<HTML><BODY>Hi!<br>But I do not use custom class<br><br>i use this <br><p><schema><br> <generationConstraints><br> <generateObjectClass>ri:user</generateObjectClass><br> <generateObjectClass>ri:group</generateObjectClass><br> <generateObjectClass>ri:organizationalUnit</generateObjectClass><br> </generationConstraints> <br> </schema></p><br><br><br><br><blockquote style="border-left:1px solid #0857A6; margin:10px; padding:0 0 0 10px;">
Среда, 21 декабря 2016, 15:03 +03:00 от Wojciech Staszewski <wojciech.staszewski@diagnostyka.pl>:<br>
<br>
<div id="">
<div class="js-helper js-readmsg-msg">
<style type="text/css"></style>
<div>
<base target="_self" href="https://e.mail.ru/">
<div id="style_14823218890000000628_BODY">I have the same issue with LDAP with attributes from some objectclasses (e.g. SambaSamAccount).<br>
And when I'm using my own custom auxiliary objectclass (OC), Midpoint tries to add this objectclass to LDAP accounts which already have this OC and I got errors.<br>
I temoprary removed these OC from schema and don't use attributes from them.<br>
<br>
<br>
W dniu 21.12.2016 o 07:17, oleg okunev pisze:<br>
> Hello.<br>
> <br>
> Strange problem i get when trying to modify decription in user which have link to AD account<br>
> config of schema handling<br>
> <br>
> <attribute><br>
> <ref>ri:description</ref><br>
> <outbound><br>
> <source><br>
> <path>description</path><br>
> </source><br>
> </outbound><br>
> <inbound><br>
> <target><br>
> <path>description</path><br>
> </target><br>
> </inbound><br>
> </attribute><br>
> <br>
> <br>
> *Preview changes*<br>
> <br>
> <br>
> Modify User Archangel Gabriel (Gabriel)<br>
> <br>
> <br>
> Item Old value New value<br>
> Description New Desc New Desc NEW<br>
> <br>
> <br>
> <br>
> Secondary changes: 2 objects<br>
> <br>
> <br>
> <br>
> <br>
> Modify User Archangel Gabriel (Gabriel)<br>
> <br>
> <br>
> Item Old value New value<br>
> Description New Desc New Desc NEW<br>
> <br>
> <br>
> Modify Shadow CN=Archangel Gabriel,OU=Sky,OU=Earth,DC=abb-test,DC=akbars,DC=ru<br>
> <br>
> <br>
> Item Value<br>
> resourceRef Active Directory Medusa (LDAPS) v2<br>
> kind ACCOUNT<br>
> intent default<br>
> <br>
> <br>
> Modify attributes<br>
> <br>
> <br>
> Item Old value New value<br>
> description New Desc NEW<br>
> <br>
> <br>
> <br>
> GOT this ERROR<br>
> <br>
> Schema violation during processing shadow:<br>
> shadow: CN=Archangel Gabriel,OU=Sky,OU=Earth,DC=abb-test,DC=akbars,DC=ru (OID:92d4a278-8d4f-46a3-af88-56bdf8529a95):<br>
> Schema violation: Invalid attribute: org.identityconnectors.framework.common.exceptions.InvalidAttributeValueException(Error modifying LDAP entry CN=Archangel Gabriel,OU=Sky,OU=Earth,DC=abb-test,DC=akbars,DC=ru: [add:description: New Desc Second,]: attributeOrValueExists: 00002081: AtrErr: DSID-030F154F, #1:??0: 00002081: DSID-030F154F, problem 1006 (ATT_OR_VALUE_EXISTS), data 0, Att d (description)?? (20)):<br>
> <br>
> it looks like midpoint trying to add NEW attribute - i cant understand why not modify existing attribute value<br>
> <br>
> I know it must be simple but i trying to search and failed(((<br>
> i got 3 object classes : user group and OU<br>
> <br>
> and one more thing<br>
> after error decription is different - in user new - in AD old<br>
> if i make reconcile - in AD it became emty<br>
> and after that any first decription writes well in AD.<br>
> <br>
> <br>
> <br>
> -- <br>
> oleg okunev<br>
> <br>
> --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------<br>
> <br>
> <br>
> _______________________________________________<br>
> midPoint mailing list<br>
> <a href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a><br>
> <a href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
><br>
Numer KRS: 0000381559 (Sąd Rejonowy dla Krakowa-Śródmieścia w Krakowie, XI Wydział Gospodarczy KRS)<br>
NIP: 675-12-65-009; REGON: 356366975<br>
Kapitał zakładowy: 33 756 500 zł.<br>
<br>
Pomyśl o środowisku zanim wydrukujesz ten e-mail.<br>
_______________________________________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
</div>
<base target="_self" href="https://e.mail.ru/">
</div>
</div>
</div>
</blockquote>
<br></BODY></HTML>