<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
Hi Florin,<br>
<br>
I guess that the error is caused by this:<br>
<br>
<div class="de1"> Property modification operation:</div>
<div class="de1"> auxiliaryObjectClass</div>
<div class="de2"> ADD: {...resource/instance-3}top,
{...resource/instance-3}person,
{...resource/instance-3}organizationalPerson</div>
OLD: {...resource/instance-3}ldapPublicKey,
{...resource/instance-3}inetUser,
{...resource/instance-3}shadowAccount,
{...resource/instance-3}posixAccount<br>
<br>
I guess that the problem is, that midpoint tries to add "top" object
class. Every LDAP object has to have "top" object class, so the
existing object surely has it. The LDAP spec also specifies, that if
the client tries to add a value which already exists in an attribute
the LDAP server should respond with an error.<br>
<br>
Probably the best fix would be to remove "top" from your auxiliary
object class definitions. I mean this:<br>
<br>
<auxiliaryObjectClass>ri:top</auxiliaryObjectClass><br>
<br>
Firstly, "top" is a structural object class, not auxiliary.
Secondly, you usually does not need to manage the "top" object class
at all. Most LDAP servers will be OK if you specify just the most
concrete object class in the object class hierarchy and the server
will automatically add the superclasses. Please see check the LDAP
schema and leave only the auxiliary object classes in the
<auxiliaryObjectClass> configuration property.<br>
<br>
There are also alternative solutions by using permissive modify
control in LDAP or by telling midpoint to explicitly filter out the
duplicate values. Let me know if the fix with the "top" object class
does not work for you (yet it should work) and I will provide more
details about these methods.<br>
<br>
<pre class="moz-signature" cols="72">--
Radovan Semancik
Software Architect
evolveum.com
</pre>
<br>
<br>
<br>
<div class="moz-cite-prefix">On 06/10/2016 11:24 PM, Florin.
Stingaciu wrote:<br>
</div>
<blockquote
cite="mid:CAMQHPY3Nxw56wPqvSVpAPE9XECZjacXTwnxUavsjBkv1Dmkz2Q@mail.gmail.com"
type="cite">
<div dir="ltr">Hello,
<div><br>
</div>
<div>So I'm attempting to upgrade from 3.3.1 to the latest
build. Before starting the tomcat server with the latest
built, I applied this patch to the DB server (<a
moz-do-not-send="true" href="http://pastebin.com/jZJtbtUT"
target="_blank"><a class="moz-txt-link-freetext" href="http://pastebin.com/jZJtbtUT">http://pastebin.com/jZJtbtUT</a></a>). <br>
</div>
<div><br>
</div>
<div>Everything comes up fine, but when I try to unassign a role
I get an error. Here's all the relevant configuration, as well
as the error with the log level set to trace for the loggers
you requested. <br>
<br>
<ul>
<li>Connector Schema Handling section (<a
moz-do-not-send="true"
href="http://pastebin.com/j4UWFrBU" target="_blank"><a class="moz-txt-link-freetext" href="http://pastebin.com/j4UWFrBU">http://pastebin.com/j4UWFrBU</a></a>).
In here there are the following </li>
<ul>
<li>Default account -- used for real People </li>
<li>Service account -- used for service accounts</li>
<li>User Group Possix Entitlement -- used for user groups
that are posix groups </li>
<li>User Group Group of Names Entitlement -- used for user
groups that are group of names groups</li>
<li>Service Groups Entitlement -- used for service groups </li>
<li>Openstack Domains/Groups Entitlement -- used for
Openstack groups </li>
</ul>
<li>This is the metarole assigned to the role I'm trying to
unassign from the user (<a moz-do-not-send="true"
href="http://pastebin.com/fhcXnDXE" target="_blank">http://pastebin.com/fhcXnDXE</a>) </li>
<ul>
<li><br>
</li>
<li>the first twos inducements are of order one and
creates two LDAP groups, one posix and one group of
names</li>
<li>the second inducement is an order two inducement that
create a 'default' account if the employee type is equal
to 'user' and associates the user with the two created
groups</li>
<li>the third inducement is an order two inducement that
create a 'service' account if the employee type is equal
to 'service' and associates the user with the two
created groups</li>
<li>the fourth and fifth are both second order inducements
that generate a gid and uid for the user </li>
</ul>
</ul>
</div>
<div><br>
</div>
<div>So I couldn't actually send you the TRACE level logs as
there's a lot of information in those logs, I'm not permitted
to divulge on a mailing list. Plus they were crazy huge.
However, the DEBUG level seem fine: <a moz-do-not-send="true"
href="http://pastebin.com/UXMDpsDr">http://pastebin.com/UXMDpsDr</a></div>
<div><br>
</div>
<div>You can see from the logs that from some reason, when I
unassign the user from the role, it tries to modify the user
and add a bunch of auxiliary object classes that should've
been already created. </div>
<div><br>
</div>
<div>So I just checked the Shadow object for my user account and
there's only the following object classes:<br>
<br>
<div>
<objectClass>ri:inetOrgPerson</objectClass></div>
<div>
<auxiliaryObjectClass>ri:ldapPublicKey</auxiliaryObjectClass></div>
<div>
<auxiliaryObjectClass>ri:inetUser</auxiliaryObjectClass></div>
<div>
<auxiliaryObjectClass>ri:shadowAccount</auxiliaryObjectClass></div>
<div>
<auxiliaryObjectClass>ri:posixAccount</auxiliaryObjectClass></div>
</div>
<div><br>
</div>
<div>when there should've been all of the following:<br>
<br>
<div>
<objectClass>ri:inetOrgPerson</objectClass></div>
<div>
<auxiliaryObjectClass>ri:ldapPublicKey</auxiliaryObjectClass></div>
<div>
<auxiliaryObjectClass>ri:inetUser</auxiliaryObjectClass></div>
<div>
<auxiliaryObjectClass>ri:organizationalPerson</auxiliaryObjectClass></div>
<div>
<auxiliaryObjectClass>ri:person</auxiliaryObjectClass></div>
<div>
<auxiliaryObjectClass>ri:posixAccount</auxiliaryObjectClass></div>
<div>
<auxiliaryObjectClass>ri:shadowAccount</auxiliaryObjectClass></div>
<div>
<auxiliaryObjectClass>ri:top</auxiliaryObjectClass></div>
</div>
<div><br>
</div>
<div>So I went back and started double checking all the shadows,
from before and all of them only have those five auxiliary
object classes. However, on my LDAP, the account has the full
set of object classes:<br>
<br>
<div>objectClass: inetOrgPerson</div>
<div>objectClass: person</div>
<div>objectClass: ldapPublicKey</div>
<div>objectClass: inetUser</div>
<div>objectClass: shadowAccount</div>
<div>objectClass: organizationalPerson</div>
<div>objectClass: posixAccount</div>
<div>objectClass: top</div>
</div>
<div><br>
</div>
<div>Meaning that the previous version of midpoint I was using
did not store more than those five auxiliary classes. I just
created a brand new user in this version of Midpoint and all
of the classes were stored in the shadow without any issues.</div>
<div><br>
</div>
<div>I will be reverting back to the previous version for now,
as I can't use this version for now. Any ideas on how to
resolve this going forward would be great. Even if it's a
hacky solution such as a delta change for shadow objects that
adds the extra aux classes for every shadow that's on that
resource. </div>
<div><br>
</div>
<div>Thanks, </div>
<div>-F </div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Wed, Jun 8, 2016 at 1:45 PM, Pavol
Mederly <span dir="ltr"><<a moz-do-not-send="true"
href="mailto:mederly@evolveum.com" target="_blank">mederly@evolveum.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0px 0px 0px
0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
<p>Hello Florin,</p>
<p>I haven't experienced such an error message. It can
be caused by a midPoint fault or by a problem in your
particular configuration.</p>
<p>You write that you get this error with today's and
yesterday's build. Do you think it worked well before?
Or you didn't try at that time?</p>
<p>Without any other clues, to complete diagnose your
problem, it would be necessary to see your
configuration (resource config, and all relevant
roles), and the logs. As for the latter, it is best to
set model + provisioning to TRACE (with specific
logging for Clockwork and Projector either removed, or
set to TRACE as well). <br>
</p>
<p>But maybe somebody else would have a better idea;
unfortunately, midnight is approaching here in Europe,
so probably only tomorrow.<br>
</p>
<p>Best regards,</p>
<p>Pavol<br>
</p>
<br>
<div>On 08.06.2016 20:58, Florin. Stingaciu wrote:<br>
</div>
<blockquote type="cite">
<div dir="ltr">Hello again,
<div><br>
</div>
<div>I updated to the latest version however, now
I'm experiencing problems when trying to unassign
a role from a user. It fails with the following
stack trace: <br>
<br>
<br>
<div>2016-06-08 18:51:09,702 [] [Thread-31] ERROR
(com.evolveum.midpoint.provisioning.ucf.impl.IcfUtil):
ICF Exception
org.identityconnectors.framework.common.exceptions.InvalidAttributeValueException
in
connector:c230c871-6f5b-4525-abee-d2905569b8df(ICF
com.evolveum.polygon.connector.ldap.LdapConnector
v1.4.3.0-SNAPSHOT): <a moz-do-not-send="true">resource:a0741b12-c96d-491d-8213-ecad84ab490e(OpenLDAP</a>
Accounts Schema) while adding attribute values
to object identified by ICF UID
'uid=florin_stingaciu,ou=people,dc=mgmt,dc=symcpe,dc=net':
Error modifying LDAP entry
uid=florin_stingaciu,ou=people,dc=mgmt,dc=symcpe,dc=net:
[add:objectClass: top</div>
<div>objectClass: person</div>
<div>objectClass: organizationalPerson,]:
attributeOrValueExists: (20)</div>
<div>org.identityconnectors.framework.common.exceptions.InvalidAttributeValueException:
Error modifying LDAP entry
uid=florin_stingaciu,ou=people,dc=mgmt,dc=symcpe,dc=net:
[add:objectClass: top</div>
<div>objectClass: person</div>
<div>objectClass: organizationalPerson,]:
attributeOrValueExists: (20)</div>
<div> at
com.evolveum.polygon.connector.ldap.LdapUtil.processLdapResult(LdapUtil.java:440)
~[connector-ldap-1.4.3.0-SNAPSHOT.jar:na]</div>
<div> at
com.evolveum.polygon.connector.ldap.AbstractLdapConnector.processModifyResult(AbstractLdapConnector.java:923)
~[connector-ldap-1.4.3.0-SNAPSHOT.jar:na]</div>
<div> at
com.evolveum.polygon.connector.ldap.AbstractLdapConnector.modify(AbstractLdapConnector.java:914)
~[connector-ldap-1.4.3.0-SNAPSHOT.jar:na]</div>
<div> at
com.evolveum.polygon.connector.ldap.AbstractLdapConnector.ldapUpdate(AbstractLdapConnector.java:864)
~[connector-ldap-1.4.3.0-SNAPSHOT.jar:na]</div>
<div> at
com.evolveum.polygon.connector.ldap.AbstractLdapConnector.addAttributeValues(AbstractLdapConnector.java:804)
~[connector-ldap-1.4.3.0-SNAPSHOT.jar:na]</div>
<div> at
org.identityconnectors.framework.impl.api.local.operations.UpdateImpl.addAttributeValues(UpdateImpl.java:129)
~[connector-framework-internal-1.4.3.0-SNAPSHOT.jar:na]</div>
<div> at
sun.reflect.NativeMethodAccessorImpl.invoke0(Native
Method) ~[na:1.7.0_101]</div>
<div> at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
~[na:1.7.0_101]</div>
<div> at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
~[na:1.7.0_101]</div>
<div> at
java.lang.reflect.Method.invoke(Method.java:606)
~[na:1.7.0_101]</div>
<div> at
org.identityconnectors.framework.impl.api.local.operations.ConnectorAPIOperationRunnerProxy.invoke(ConnectorAPIOperationRunnerProxy.java:98)
~[connector-framework-internal-1.4.3.0-SNAPSHOT.jar:na]</div>
<div> at
com.sun.proxy.$Proxy171.addAttributeValues(Unknown
Source) ~[na:na]</div>
<div> at
sun.reflect.NativeMethodAccessorImpl.invoke0(Native
Method) ~[na:1.7.0_101]</div>
<div> at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
~[na:1.7.0_101]</div>
<div> at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
~[na:1.7.0_101]</div>
<div> at
java.lang.reflect.Method.invoke(Method.java:606)
~[na:1.7.0_101]</div>
<div> at
org.identityconnectors.framework.impl.api.local.operations.ThreadClassLoaderManagerProxy.invoke(ThreadClassLoaderManagerProxy.java:96)
~[connector-framework-internal-1.4.3.0-SNAPSHOT.jar:na]</div>
<div> at
com.sun.proxy.$Proxy171.addAttributeValues(Unknown
Source) ~[na:na]</div>
<div> at
sun.reflect.NativeMethodAccessorImpl.invoke0(Native
Method) ~[na:1.7.0_101]</div>
<div> at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
~[na:1.7.0_101]</div>
<div> at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
~[na:1.7.0_101]</div>
<div> at
java.lang.reflect.Method.invoke(Method.java:606)
~[na:1.7.0_101]</div>
<div> at
org.identityconnectors.framework.impl.api.DelegatingTimeoutProxy.invoke(DelegatingTimeoutProxy.java:99)
~[connector-framework-internal-1.4.3.0-SNAPSHOT.jar:na]</div>
<div> at
com.sun.proxy.$Proxy171.addAttributeValues(Unknown
Source) ~[na:na]</div>
<div> at
sun.reflect.NativeMethodAccessorImpl.invoke0(Native
Method) ~[na:1.7.0_101]</div>
<div> at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
~[na:1.7.0_101]</div>
<div> at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
~[na:1.7.0_101]</div>
<div> at
java.lang.reflect.Method.invoke(Method.java:606)
~[na:1.7.0_101]</div>
<div> at
org.identityconnectors.framework.impl.api.LoggingProxy.invoke(LoggingProxy.java:83)
~[connector-framework-internal-1.4.3.0-SNAPSHOT.jar:na]</div>
<div> at
com.sun.proxy.$Proxy171.addAttributeValues(Unknown
Source) ~[na:na]</div>
<div> at
org.identityconnectors.framework.impl.api.AbstractConnectorFacade.addAttributeValues(AbstractConnectorFacade.java:199)
~[connector-framework-internal-1.4.3.0-SNAPSHOT.jar:na]</div>
<div> at
com.evolveum.midpoint.provisioning.ucf.impl.ConnectorInstanceIcfImpl.modifyObject(ConnectorInstanceIcfImpl.java:1791)
[provisioning-impl-3.4-SNAPSHOT.jar:na]</div>
<div> at
com.evolveum.midpoint.provisioning.ucf.impl.ConnectorInstanceIcfImpl.modifyObject(ConnectorInstanceIcfImpl.java:210)
[provisioning-impl-3.4-SNAPSHOT.jar:na]</div>
<div> at
com.evolveum.midpoint.provisioning.impl.ResourceObjectConverter.executeModify(ResourceObjectConverter.java:697)
[provisioning-impl-3.4-SNAPSHOT.jar:na]</div>
<div> at
com.evolveum.midpoint.provisioning.impl.ResourceObjectConverter.modifyResourceObject(ResourceObjectConverter.java:529)
[provisioning-impl-3.4-SNAPSHOT.jar:na]</div>
<div> at
com.evolveum.midpoint.provisioning.impl.ShadowCache.modifyShadow(ShadowCache.java:480)
[provisioning-impl-3.4-SNAPSHOT.jar:na]</div>
<div> at
com.evolveum.midpoint.provisioning.impl.ProvisioningServiceImpl.modifyObject(ProvisioningServiceImpl.java:763)
[provisioning-impl-3.4-SNAPSHOT.jar:na]</div>
<div> at
com.evolveum.midpoint.model.impl.lens.ChangeExecutor.modifyProvisioningObject(ChangeExecutor.java:1265)
[model-impl-3.4-SNAPSHOT.jar:na]</div>
<div> at
com.evolveum.midpoint.model.impl.lens.ChangeExecutor.executeModification(ChangeExecutor.java:1108)
[model-impl-3.4-SNAPSHOT.jar:na]</div>
<div> at
com.evolveum.midpoint.model.impl.lens.ChangeExecutor.executeDelta(ChangeExecutor.java:704)
[model-impl-3.4-SNAPSHOT.jar:na]</div>
<div> at
com.evolveum.midpoint.model.impl.lens.ChangeExecutor.executeChanges(ChangeExecutor.java:294)
[model-impl-3.4-SNAPSHOT.jar:na]</div>
<div> at
com.evolveum.midpoint.model.impl.lens.Clockwork.processSecondary(Clockwork.java:507)
[model-impl-3.4-SNAPSHOT.jar:na]</div>
<div> at
com.evolveum.midpoint.model.impl.lens.Clockwork.click(Clockwork.java:336)
[model-impl-3.4-SNAPSHOT.jar:na]</div>
<div> at
com.evolveum.midpoint.model.impl.lens.Clockwork.run(Clockwork.java:214)
[model-impl-3.4-SNAPSHOT.jar:na]</div>
<div> at
com.evolveum.midpoint.model.impl.controller.ModelController.executeChanges(ModelController.java:555)
[model-impl-3.4-SNAPSHOT.jar:na]</div>
<div> at
sun.reflect.NativeMethodAccessorImpl.invoke0(Native
Method) ~[na:1.7.0_101]</div>
<div> at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
~[na:1.7.0_101]</div>
<div> at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
~[na:1.7.0_101]</div>
<div> at
java.lang.reflect.Method.invoke(Method.java:606)
~[na:1.7.0_101]</div>
<div> at
org.apache.wicket.proxy.LazyInitProxyFactory$JdkHandler.invoke(LazyInitProxyFactory.java:507)
[wicket-ioc-7.1.0.jar:7.1.0]</div>
<div> at
com.sun.proxy.$Proxy146.executeChanges(Unknown
Source) [na:na]</div>
<div> at
com.evolveum.midpoint.web.component.progress.ProgressReporter$1.run(ProgressReporter.java:188)
[ProgressReporter$1.class:na]</div>
<div> at
java.lang.Thread.run(Thread.java:745)
[na:1.7.0_101]</div>
</div>
<div><br>
</div>
<div>I just double checked and this seems to happen
with both today's build and yesterday's build. It
seems as even though I'm unassigning the user from
a group it is trying to add an object class to the
user DN</div>
<div><br>
</div>
<div>Thanks, </div>
<div>-F </div>
<div><br>
</div>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Tue, Jun 7, 2016 at 1:44
PM, Pavol Mederly <span dir="ltr"><<a
moz-do-not-send="true"
href="mailto:mederly@evolveum.com"
target="_blank"><a class="moz-txt-link-abbreviated" href="mailto:mederly@evolveum.com">mederly@evolveum.com</a></a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0px
0px 0px
0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
<p>The problem with "Add members" was a
misconfiguration in my test environment.</p>
<p>So, working with role members should be
without problems; please let us know if not.</p>
<p>Best regards,</p>
<p>Pavol<br>
</p>
<div>
<div> <br>
<div>On 07.06.2016 22:36, Pavol Mederly
wrote:<br>
</div>
<blockquote type="cite">
<p>Hello Florin,</p>
<p>you are right. I was able to
reproduce it here. <br>
</p>
<p>I fixed that, please try the latest
master - v3.4devel-1803-g0f5c22f.</p>
<p>(Besides that, I noticed some
problems with "Add members" function,
so I'll continue testing it.)<br>
</p>
<p>Best regards,</p>
<p>Pavol<br>
</p>
<br>
<div>On 07.06.2016 20:54, Florin.
Stingaciu wrote:<br>
</div>
<blockquote type="cite">
<div dir="ltr">Hey Pavol,
<div><br>
</div>
<div>So I managed to update to the
latest version, applied to DB
patch, and also double checked
that adding and removing
inducements for roles works now.
However, when I try to recompute
all members (there's only one
member), I get the following error
stack:<br>
<br>
<div>2016-06-07 18:50:33,834 []
[midPointScheduler_Worker-8]
ERROR
(com.evolveum.midpoint.model.impl.util.AbstractSearchIterativeTaskHandler):
Recompute: Schema error while
creating a search filter: Failed
to convert query. Reason: No
definition for item
assignment/targetRef in
POD:{.../common/common-3}object
{.../common/common-3}ObjectType[1,1],RAM</div>
<div>com.evolveum.midpoint.util.exception.SchemaException:
Failed to convert query. Reason:
No definition for item
assignment/targetRef in
POD:{.../common/common-3}object
{.../common/common-3}ObjectType[1,1],RAM</div>
<div> at
com.evolveum.midpoint.prism.query.QueryJaxbConvertor.createObjectQueryInternal(QueryJaxbConvertor.java:134)
~[prism-3.4-SNAPSHOT.jar:na]</div>
<div> at
com.evolveum.midpoint.prism.query.QueryJaxbConvertor.createObjectQueryInternal(QueryJaxbConvertor.java:113)
~[prism-3.4-SNAPSHOT.jar:na]</div>
<div> at
com.evolveum.midpoint.prism.query.QueryJaxbConvertor.createObjectQuery(QueryJaxbConvertor.java:79)
~[prism-3.4-SNAPSHOT.jar:na]</div>
<div> at
com.evolveum.midpoint.model.impl.util.AbstractSearchIterativeTaskHandler.createQueryFromTask(AbstractSearchIterativeTaskHandler.java:451)
[model-impl-3.4-SNAPSHOT.jar:na]</div>
<div> at
com.evolveum.midpoint.model.impl.sync.RecomputeTaskHandler.createQuery(RecomputeTaskHandler.java:108)
~[model-impl-3.4-SNAPSHOT.jar:na]</div>
<div> at
com.evolveum.midpoint.model.impl.util.AbstractSearchIterativeTaskHandler.runInternal(AbstractSearchIterativeTaskHandler.java:187)
[model-impl-3.4-SNAPSHOT.jar:na]</div>
<div> at
com.evolveum.midpoint.model.impl.util.AbstractSearchIterativeTaskHandler.run(AbstractSearchIterativeTaskHandler.java:155)
[model-impl-3.4-SNAPSHOT.jar:na]</div>
<div> at
com.evolveum.midpoint.task.quartzimpl.execution.JobExecutor.executeHandler(JobExecutor.java:479)
[task-quartz-impl-3.4-SNAPSHOT.jar:na]</div>
<div> at
com.evolveum.midpoint.task.quartzimpl.execution.JobExecutor.executeSingleTask(JobExecutor.java:300)
[task-quartz-impl-3.4-SNAPSHOT.jar:na]</div>
<div> at
com.evolveum.midpoint.task.quartzimpl.execution.JobExecutor.execute(JobExecutor.java:164)
[task-quartz-impl-3.4-SNAPSHOT.jar:na]</div>
<div> at
org.quartz.core.JobRunShell.run(JobRunShell.java:213)
[quartz-2.1.3.jar:na]</div>
<div> at
org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:557)
[quartz-2.1.3.jar:na]</div>
<div>Caused by:
com.evolveum.midpoint.util.exception.SchemaException:
No definition for item
assignment/targetRef in
POD:{.../common/common-3}object
{.../common/common-3}ObjectType[1,1],RAM</div>
<div> at
com.evolveum.midpoint.prism.parser.QueryConvertor.parseRefFilter(QueryConvertor.java:423)
~[prism-3.4-SNAPSHOT.jar:na]</div>
<div> at
com.evolveum.midpoint.prism.parser.QueryConvertor.parseFilterInternal(QueryConvertor.java:178)
~[prism-3.4-SNAPSHOT.jar:na]</div>
<div> at
com.evolveum.midpoint.prism.parser.QueryConvertor.parseLogicalFilter(QueryConvertor.java:230)
~[prism-3.4-SNAPSHOT.jar:na]</div>
<div> at
com.evolveum.midpoint.prism.parser.QueryConvertor.parseAndFilter(QueryConvertor.java:209)
~[prism-3.4-SNAPSHOT.jar:na]</div>
<div> at
com.evolveum.midpoint.prism.parser.QueryConvertor.parseFilterInternal(QueryConvertor.java:188)
~[prism-3.4-SNAPSHOT.jar:na]</div>
<div> at
com.evolveum.midpoint.prism.parser.QueryConvertor.parseFilterInternal(QueryConvertor.java:151)
~[prism-3.4-SNAPSHOT.jar:na]</div>
<div> at
com.evolveum.midpoint.prism.parser.QueryConvertor.parseFilter(QueryConvertor.java:125)
~[prism-3.4-SNAPSHOT.jar:na]</div>
<div> at
com.evolveum.midpoint.prism.query.QueryJaxbConvertor.createObjectQueryInternal(QueryJaxbConvertor.java:124)
~[prism-3.4-SNAPSHOT.jar:na]</div>
<div> ... 11 common frames
omitted</div>
</div>
<div><br>
</div>
<div><br>
</div>
<div>Any help would be greatly
appreciated.</div>
<div><br>
</div>
<div>Thanks, </div>
<div>-F </div>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Thu, Jun
2, 2016 at 3:40 PM, Florin.
Stingaciu <span dir="ltr"><<a
moz-do-not-send="true"
href="mailto:fstingaciu@mirantis.com"
target="_blank"><a class="moz-txt-link-abbreviated" href="mailto:fstingaciu@mirantis.com">fstingaciu@mirantis.com</a></a>></span>
wrote:<br>
<blockquote class="gmail_quote"
style="margin:0px 0px 0px
0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div dir="ltr">Yup, I checked
and you can not add an
inducement either. Also I
believe some of the
associations listed under the
profile are wrong. I will
write up a new email for that
as well. <br>
<br>
Meanwhile I reverted back to
the original version. I will
keep an eye out on the
ticket.
<div><br>
</div>
<div>Have a good night! Thanks
for your prompt responses. <br>
<div><br>
</div>
<div>Thanks, </div>
<span><font color="#888888">
<div>-F </div>
</font></span></div>
</div>
<div>
<div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On
Thu, Jun 2, 2016 at 3:37
PM, Pavol Mederly <span
dir="ltr"><<a
moz-do-not-send="true"
href="mailto:mederly@evolveum.com" target="_blank"><a class="moz-txt-link-abbreviated" href="mailto:mederly@evolveum.com">mederly@evolveum.com</a></a>></span>
wrote:<br>
<blockquote
class="gmail_quote"
style="margin:0px 0px
0px
0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div bgcolor="#FFFFFF"
text="#000000">
<p>I think it is
similar to this
one: <a
moz-do-not-send="true"
href="https://jira.evolveum.com/browse/MID-3074" target="_blank"><a class="moz-txt-link-freetext" href="https://jira.evolveum.com/browse/MID-3074">https://jira.evolveum.com/browse/MID-3074</a></a>.
<br>
</p>
<p>And I can see
this wrong
behavior also in
my case. This is
unpleasant. <br>
</p>
<p>We'll fix it
soon, hopefully
tomorrow. (Now
it's after
midnight here... )<br>
</p>
<p>Best regards,</p>
<p>Pavol<br>
</p>
<div>
<div> <br>
<div>On
03.06.2016
0:27, Florin.
Stingaciu
wrote:<br>
</div>
<blockquote
type="cite">
<div dir="ltr">Hello
again,
<div><br>
</div>
<div>I managed
to get around
this issue by
actually
applying the
mysql-upgrade-3.3-3.4.sql
patch.
Everything
came back up
just fine,
however now
I'm running
into a strange
issue where I
can not remove
inducements
from a role. </div>
<div><br>
</div>
<div>For
example: <a
moz-do-not-send="true"
href="http://imgur.com/a/lWoKT" target="_blank"><a class="moz-txt-link-freetext" href="http://imgur.com/a/lWoKT">http://imgur.com/a/lWoKT</a></a><br>
<br>
The
inducements
stay there no
matter how
much I try to
remove them.
Is this a
known issue in
the current
master?</div>
<div><br>
</div>
<div>Thanks, </div>
<div>-F </div>
<div><br>
</div>
<div><br>
</div>
</div>
<div
class="gmail_extra"><br>
<div
class="gmail_quote">On
Thu, Jun 2,
2016 at 2:03
PM, Pavol
Mederly <span
dir="ltr"><<a
moz-do-not-send="true" href="mailto:mederly@evolveum.com"
target="_blank"><a class="moz-txt-link-abbreviated" href="mailto:mederly@evolveum.com">mederly@evolveum.com</a></a>></span>
wrote:<br>
<blockquote
class="gmail_quote"
style="margin:0px
0px 0px
0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div
bgcolor="#FFFFFF"
text="#000000">
<p>Hello
Florin,</p>
<p>recently we
changed the db
schema a bit
(because of <a
moz-do-not-send="true" href="https://jira.evolveum.com/browse/MID-3061"
target="_blank">MID-3061</a>).</p>
<p>So, please
apply the
corresponding
migration
script
(config\sql\midpoint\3.4\<DBNAME>\<DBNAME>-upgrade-3.4-SNAPSHOT-<b>NNN</b>.sql).
Which one - it
depends on how
old your
existing
master is.
This
particular
problem is
related to the
latest one
(numbered 6).</p>
<p>An
alternative is
to set hbm2ddl
parameter like
this (in
config.xml
file in
midpoint.home
directory):</p>
<p><configuration><br>
<midpoint><br>
<repository><br>
<hibernateHbm2ddl><b>update</b></hibernateHbm2ddl><br>
...</p>
<p>(but this
is recommended
only for
testing
purposes,
because some -
but only very
rare - changes
are not
correctly
applied by
hibernate
itself)</p>
<p>Best
regards,</p>
<p>Pavol<br>
</p>
<div>
<div> <br>
<div>On
02.06.2016
22:56, Florin.
Stingaciu
wrote:<br>
</div>
<blockquote
type="cite">
<div dir="ltr">Hello
again,
<div><br>
</div>
<div>I'm
having some
troubles when
rebuilding the
master. Here's
the
corresponding
stack trace: <a
moz-do-not-send="true" href="http://pastebin.com/TVUAKURb"
target="_blank"><a class="moz-txt-link-freetext" href="http://pastebin.com/TVUAKURb">http://pastebin.com/TVUAKURb</a></a><br>
<br>
Also, I'm
using SSO
under apache
with the
following
ctx-web-security.xml
file: <a
moz-do-not-send="true"
href="http://pastebin.com/rvs9cJDj" target="_blank"><a class="moz-txt-link-freetext" href="http://pastebin.com/rvs9cJDj">http://pastebin.com/rvs9cJDj</a></a><br>
<br>
Any ideas
would be
greatly
appreciated. </div>
<div><br>
</div>
<div>Thanks, </div>
<div>-F </div>
</div>
<div
class="gmail_extra"><br>
<div
class="gmail_quote">On
Thu, Jun 2,
2016 at 11:36
AM, Florin.
Stingaciu <span
dir="ltr"><<a
moz-do-not-send="true" href="mailto:fstingaciu@mirantis.com"
target="_blank"><a class="moz-txt-link-abbreviated" href="mailto:fstingaciu@mirantis.com">fstingaciu@mirantis.com</a></a>></span>
wrote:<br>
<blockquote
class="gmail_quote"
style="margin:0px
0px 0px
0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div dir="ltr">Thanks
Pavel! I'll
upgrade to the
latest and let
you know how
that works
out.
<div><br>
</div>
</div>
<div>
<div>
<div
class="gmail_extra"><br>
<div
class="gmail_quote">On
Wed, Jun 1,
2016 at 10:24
PM, Pavol
Mederly <span
dir="ltr"><<a
moz-do-not-send="true" href="mailto:mederly@evolveum.com"
target="_blank"><a class="moz-txt-link-abbreviated" href="mailto:mederly@evolveum.com">mederly@evolveum.com</a></a>></span>
wrote:<br>
<blockquote
class="gmail_quote"
style="margin:0px
0px 0px
0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div
bgcolor="#FFFFFF"
text="#000000">
<p>Hello
Florin,</p>
<p>If I
remember
correctly,
we've been
fixing this
problem in
master
(3.4-SNAPSHOT).
It should be
solved in that
branch.</p>
<p>(If not,
please drop a
jira issue
with details
how to
reproduce, and
we'll
certainly fix
that.)</p>
<p>Best
regards,</p>
<p>Pavol<br>
</p>
<div>
<div> <br>
<div>On
02.06.2016
1:28, Florin.
Stingaciu
wrote:<br>
</div>
</div>
</div>
<blockquote
type="cite">
<div>
<div>
<div dir="ltr">Hello,
<div><br>
</div>
<div>I'm
trying to
recompute all
members that
are assigned a
particuar
role. I tried
using the
"Recompute
All" (<a
moz-do-not-send="true"
href="http://i.imgur.com/xLXjLwd.png" target="_blank"><a class="moz-txt-link-freetext" href="http://i.imgur.com/xLXjLwd.png">http://i.imgur.com/xLXjLwd.png</a></a>)
button in the
"Members"
section of a
role. This
launches a
task that is
successful
however, it it
does not
process any
objects. </div>
<div><br>
</div>
<div>If I
manually
select the
members I want
and select
"Recompute
members"
everything
works just
fine. Any
ideas?</div>
<div><br>
</div>
<div>Thanks, </div>
<div>-F </div>
</div>
<br>
<fieldset></fieldset>
<br>
</div>
</div>
<pre>_______________________________________________
midPoint mailing list
<a moz-do-not-send="true" href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a>
<a moz-do-not-send="true" href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
</div>
<br>
_______________________________________________<br>
midPoint
mailing list<br>
<a
moz-do-not-send="true"
href="mailto:midPoint@lists.evolveum.com" target="_blank"><a class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a></a><br>
<a
moz-do-not-send="true"
href="http://lists.evolveum.com/mailman/listinfo/midpoint"
target="_blank"><a class="moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</a></a><br>
<br>
</blockquote>
</div>
<br>
</div>
</div>
</div>
</blockquote>
</div>
<br>
</div>
<br>
<fieldset></fieldset>
<br>
<pre>_______________________________________________
midPoint mailing list
<a moz-do-not-send="true" href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a>
<a moz-do-not-send="true" href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
</div>
</div>
</div>
<br>
_______________________________________________<br>
midPoint
mailing list<br>
<a
moz-do-not-send="true"
href="mailto:midPoint@lists.evolveum.com" target="_blank"><a class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a></a><br>
<a
moz-do-not-send="true"
href="http://lists.evolveum.com/mailman/listinfo/midpoint"
target="_blank"><a class="moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</a></a><br>
<br>
</blockquote>
</div>
<br>
</div>
<br>
<fieldset></fieldset>
<br>
<pre>_______________________________________________
midPoint mailing list
<a moz-do-not-send="true" href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a>
<a moz-do-not-send="true" href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
</div>
</div>
</div>
<br>
_______________________________________________<br>
midPoint mailing list<br>
<a
moz-do-not-send="true"
href="mailto:midPoint@lists.evolveum.com" target="_blank"><a class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a></a><br>
<a
moz-do-not-send="true"
href="http://lists.evolveum.com/mailman/listinfo/midpoint"
rel="noreferrer"
target="_blank"><a class="moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</a></a><br>
<br>
</blockquote>
</div>
<br>
</div>
</div>
</div>
</blockquote>
</div>
<br>
</div>
<br>
<fieldset></fieldset>
<br>
<pre>_______________________________________________
midPoint mailing list
<a moz-do-not-send="true" href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a>
<a moz-do-not-send="true" href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
<br>
<fieldset></fieldset>
<br>
<pre>_______________________________________________
midPoint mailing list
<a moz-do-not-send="true" href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a>
<a moz-do-not-send="true" href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
</div>
</div>
</div>
<br>
_______________________________________________<br>
midPoint mailing list<br>
<a moz-do-not-send="true"
href="mailto:midPoint@lists.evolveum.com"
target="_blank">midPoint@lists.evolveum.com</a><br>
<a moz-do-not-send="true"
href="http://lists.evolveum.com/mailman/listinfo/midpoint"
rel="noreferrer" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
<br>
</blockquote>
</div>
<br>
</div>
<br>
<fieldset></fieldset>
<br>
<pre>_______________________________________________
midPoint mailing list
<a moz-do-not-send="true" href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a>
<a moz-do-not-send="true" href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
</div>
<br>
_______________________________________________<br>
midPoint mailing list<br>
<a moz-do-not-send="true"
href="mailto:midPoint@lists.evolveum.com"
target="_blank">midPoint@lists.evolveum.com</a><br>
<a moz-do-not-send="true"
href="http://lists.evolveum.com/mailman/listinfo/midpoint"
rel="noreferrer" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
<br>
</blockquote>
</div>
<br>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
midPoint mailing list
<a class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>
<a class="moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
</body>
</html>