxiliaryObjectClass>ri:top</auxiliaryObjectClass></div></div><div><br></div><div>So I went back and started double checking all the shadows, from before and all of them only have those five auxiliary object classes. However, on my LDAP, the account has the full set of object classes:<br><br><div>objectClass: inetOrgPerson</div><div>objectClass: person</div><div>objectClass: ldapPublicKey</div><div>objectClass: inetUser</div><div>objectClass: shadowAccount</div><div>objectClass: organizationalPerson</div><div>objectClass: posixAccount</div><div>objectClass: top</div></div><div><br></div><div>Meaning that the previous version of midpoint I was using did not store more than those five auxiliary classes. I just created a brand new user in this version of Midpoint and all of the classes were stored in the shadow without any issues.</div><div><br></div><div>I will be reverting back to the previous version for now, as I can't use this version for now. Any ideas on how to resolve this going forward would be great. Even if it's a hacky solution such as a delta change for shadow objects that adds the extra aux classes for every shadow that's on that resource. </div><div><br></div><div>Thanks, </div><div>-F </div><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Jun 8, 2016 at 1:45 PM, Pavol Mederly <span dir="ltr"><<a href="mailto:mederly@evolveum.com" target="_blank">mederly@evolveum.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
<p>Hello Florin,</p>
<p>I haven't experienced such an error message. It can be caused by
a midPoint fault or by a problem in your particular configuration.</p>
<p>You write that you get this error with today's and yesterday's
build. Do you think it worked well before? Or you didn't try at
that time?</p>
<p>Without any other clues, to complete diagnose your problem, it
would be necessary to see your configuration (resource config, and
all relevant roles), and the logs. As for the latter, it is best
to set model + provisioning to TRACE (with specific logging for
Clockwork and Projector either removed, or set to TRACE as well).
<br>
</p>
<p>But maybe somebody else would have a better idea; unfortunately,
midnight is approaching here in Europe, so probably only tomorrow.<br>
</p>
<p>Best regards,</p>
<p>Pavol<br>
</p>
<br>
<div>On 08.06.2016 20:58, Florin. Stingaciu
wrote:<br>
</div>
<blockquote type="cite">
<div dir="ltr">Hello again,
<div><br>
</div>
<div>I updated to the latest version however, now I'm
experiencing problems when trying to unassign a role from a
user. It fails with the following stack trace: <br>
<br>
<br>
<div>2016-06-08 18:51:09,702 [] [Thread-31] ERROR
(com.evolveum.midpoint.provisioning.ucf.impl.IcfUtil): ICF
Exception
org.identityconnectors.framework.common.exceptions.InvalidAttributeValueException
in connector:c230c871-6f5b-4525-abee-d2905569b8df(ICF
com.evolveum.polygon.connector.ldap.LdapConnector
v1.4.3.0-SNAPSHOT):
<a>resource:a0741b12-c96d-491d-8213-ecad84ab490e(OpenLDAP</a>
Accounts Schema) while adding attribute values to object
identified by ICF UID
'uid=florin_stingaciu,ou=people,dc=mgmt,dc=symcpe,dc=net':
Error modifying LDAP entry
uid=florin_stingaciu,ou=people,dc=mgmt,dc=symcpe,dc=net:
[add:objectClass: top</div>
<div>objectClass: person</div>
<div>objectClass: organizationalPerson,]:
attributeOrValueExists: (20)</div>
<div>org.identityconnectors.framework.common.exceptions.InvalidAttributeValueException:
Error modifying LDAP entry
uid=florin_stingaciu,ou=people,dc=mgmt,dc=symcpe,dc=net:
[add:objectClass: top</div>
<div>objectClass: person</div>
<div>objectClass: organizationalPerson,]:
attributeOrValueExists: (20)</div>
<div> at
com.evolveum.polygon.connector.ldap.LdapUtil.processLdapResult(LdapUtil.java:440)
~[connector-ldap-1.4.3.0-SNAPSHOT.jar:na]</div>
<div> at
com.evolveum.polygon.connector.ldap.AbstractLdapConnector.processModifyResult(AbstractLdapConnector.java:923)
~[connector-ldap-1.4.3.0-SNAPSHOT.jar:na]</div>
<div> at
com.evolveum.polygon.connector.ldap.AbstractLdapConnector.modify(AbstractLdapConnector.java:914)
~[connector-ldap-1.4.3.0-SNAPSHOT.jar:na]</div>
<div> at
com.evolveum.polygon.connector.ldap.AbstractLdapConnector.ldapUpdate(AbstractLdapConnector.java:864)
~[connector-ldap-1.4.3.0-SNAPSHOT.jar:na]</div>
<div> at
com.evolveum.polygon.connector.ldap.AbstractLdapConnector.addAttributeValues(AbstractLdapConnector.java:804)
~[connector-ldap-1.4.3.0-SNAPSHOT.jar:na]</div>
<div> at
org.identityconnectors.framework.impl.api.local.operations.UpdateImpl.addAttributeValues(UpdateImpl.java:129)
~[connector-framework-internal-1.4.3.0-SNAPSHOT.jar:na]</div>
<div> at
sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
~[na:1.7.0_101]</div>
<div> at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
~[na:1.7.0_101]</div>
<div> at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
~[na:1.7.0_101]</div>
<div> at
java.lang.reflect.Method.invoke(Method.java:606)
~[na:1.7.0_101]</div>
<div> at
org.identityconnectors.framework.impl.api.local.operations.ConnectorAPIOperationRunnerProxy.invoke(ConnectorAPIOperationRunnerProxy.java:98)
~[connector-framework-internal-1.4.3.0-SNAPSHOT.jar:na]</div>
<div> at
com.sun.proxy.$Proxy171.addAttributeValues(Unknown Source)
~[na:na]</div>
<div> at
sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
~[na:1.7.0_101]</div>
<div> at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
~[na:1.7.0_101]</div>
<div> at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
~[na:1.7.0_101]</div>
<div> at
java.lang.reflect.Method.invoke(Method.java:606)
~[na:1.7.0_101]</div>
<div> at
org.identityconnectors.framework.impl.api.local.operations.ThreadClassLoaderManagerProxy.invoke(ThreadClassLoaderManagerProxy.java:96)
~[connector-framework-internal-1.4.3.0-SNAPSHOT.jar:na]</div>
<div> at
com.sun.proxy.$Proxy171.addAttributeValues(Unknown Source)
~[na:na]</div>
<div> at
sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
~[na:1.7.0_101]</div>
<div> at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
~[na:1.7.0_101]</div>
<div> at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
~[na:1.7.0_101]</div>
<div> at
java.lang.reflect.Method.invoke(Method.java:606)
~[na:1.7.0_101]</div>
<div> at
org.identityconnectors.framework.impl.api.DelegatingTimeoutProxy.invoke(DelegatingTimeoutProxy.java:99)
~[connector-framework-internal-1.4.3.0-SNAPSHOT.jar:na]</div>
<div> at
com.sun.proxy.$Proxy171.addAttributeValues(Unknown Source)
~[na:na]</div>
<div> at
sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
~[na:1.7.0_101]</div>
<div> at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
~[na:1.7.0_101]</div>
<div> at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
~[na:1.7.0_101]</div>
<div> at
java.lang.reflect.Method.invoke(Method.java:606)
~[na:1.7.0_101]</div>
<div> at
org.identityconnectors.framework.impl.api.LoggingProxy.invoke(LoggingProxy.java:83)
~[connector-framework-internal-1.4.3.0-SNAPSHOT.jar:na]</div>
<div> at
com.sun.proxy.$Proxy171.addAttributeValues(Unknown Source)
~[na:na]</div>
<div> at
org.identityconnectors.framework.impl.api.AbstractConnectorFacade.addAttributeValues(AbstractConnectorFacade.java:199)
~[connector-framework-internal-1.4.3.0-SNAPSHOT.jar:na]</div>
<div> at
com.evolveum.midpoint.provisioning.ucf.impl.ConnectorInstanceIcfImpl.modifyObject(ConnectorInstanceIcfImpl.java:1791)
[provisioning-impl-3.4-SNAPSHOT.jar:na]</div>
<div> at
com.evolveum.midpoint.provisioning.ucf.impl.ConnectorInstanceIcfImpl.modifyObject(ConnectorInstanceIcfImpl.java:210)
[provisioning-impl-3.4-SNAPSHOT.jar:na]</div>
<div> at
com.evolveum.midpoint.provisioning.impl.ResourceObjectConverter.executeModify(ResourceObjectConverter.java:697)
[provisioning-impl-3.4-SNAPSHOT.jar:na]</div>
<div> at
com.evolveum.midpoint.provisioning.impl.ResourceObjectConverter.modifyResourceObject(ResourceObjectConverter.java:529)
[provisioning-impl-3.4-SNAPSHOT.jar:na]</div>
<div> at
com.evolveum.midpoint.provisioning.impl.ShadowCache.modifyShadow(ShadowCache.java:480)
[provisioning-impl-3.4-SNAPSHOT.jar:na]</div>
<div> at
com.evolveum.midpoint.provisioning.impl.ProvisioningServiceImpl.modifyObject(ProvisioningServiceImpl.java:763)
[provisioning-impl-3.4-SNAPSHOT.jar:na]</div>
<div> at
com.evolveum.midpoint.model.impl.lens.ChangeExecutor.modifyProvisioningObject(ChangeExecutor.java:1265)
[model-impl-3.4-SNAPSHOT.jar:na]</div>
<div> at
com.evolveum.midpoint.model.impl.lens.ChangeExecutor.executeModification(ChangeExecutor.java:1108)
[model-impl-3.4-SNAPSHOT.jar:na]</div>
<div> at
com.evolveum.midpoint.model.impl.lens.ChangeExecutor.executeDelta(ChangeExecutor.java:704)
[model-impl-3.4-SNAPSHOT.jar:na]</div>
<div> at
com.evolveum.midpoint.model.impl.lens.ChangeExecutor.executeChanges(ChangeExecutor.java:294)
[model-impl-3.4-SNAPSHOT.jar:na]</div>
<div> at
com.evolveum.midpoint.model.impl.lens.Clockwork.processSecondary(Clockwork.java:507)
[model-impl-3.4-SNAPSHOT.jar:na]</div>
<div> at
com.evolveum.midpoint.model.impl.lens.Clockwork.click(Clockwork.java:336)
[model-impl-3.4-SNAPSHOT.jar:na]</div>
<div> at
com.evolveum.midpoint.model.impl.lens.Clockwork.run(Clockwork.java:214)
[model-impl-3.4-SNAPSHOT.jar:na]</div>
<div> at
com.evolveum.midpoint.model.impl.controller.ModelController.executeChanges(ModelController.java:555)
[model-impl-3.4-SNAPSHOT.jar:na]</div>
<div> at
sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
~[na:1.7.0_101]</div>
<div> at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
~[na:1.7.0_101]</div>
<div> at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
~[na:1.7.0_101]</div>
<div> at
java.lang.reflect.Method.invoke(Method.java:606)
~[na:1.7.0_101]</div>
<div> at
org.apache.wicket.proxy.LazyInitProxyFactory$JdkHandler.invoke(LazyInitProxyFactory.java:507)
[wicket-ioc-7.1.0.jar:7.1.0]</div>
<div> at com.sun.proxy.$Proxy146.executeChanges(Unknown
Source) [na:na]</div>
<div> at
com.evolveum.midpoint.web.component.progress.ProgressReporter$1.run(ProgressReporter.java:188)
[ProgressReporter$1.class:na]</div>
<div> at java.lang.Thread.run(Thread.java:745)
[na:1.7.0_101]</div>
</div>
<div><br>
</div>
<div>I just double checked and this seems to happen with both
today's build and yesterday's build. It seems as even though
I'm unassigning the user from a group it is trying to add an
object class to the user DN</div>
<div><br>
</div>
<div>Thanks, </div>
<div>-F </div>
<div><br>
</div>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Tue, Jun 7, 2016 at 1:44 PM, Pavol
Mederly <span dir="ltr"><<a href="mailto:mederly@evolveum.com" target="_blank">mederly@evolveum.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
<p>The problem with "Add members" was a misconfiguration
in my test environment.</p>
<p>So, working with role members should be without
problems; please let us know if not.</p>
<p>Best regards,</p>
<p>Pavol<br>
</p>
<div>
<div> <br>
<div>On 07.06.2016 22:36, Pavol Mederly wrote:<br>
</div>
<blockquote type="cite">
<p>Hello Florin,</p>
<p>you are right. I was able to reproduce it here. <br>
</p>
<p>I fixed that, please try the latest master -
v3.4devel-1803-g0f5c22f.</p>
<p>(Besides that, I noticed some problems with "Add
members" function, so I'll continue testing it.)<br>
</p>
<p>Best regards,</p>
<p>Pavol<br>
</p>
<br>
<div>On 07.06.2016 20:54, Florin. Stingaciu wrote:<br>
</div>
<blockquote type="cite">
<div dir="ltr">Hey Pavol,
<div><br>
</div>
<div>So I managed to update to the latest
version, applied to DB patch, and also double
checked that adding and removing inducements
for roles works now. However, when I try to
recompute all members (there's only one
member), I get the following error stack:<br>
<br>
<div>2016-06-07 18:50:33,834 []
[midPointScheduler_Worker-8] ERROR
(com.evolveum.midpoint.model.impl.util.AbstractSearchIterativeTaskHandler):
Recompute: Schema error while creating a
search filter: Failed to convert query.
Reason: No definition for item
assignment/targetRef in
POD:{.../common/common-3}object
{.../common/common-3}ObjectType[1,1],RAM</div>
<div>com.evolveum.midpoint.util.exception.SchemaException:
Failed to convert query. Reason: No
definition for item assignment/targetRef in
POD:{.../common/common-3}object
{.../common/common-3}ObjectType[1,1],RAM</div>
<div> at
com.evolveum.midpoint.prism.query.QueryJaxbConvertor.createObjectQueryInternal(QueryJaxbConvertor.java:134)
~[prism-3.4-SNAPSHOT.jar:na]</div>
<div> at
com.evolveum.midpoint.prism.query.QueryJaxbConvertor.createObjectQueryInternal(QueryJaxbConvertor.java:113)
~[prism-3.4-SNAPSHOT.jar:na]</div>
<div> at
com.evolveum.midpoint.prism.query.QueryJaxbConvertor.createObjectQuery(QueryJaxbConvertor.java:79)
~[prism-3.4-SNAPSHOT.jar:na]</div>
<div> at
com.evolveum.midpoint.model.impl.util.AbstractSearchIterativeTaskHandler.createQueryFromTask(AbstractSearchIterativeTaskHandler.java:451)
[model-impl-3.4-SNAPSHOT.jar:na]</div>
<div> at
com.evolveum.midpoint.model.impl.sync.RecomputeTaskHandler.createQuery(RecomputeTaskHandler.java:108)
~[model-impl-3.4-SNAPSHOT.jar:na]</div>
<div> at
com.evolveum.midpoint.model.impl.util.AbstractSearchIterativeTaskHandler.runInternal(AbstractSearchIterativeTaskHandler.java:187)
[model-impl-3.4-SNAPSHOT.jar:na]</div>
<div> at
com.evolveum.midpoint.model.impl.util.AbstractSearchIterativeTaskHandler.run(AbstractSearchIterativeTaskHandler.java:155)
[model-impl-3.4-SNAPSHOT.jar:na]</div>
<div> at
com.evolveum.midpoint.task.quartzimpl.execution.JobExecutor.executeHandler(JobExecutor.java:479)
[task-quartz-impl-3.4-SNAPSHOT.jar:na]</div>
<div> at
com.evolveum.midpoint.task.quartzimpl.execution.JobExecutor.executeSingleTask(JobExecutor.java:300)
[task-quartz-impl-3.4-SNAPSHOT.jar:na]</div>
<div> at
com.evolveum.midpoint.task.quartzimpl.execution.JobExecutor.execute(JobExecutor.java:164)
[task-quartz-impl-3.4-SNAPSHOT.jar:na]</div>
<div> at
org.quartz.core.JobRunShell.run(JobRunShell.java:213)
[quartz-2.1.3.jar:na]</div>
<div> at
org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:557)
[quartz-2.1.3.jar:na]</div>
<div>Caused by:
com.evolveum.midpoint.util.exception.SchemaException:
No definition for item assignment/targetRef
in POD:{.../common/common-3}object
{.../common/common-3}ObjectType[1,1],RAM</div>
<div> at
com.evolveum.midpoint.prism.parser.QueryConvertor.parseRefFilter(QueryConvertor.java:423)
~[prism-3.4-SNAPSHOT.jar:na]</div>
<div> at
com.evolveum.midpoint.prism.parser.QueryConvertor.parseFilterInternal(QueryConvertor.java:178)
~[prism-3.4-SNAPSHOT.jar:na]</div>
<div> at
com.evolveum.midpoint.prism.parser.QueryConvertor.parseLogicalFilter(QueryConvertor.java:230)
~[prism-3.4-SNAPSHOT.jar:na]</div>
<div> at
com.evolveum.midpoint.prism.parser.QueryConvertor.parseAndFilter(QueryConvertor.java:209)
~[prism-3.4-SNAPSHOT.jar:na]</div>
<div> at
com.evolveum.midpoint.prism.parser.QueryConvertor.parseFilterInternal(QueryConvertor.java:188)
~[prism-3.4-SNAPSHOT.jar:na]</div>
<div> at
com.evolveum.midpoint.prism.parser.QueryConvertor.parseFilterInternal(QueryConvertor.java:151)
~[prism-3.4-SNAPSHOT.jar:na]</div>
<div> at
com.evolveum.midpoint.prism.parser.QueryConvertor.parseFilter(QueryConvertor.java:125)
~[prism-3.4-SNAPSHOT.jar:na]</div>
<div> at
com.evolveum.midpoint.prism.query.QueryJaxbConvertor.createObjectQueryInternal(QueryJaxbConvertor.java:124)
~[prism-3.4-SNAPSHOT.jar:na]</div>
<div> ... 11 common frames omitted</div>
</div>
<div><br>
</div>
<div><br>
</div>
<div>Any help would be greatly appreciated.</div>
<div><br>
</div>
<div>Thanks, </div>
<div>-F </div>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Thu, Jun 2, 2016 at
3:40 PM, Florin. Stingaciu <span dir="ltr"><<a href="mailto:fstingaciu@mirantis.com" target="_blank"></a><a href="mailto:fstingaciu@mirantis.com" target="_blank">fstingaciu@mirantis.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div dir="ltr">Yup, I checked and you can
not add an inducement either. Also I
believe some of the associations listed
under the profile are wrong. I will write
up a new email for that as well. <br>
<br>
Meanwhile I reverted back to the original
version. I will keep an eye out on the
ticket.
<div><br>
</div>
<div>Have a good night! Thanks for your
prompt responses. <br>
<div><br>
</div>
<div>Thanks, </div>
<span><font color="#888888">
<div>-F </div>
</font></span></div>
</div>
<div>
<div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Thu, Jun
2, 2016 at 3:37 PM, Pavol Mederly <span dir="ltr"><<a href="mailto:mederly@evolveum.com" target="_blank"></a><a href="mailto:mederly@evolveum.com" target="_blank">mederly@evolveum.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
<p>I think it is similar to this
one: <a href="https://jira.evolveum.com/browse/MID-3074" target="_blank"></a><a href="https://jira.evolveum.com/browse/MID-3074" target="_blank">https://jira.evolveum.com/browse/MID-3074</a>.
<br>
</p>
<p>And I can see this wrong
behavior also in my case. This
is unpleasant. <br>
</p>
<p>We'll fix it soon, hopefully
tomorrow. (Now it's after
midnight here... )<br>
</p>
<p>Best regards,</p>
<p>Pavol<br>
</p>
<div>
<div> <br>
<div>On 03.06.2016 0:27,
Florin. Stingaciu wrote:<br>
</div>
<blockquote type="cite">
<div dir="ltr">Hello
again,
<div><br>
</div>
<div>I managed to get
around this issue by
actually applying the
mysql-upgrade-3.3-3.4.sql patch. Everything came back up just fine,
however now I'm
running into a strange
issue where I can not
remove inducements
from a role. </div>
<div><br>
</div>
<div>For example: <a href="http://imgur.com/a/lWoKT" target="_blank"></a><a href="http://imgur.com/a/lWoKT" target="_blank">http://imgur.com/a/lWoKT</a><br>
<br>
The inducements stay
there no matter how
much I try to remove
them. Is this a known
issue in the current
master?</div>
<div><br>
</div>
<div>Thanks, </div>
<div>-F </div>
<div><br>
</div>
<div><br>
</div>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On
Thu, Jun 2, 2016 at
2:03 PM, Pavol Mederly
<span dir="ltr"><<a href="mailto:mederly@evolveum.com" target="_blank"></a><a href="mailto:mederly@evolveum.com" target="_blank">mederly@evolveum.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
<p>Hello Florin,</p>
<p>recently we
changed the db
schema a bit
(because of <a href="https://jira.evolveum.com/browse/MID-3061" target="_blank">MID-3061</a>).</p>
<p>So, please
apply the
corresponding
migration script
(config\sql\midpoint\3.4\<DBNAME>\<DBNAME>-upgrade-3.4-SNAPSHOT-<b>NNN</b>.sql).
Which one - it
depends on how
old your
existing master
is. This
particular
problem is
related to the
latest one
(numbered 6).</p>
<p>An alternative
is to set
hbm2ddl
parameter like
this (in
config.xml file
in midpoint.home
directory):</p>
<p><configuration><br>
<midpoint><br>
<repository><br>
<hibernateHbm2ddl><b>update</b></hibernateHbm2ddl><br>
...</p>
<p>(but this is
recommended only
for testing
purposes,
because some -
but only very
rare - changes
are not
correctly
applied by
hibernate
itself)</p>
<p>Best regards,</p>
<p>Pavol<br>
</p>
<div>
<div> <br>
<div>On
02.06.2016
22:56, Florin.
Stingaciu
wrote:<br>
</div>
<blockquote type="cite">
<div dir="ltr">Hello
again,
<div><br>
</div>
<div>I'm
having some
troubles when
rebuilding the
master. Here's
the
corresponding
stack trace: <a href="http://pastebin.com/TVUAKURb" target="_blank"></a><a href="http://pastebin.com/TVUAKURb" target="_blank">http://pastebin.com/TVUAKURb</a><br>
<br>
Also, I'm
using SSO
under apache
with the
following
ctx-web-security.xml
file: <a href="http://pastebin.com/rvs9cJDj" target="_blank"></a><a href="http://pastebin.com/rvs9cJDj" target="_blank">http://pastebin.com/rvs9cJDj</a><br>
<br>
Any ideas
would be
greatly
appreciated. </div>
<div><br>
</div>
<div>Thanks, </div>
<div>-F </div>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On
Thu, Jun 2,
2016 at 11:36
AM, Florin.
Stingaciu <span dir="ltr"><<a href="mailto:fstingaciu@mirantis.com" target="_blank"></a><a href="mailto:fstingaciu@mirantis.com" target="_blank">fstingaciu@mirantis.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div dir="ltr">Thanks
Pavel! I'll
upgrade to the
latest and let
you know how
that works
out.
<div><br>
</div>
</div>
<div>
<div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On
Wed, Jun 1,
2016 at 10:24
PM, Pavol
Mederly <span dir="ltr"><<a href="mailto:mederly@evolveum.com" target="_blank"></a><a href="mailto:mederly@evolveum.com" target="_blank">mederly@evolveum.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
<p>Hello
Florin,</p>
<p>If I
remember
correctly,
we've been
fixing this
problem in
master
(3.4-SNAPSHOT).
It should be
solved in that
branch.</p>
<p>(If not,
please drop a
jira issue
with details
how to
reproduce, and
we'll
certainly fix
that.)</p>
<p>Best
regards,</p>
<p>Pavol<br>
</p>
<div>
<div> <br>
<div>On
02.06.2016
1:28, Florin.
Stingaciu
wrote:<br>
</div>
</div>
</div>
<blockquote type="cite">
<div>
<div>
<div dir="ltr">Hello,
<div><br>
</div>
<div>I'm
trying to
recompute all
members that
are assigned a
particuar
role. I tried
using the
"Recompute
All" (<a href="http://i.imgur.com/xLXjLwd.png" target="_blank"></a><a href="http://i.imgur.com/xLXjLwd.png" target="_blank">http://i.imgur.com/xLXjLwd.png</a>)
button in the
"Members"
section of a
role. This
launches a
task that is
successful
however, it it
does not
process any
objects. </div>
<div><br>
</div>
<div>If I
manually
select the
members I want
and select
"Recompute
members"
everything
works just
fine. Any
ideas?</div>
<div><br>
</div>
<div>Thanks, </div>
<div>-F </div>
</div>
<br>
<fieldset></fieldset>
<br>
</div>
</div>
<pre>_______________________________________________
midPoint mailing list
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
</div>
<br>
_______________________________________________<br>
midPoint
mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank"></a><a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank"></a><a href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
<br>
</blockquote>
</div>
<br>
</div>
</div>
</div>
</blockquote>
</div>
<br>
</div>
<br>
<fieldset></fieldset>
<br>
<pre>_______________________________________________
midPoint mailing list
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
</div>
</div>
</div>
<br>
_______________________________________________<br>
midPoint mailing
list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank"></a><a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank"></a><a href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
<br>
</blockquote>
</div>
<br>
</div>
<br>
<fieldset></fieldset>
<br>
<pre>_______________________________________________
midPoint mailing list
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
</div>
</div>
</div>
<br>
_______________________________________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
<br>
</blockquote>
</div>
<br>
</div>
</div>
</div>
</blockquote>
</div>
<br>
</div>
<br>
<fieldset></fieldset>
<br>
<pre>_______________________________________________
midPoint mailing list
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
<br>
<fieldset></fieldset>
<br>
<pre>_______________________________________________
midPoint mailing list
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
</div>
</div>
</div>
<br>
_______________________________________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
<br>
</blockquote>
</div>
<br>
</div>
<br>
<fieldset></fieldset>
<br>
<pre>_______________________________________________
midPoint mailing list
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
</div>
<br>_______________________________________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
<br></blockquote></div><br></div></div>