<div dir="ltr"><div class="gmail_default" style="font-family:arial,helvetica,sans-serif;font-size:small;color:#444444">Hi guys, doing some deeper research we found that this issue is related to the existence configuration. </div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif;font-size:small;color:#444444"><br></div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif;font-size:small;color:#444444">The ACTIVE_DIRECTORY_LDAP resource is configured to disable accounts instead of delete them following <a href="https://wiki.evolveum.com/display/midPoint/Disable+instead+of+Delete">this document</a>. As Ivan said on a <a href="http://lists.evolveum.com/pipermail/midpoint/2016-November/002823.html">previous thread</a>, that configuration will fail or throw a warning on deleting users from midPoint (but the users are deleted on MP). Maybe this warning/error is triggering the dependency error. </div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif;font-size:small;color:#444444"><br></div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif;font-size:small;color:#444444">If I remove the existence configuration from the resource, the dependency policy works fine on both create and on delete operations. Is there any limitation to use existence and dependency on the same resource ?</div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif;font-size:small;color:#444444"><br></div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif;font-size:small;color:#444444">Best regards,</div></div><div class="gmail_extra"><br clear="all"><div><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><font face="arial, helvetica, sans-serif"><br><br><font color="#444444">Ing Nicolás Rossi</font><br><font color="#999999">Identicum S.A.</font><br><font color="#999999">Jorge Newbery 3226</font><br><font color="#999999">Tel: +54 (11) 4552-3050</font><br><font color="#999999"><a href="http://www.identicum.com" target="_blank">www.identicum.com</a></font></font><br></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div>
<br><div class="gmail_quote">On Tue, Feb 14, 2017 at 11:30 AM, Nicolas Rossi <span dir="ltr"><<a href="mailto:nrossi@identicum.com" target="_blank">nrossi@identicum.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div class="gmail_default" style="font-family:arial,helvetica,sans-serif;font-size:small;color:rgb(68,68,68)">Here are more context information:</div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif;font-size:small;color:rgb(68,68,68)"><br></div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif;font-size:small;color:rgb(68,68,68)">- Environment: midPoint 3.5</div><div class="gmail_default"><font color="#444444" face="arial, helvetica, sans-serif">- Resource ACTIVE_DIRECTORY_<wbr>LDAP </font>(00000000-0000-1de4-0002-<wbr>000000000001) has a dependency of resource 00000000-0000-1de4-<wbr>0002-000000000004 (BANNER_PERSONAS)</div><div class="gmail_default">- We created a new user and it worked perfectly. He has 2 projections, one for BANNER_PERSONAS and other for ACTIVE_DIRECTORY and created in the right order</div><div class="gmail_default">- After that If we try to delete the user we get the "Circular Dependency Error"</div><div class="gmail_default"><br></div><div class="gmail_default">This is the dependency configuration:</div><div class="gmail_default"><br></div><div class="gmail_default"><div class="gmail_default"><font face="monospace, monospace"> <dependency></font></div><div class="gmail_default"><font face="monospace, monospace"> <resourceRef oid="00000000-0000-1de4-0002-<wbr>000000000004" type="c:ResourceType" /></font></div><div class="gmail_default"><font face="monospace, monospace"> <kind>account</kind></font></div><div class="gmail_default"><font face="monospace, monospace"> <intent>default</intent></font></div><div class="gmail_default"><font face="monospace, monospace"> <strictness>strict</<wbr>strictness></font></div><div class="gmail_default"><font face="monospace, monospace"> <order>1</order></font></div><div class="gmail_default"><font face="monospace, monospace"> </dependency></font></div></div><div class="gmail_default"><br></div><div class="gmail_default">On the other hand when DependencyProcessor tries to determine wave for the second projection (ACTIVE_DIRECTORY) the projectionContext.isDelete() is returning false instead of true. </div><span class=""><div class="gmail_default"><br></div><div class="gmail_default"><div class="gmail_default">2017-02-14 11:01:20,828 [] [http-bio-8080-exec-11] TRACE (com.evolveum.midpoint.model.<wbr>impl.lens.projector.<wbr>DependencyProcessor):<b><font color="#ff0000"> Determining wave for (deprovision)</font></b>: LensProjectionContext(<wbr>ShadowType:d4178715-263b-4910-<wbr>9d19-6205c9a91c09 on resource:00000000-0000-1de4-<wbr>0002-000000000004(BANNER_<wbr>PERSONAS))</div><div class="gmail_default">2017-02-14 11:01:20,828 [] [http-bio-8080-exec-11] TRACE (com.evolveum.midpoint.model.<wbr>impl.lens.projector.<wbr>DependencyProcessor): DEP(rev): com.evolveum.midpoint.xml.ns._<wbr>public.common.common_3.<wbr>ResourceObjectTypeDependencyTy<wbr>pe@c308d3b[strictness=STRICT,<wbr>order=1,forceLoad=<null>,<wbr>resourceRef=com.evolveum.<wbr>midpoint.xml.ns._public.<wbr>common.common_3.<wbr>ObjectReferenceType@2ed5f95[_<wbr>referenceValue=PRV(oid=<wbr>00000000-0000-1de4-0002-<wbr>000000000004, targetType={.../common/common-<wbr>3}ResourceType, targetName=BANNER_PERSONAS)],<wbr>kind=ACCOUNT,intent=default]</div><div class="gmail_default">2017-02-14 11:01:20,829 [] [http-bio-8080-exec-11] TRACE (com.evolveum.midpoint.model.<wbr>impl.lens.projector.<wbr>DependencyProcessor): <b><font color="#ff0000">Determining wave for (provision)</font></b>: LensProjectionContext(<wbr>ShadowType:fe4caa26-8eb2-4dde-<wbr>849d-601735a8cdbf on resource:00000000-0000-1de4-<wbr>0002-000000000001(ACTIVE_<wbr>DIRECTORY_LDAP))</div><div class="gmail_default">2017-02-14 11:01:20,829 [] [http-bio-8080-exec-11] TRACE (com.evolveum.midpoint.model.<wbr>impl.lens.projector.<wbr>DependencyProcessor): DEP: com.evolveum.midpoint.xml.ns._<wbr>public.common.common_3.<wbr>ResourceObjectTypeDependencyTy<wbr>pe@c308d3b[strictness=STRICT,<wbr>order=1,forceLoad=<null>,<wbr>resourceRef=com.evolveum.<wbr>midpoint.xml.ns._public.<wbr>common.common_3.<wbr>ObjectReferenceType@2ed5f95[_<wbr>referenceValue=PRV(oid=<wbr>00000000-0000-1de4-0002-<wbr>000000000004, targetType={.../common/common-<wbr>3}ResourceType, targetName=BANNER_PERSONAS)],<wbr>kind=ACCOUNT,intent=default]</div></div><div class="gmail_default"><br></div></span><div class="gmail_default">Hope it helps !</div><div class="gmail_default"><br></div><div class="gmail_default">Regards,</div></div><div class="gmail_extra"><br clear="all"><div><div class="m_-8700773152070371471gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><font face="arial, helvetica, sans-serif"><br><br><font color="#444444">Ing Nicolás Rossi</font><span class=""><br><font color="#999999">Identicum S.A.</font><br><font color="#999999">Jorge Newbery 3226</font><br></span><font color="#999999">Tel: +54 (11) 4552-3050</font><br><font color="#999999"><a href="http://www.identicum.com" target="_blank">www.identicum.com</a></font></font><br></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div>
<br><div class="gmail_quote"><div><div class="h5">On Tue, Feb 14, 2017 at 11:13 AM, Rodrigo Yanis <span dir="ltr"><<a href="mailto:ryanis@identicum.com" target="_blank">ryanis@identicum.com</a>></span> wrote:<br></div></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div class="h5"><div dir="ltr">Hello everyone,<div><br></div><div>We're currently experiencing an issue with an LDAP driver throwing a Circular Dependency error when attempting to delete a provisioned user. We've configured the driver to be dependant on an Scripted SQL driver.</div><div><br></div><div>The error stacktrace (on debug) is the following: </div><div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><font size="1">2017-02-14 11:01:20,828 [] [http-bio-8080-exec-11] TRACE (com.evolveum.midpoint.model.i<wbr>mpl.lens.projector.DependencyP<wbr>rocessor): Determining wave for (deprovision): LensProjectionContext(ShadowTy<wbr>pe:d4178715-263b-4910-9d19-<wbr>6205c9a91c09 on resource:00000000-0000-1de4-00<wbr>02-000000000004(BANNER_PERSONA<wbr>S))<br>2017-02-14 11:01:20,828 [] [http-bio-8080-exec-11] TRACE (com.evolveum.midpoint.model.i<wbr>mpl.lens.projector.DependencyP<wbr>rocessor): DEP(rev): com.evolveum.midpoint.xml.ns._<wbr>public.common.common_3.Resourc<wbr>eObjectTypeDependencyType@<wbr>c308d3b[strictness=STRICT,orde<wbr>r=1,forceLoad=<null>,resourceR<wbr>ef=com.evolveum.midpoint.xml.<wbr>ns._public.common.common_3.Obj<wbr>ectReferenceType@2ed5f95[_refe<wbr>renceValue=PRV(oid=00000000-<wbr>0000-1de4-0002-000000000004, targetType={.../common/common-<wbr>3}ResourceType, targetName=BANNER_PERSONAS)],k<wbr>ind=ACCOUNT,intent=default]<br>2017-02-14 11:01:20,829 [] [http-bio-8080-exec-11] TRACE (com.evolveum.midpoint.model.i<wbr>mpl.lens.projector.DependencyP<wbr>rocessor): Determining wave for (provision): LensProjectionContext(ShadowTy<wbr>pe:fe4caa26-8eb2-4dde-849d-<wbr>601735a8cdbf on resource:00000000-0000-1de4-00<wbr>02-000000000001(ACTIVE_DIRECTO<wbr>RY_LDAP))<br>2017-02-14 11:01:20,829 [] [http-bio-8080-exec-11] TRACE (com.evolveum.midpoint.model.i<wbr>mpl.lens.projector.DependencyP<wbr>rocessor): DEP: com.evolveum.midpoint.xml.ns._<wbr>public.common.common_3.Resourc<wbr>eObjectTypeDependencyType@<wbr>c308d3b[strictness=STRICT,orde<wbr>r=1,forceLoad=<null>,resourceR<wbr>ef=com.evolveum.midpoint.xml.<wbr>ns._public.common.common_3.Obj<wbr>ectReferenceType@2ed5f95[_refe<wbr>renceValue=PRV(oid=00000000-<wbr>0000-1de4-0002-000000000004, targetType={.../common/common-<wbr>3}ResourceType, targetName=BANNER_PERSONAS)],k<wbr>ind=ACCOUNT,intent=default]<br>2017-02-14 11:01:20,829 [] [http-bio-8080-exec-11] DEBUG (com.evolveum.midpoint.model.i<wbr>mpl.lens.projector.Projector): Projector failed: Circular dependency, path: 00000000-0000-1de4-0002-000000<wbr>000004(ACCOUNT/default). Etime: 58 ms<br>2017-02-14 11:01:20,885 [] [http-bio-8080-exec-11] ERROR (com.evolveum.midpoint.web.pag<wbr>e.admin.users.PageUsers): Couldn't delete user.<br>com.evolveum.midpoint.util.exc<wbr>eption.PolicyViolationExceptio<wbr>n: Circular dependency, path: 00000000-0000-1de4-0002-000000<wbr>000004(ACCOUNT/default)<br> at <a href="http://com.evolveum.midpoint.model.im">com.evolveum.midpoint.model.im</a><wbr>pl.lens.projector.DependencyPr<wbr>ocessor.checkForCircular(Depen<wbr>dencyProcessor.java:269) ~[model-impl-3.5.jar:na]<br> at <a href="http://com.evolveum.midpoint.model.im">com.evolveum.midpoint.model.im</a><wbr>pl.lens.projector.DependencyPr<wbr>ocessor.determineProjectionWav<wbr>eProvision(<wbr>DependencyProcessor.java:130) ~[model-impl-3.5.jar:na]<br> at <a href="http://com.evolveum.midpoint.model.im">com.evolveum.midpoint.model.im</a><wbr>pl.lens.projector.DependencyPr<wbr>ocessor.determineProjectionWav<wbr>e(DependencyProcessor.java:<wbr>110) ~[model-impl-3.5.jar:na]<br> at <a href="http://com.evolveum.midpoint.model.im">com.evolveum.midpoint.model.im</a><wbr>pl.lens.projector.DependencyPr<wbr>ocessor.determineProjectionWav<wbr>eDeprovision(<wbr>DependencyProcessor.java:208) ~[model-impl-3.5.jar:na]<br> at <a href="http://com.evolveum.midpoint.model.im">com.evolveum.midpoint.model.im</a><wbr>pl.lens.projector.DependencyPr<wbr>ocessor.determineProjectionWav<wbr>e(DependencyProcessor.java:<wbr>107) ~[model-impl-3.5.jar:na]<br> at <a href="http://com.evolveum.midpoint.model.im">com.evolveum.midpoint.model.im</a><wbr>pl.lens.projector.DependencyPr<wbr>ocessor.sortProjectionsToWaves<wbr>(DependencyProcessor.java:75) ~[model-impl-3.5.jar:na]<br> at <a href="http://com.evolveum.midpoint.model.im">com.evolveum.midpoint.model.im</a><wbr><a href="http://pl.lens.projector.Projector.pr">pl.lens.projector.Projector.pr</a><wbr>ojectInternal(Projector.java:<wbr>239) ~[model-impl-3.5.jar:na]<br> at <a href="http://com.evolveum.midpoint.model.im">com.evolveum.midpoint.model.im</a><wbr><a href="http://pl.lens.projector.Projector.pr">pl.lens.projector.Projector.pr</a><wbr>oject(Projector.java:112) ~[model-impl-3.5.jar:na]<br> at <a href="http://com.evolveum.midpoint.model.im">com.evolveum.midpoint.model.im</a><wbr>pl.lens.Clockwork.click(Clockw<wbr>ork.java:311) ~[model-impl-3.5.jar:na]<br> at <a href="http://com.evolveum.midpoint.model.im">com.evolveum.midpoint.model.im</a><wbr>pl.lens.Clockwork.run(Clockwor<wbr>k.java:221) ~[model-impl-3.5.jar:na]<br> at <a href="http://com.evolveum.midpoint.model.im">com.evolveum.midpoint.model.im</a><wbr>pl.controller.ModelController.<wbr>executeChanges(ModelController<wbr>.java:575) ~[model-impl-3.5.jar:na]<br> at <a href="http://com.evolveum.midpoint.model.im">com.evolveum.midpoint.model.im</a><wbr>pl.controller.ModelController.<wbr>executeChanges(ModelController<wbr>.java:371) ~[model-impl-3.5.jar:na]<br> at sun.reflect.NativeMethodAccess<wbr>orImpl.invoke0(Native Method) ~[na:1.8.0_121]</font></blockquote><div><br></div>Please note that <span style="font-size:x-small"><i>00000000-0000-1de4-0002-0<wbr>00000000004</i> </span>stands for the resource's OID to which our Active Directory resource is dependant.</div><div><br></div><div>We're not sure why this is happening - it seems like the dependencyProcessor is reevaluating provisioning for the Active Directory projection and failing as the dependency was already deprovisioned.</div><div><br></div><div>Do you have any insights on this?</div><div><br></div><div>Thanks,</div><div><div><div class="m_-8700773152070371471m_-343824326261065937gmail-m_-6328126898145331543gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div dir="ltr"><div dir="ltr"><br></div><div dir="ltr"><font face="arial, helvetica, sans-serif"><b>Rodrigo Yanis.</b><br><img src="http://www.identicum.com/img/favicon.ico">Identicum S.A.<br></font>Jorge Newbery 3226<br>Tel: +54 (11) 4824-9971<font face="arial, helvetica, sans-serif"><br><a href="mailto:ryanis@identicum.com" target="_blank"><font color="#0b5394">ryanis@identicum.com</font></a><br><a href="http://www.identicum.com/" target="_blank"><font color="#0b5394">www.identicum.com</font></a></font></div></div></div></div></div></div></div></div></div></div></div>
</div></div>
<br></div></div>______________________________<wbr>_________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">http://lists.evolveum.com/mail<wbr>man/listinfo/midpoint</a><br>
<br></blockquote></div><br></div>
</blockquote></div><br></div>