<?xml version="1.0" encoding="utf-16"?><html><head>
<meta http-equiv="Content-Type" content="text/html;charset=utf-8" />
<style type="text/css"><!--blockquote.cite
{margin-left: 5px; margin-right: 0px; padding-left: 10px; padding-right: 0px; border-left-width: 1px; border-left-style: solid; border-left-color: rgb(204, 204, 204);}
blockquote.cite2
{margin-left: 5px; margin-right: 0px; padding-left: 10px; padding-right: 0px; border-left-width: 1px; border-left-style: solid; border-left-color: rgb(204, 204, 204); margin-top: 3px; padding-top: 0px;}
a img
{border: 0px;}
body
{font-family: Tahoma; font-size: 12pt;}
--></style></head>
<body><div>Hi,</div><div><br /></div><div>there is some interesting behavior: <span style="font-size: 12pt;">Attribute ri:description seems to be multivalued (see the schema section in AD resource definition), but attribute is single-valued.</span></div><div><br /></div><div><b>Workaround - use limitations on "ri:description" attribute in schema handling section:</b></div><div><br /></div><div> <attribute><br /> <c:ref>ri:description</c:ref><br /> <displayName>Description</displayName><br /><b> <limitations><br /> <maxOccurs>1</maxOccurs><br /> </limitations><br /></b> <outbound><br /></div><div> .......</div><div><br /></div><div><br /></div><div>Regards</div><div><br /></div><div><br /></div><div id="signature_old"><div style="FONT-SIZE: 12pt; FONT-FAMILY: Tahoma">
<table style="WHITE-SPACE: normal; WORD-SPACING: 0px; BORDER-COLLAPSE: collapse; TEXT-TRANSFORM: none; COLOR: rgb(0,0,0); FONT: medium 'Times New Roman'; WIDOWS: 1; LETTER-SPACING: normal; TEXT-INDENT: 0px; -webkit-text-stroke-width: 0px">
<tbody>
<tr>
<td style="FONT-SIZE: 11px; FONT-FAMILY: Arial, sans-serif; VERTICAL-ALIGN: bottom; COLOR: rgb(0,0,0)" colspan="2">
<p><span style="FONT-SIZE: 14px; FONT-WEIGHT: bold">Roman Pudil</span><br />solution architect<br /><br />gsm: [+420] 775 663 666<br />e-mail:<span class="Apple-converted-space"> </span><a href="mailto:roman.pudil@ami.cz">roman.pudil@ami.cz</a></p></td>
<td style="BORDER-RIGHT: rgb(204,204,204) 1px solid"> </td>
<td> </td>
<td style="FONT-SIZE: 11px; FONT-FAMILY: Arial, sans-serif; VERTICAL-ALIGN: bottom; COLOR: rgb(0,0,0)">
<p>AMI Praha a.s.<br />Pláničkova 11<br />162 00 Praha 6<br />tel./fax: [+420] 274 783 239<br />web:<span class="Apple-converted-space"> </span><a href="http://www.ami.cz">www.ami.cz</a></p></td>
<td style="BORDER-RIGHT: rgb(204,204,204) 1px solid"> </td>
<td> </td>
<td style="FONT-SIZE: 11px; FONT-FAMILY: Arial, sans-serif; COLOR: rgb(0,0,0)">
<p><img title="AMI Praha a.s." border="0" alt="" src="http://www.ami.cz/images/podpis/ami_logo.gif " /></p></td></tr>
<tr>
<td colspan="8"><br /><a href="http://www.ami.cz/reseni-a-sluzby/bezpecnost-dat/identity-management"><img border="0" alt="" src="http://www.ami.cz/images/podpis/AMI-podpis-IdM_1.png" /></a></td></tr>
<tr>
<td style="FONT-SIZE: 11px; FONT-FAMILY: Arial, sans-serif; COLOR: rgb(128,128,128)" colspan="8"><br />Textem tohoto e-mailu podepisující neslibuje uzavřít ani neuzavírá za společnost AMI Praha a.s.<br />jakoukoliv smlouvu. Každá smlouva, pokud bude uzavřena, musí mít výhradně písemnou formu.</td></tr></tbody></table></div></div><div><br /></div><div><br /></div><div><br /></div>
<div>------ Původní zpráva ------</div>
<div>Od: "Wojciech Staszewski" <<a href="mailto:wojciech.staszewski@diagnostyka.pl">wojciech.staszewski@diagnostyka.pl</a>></div>
<div>Komu: <a href="mailto:midpoint@lists.evolveum.com">midpoint@lists.evolveum.com</a></div>
<div>Odesláno: 21.12.2016 13:03:36</div>
<div>Předmět: Re: [midPoint] attributeOrValueExists ERROR LDAP</div><div><br /></div>
<div id="xd546521f558744f" class="plain"><blockquote cite="baff7d13-cf76-504f-3d1f-c58fb1874e80@diagnostyka.pl" type="cite" class="cite2">
<tt style="word-wrap:break-word"><div>I have the same issue with LDAP with attributes from some objectclasses (e.g. SambaSamAccount).</div>
<div>And when I'm using my own custom auxiliary objectclass (OC), Midpoint tries to add this objectclass to LDAP accounts which already have this OC and I got errors.</div>
<div>I temoprary removed these OC from schema and don't use attributes from them.</div>
<div> </div>
<div> </div>
<div>W dniu 21.12.2016 o 07:17, oleg okunev pisze:</div>
<blockquote type="cite" class="cite">
<div> Hello.</div>
<div> </div>
<div> Strange problem i get when trying to modify decription in user which have link to AD account</div>
<div> config of schema handling</div>
<div> </div>
<div> <attribute></div>
<div> <ref>ri:description</ref></div>
<div> <outbound></div>
<div> <source></div>
<div> <path>description</path></div>
<div> </source></div>
<div> </outbound></div>
<div> <inbound></div>
<div> <target></div>
<div> <path>description</path></div>
<div> </target></div>
<div> </inbound></div>
<div> </attribute></div>
<div> </div>
<div> </div>
<div> *Preview changes*</div>
<div> </div>
<div> </div>
<div> Modify User Archangel Gabriel (Gabriel)</div>
<div> </div>
<div> </div>
<div> Item Old value New value</div>
<div> Description New Desc New Desc NEW</div>
<div> </div>
<div> </div>
<div> </div>
<div> Secondary changes: 2 objects</div>
<div> </div>
<div> </div>
<div> </div>
<div> </div>
<div> Modify User Archangel Gabriel (Gabriel)</div>
<div> </div>
<div> </div>
<div> Item Old value New value</div>
<div> Description New Desc New Desc NEW</div>
<div> </div>
<div> </div>
<div> Modify Shadow CN=Archangel Gabriel,OU=Sky,OU=Earth,DC=abb-test,DC=akbars,DC=ru</div>
<div> </div>
<div> </div>
<div> Item Value</div>
<div> resourceRef Active Directory Medusa (LDAPS) v2</div>
<div> kind ACCOUNT</div>
<div> intent default</div>
<div> </div>
<div> </div>
<div> Modify attributes</div>
<div> </div>
<div> </div>
<div> Item Old value New value</div>
<div> description New Desc NEW</div>
<div> </div>
<div> </div>
<div> </div>
<div> GOT this ERROR</div>
<div> </div>
<div> Schema violation during processing shadow:</div>
<div> shadow: CN=Archangel Gabriel,OU=Sky,OU=Earth,DC=abb-test,DC=akbars,DC=ru (OID:92d4a278-8d4f-46a3-af88-56bdf8529a95):</div>
<div> Schema violation: Invalid attribute: org.identityconnectors.framework.common.exceptions.InvalidAttributeValueException(Error modifying LDAP entry CN=Archangel Gabriel,OU=Sky,OU=Earth,DC=abb-test,DC=akbars,DC=ru: [add:description: New Desc Second,]: attributeOrValueExists: 00002081: AtrErr: DSID-030F154F, #1:??0: 00002081: DSID-030F154F, problem 1006 (ATT_OR_VALUE_EXISTS), data 0, Att d (description)?? (20)):</div>
<div> </div>
<div> it looks like midpoint trying to add NEW attribute - i cant understand why not modify existing attribute value</div>
<div> </div>
<div> I know it must be simple but i trying to search and failed(((</div>
<div> i got 3 object classes : user group and OU</div>
<div> </div>
<div> and one more thing</div>
<div> after error decription is different - in user new - in AD old</div>
<div> if i make reconcile - in AD it became emty</div>
<div> and after that any first decription writes well in AD.</div>
<div> </div>
<div> </div>
<div> </div>
<div> --</div>
<div> oleg okunev</div>
<div> </div>
<div> --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------</div>
<div> </div>
<div> </div>
<div> _______________________________________________</div>
<div> midPoint mailing list</div>
<div> <a href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a></div>
<div> <a href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</a></div>
<div> </div>
</blockquote>
<div>Numer KRS: 0000381559 (Sąd Rejonowy dla Krakowa-Śródmieścia w Krakowie, XI Wydział Gospodarczy KRS)</div>
<div>NIP: 675-12-65-009; REGON: 356366975</div>
<div>Kapitał zakładowy: 33 756 500 zł.</div>
<div> </div>
<div>Pomyśl o środowisku zanim wydrukujesz ten e-mail.</div>
<div>_______________________________________________</div>
<div>midPoint mailing list</div>
<div><a href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a></div>
<div><a href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</a></div>
</tt></blockquote></div>
</body></html>