<div dir="ltr"><div>Hello Pálos,<br></div>I have tried to apply this limitation on resource schema and the limitation doesn't help me too.<br><div><div><br> <xsd:element minOccurs="0" maxOccurs="1" name="midPointAccountStatus" type="xsd:string"><br> <xsd:annotation><br> <xsd:appinfo><br> <a:ignore>true</a:ignore><br> <a:displayOrder>140</a:displayOrder><br> <a:matchingRule xmlns:qn289="<a href="http://prism.evolveum.com/xml/ns/public/matching-rule-3">http://prism.evolveum.com/xml/ns/public/matching-rule-3</a>">qn289:stringIgnoreCase</a:matchingRule><br> <ra:nativeAttributeName>midPointAccountStatus</ra:nativeAttributeName><br> <ra:frameworkAttributeName>midPointAccountStatus</ra:frameworkAttributeName><br> </xsd:appinfo><br> </xsd:annotation><br> </xsd:element><br><br></div><div>But the new resource created from scratch works fine. I have compared XML of both resources and do not see any differences.<br><br></div></div></div><div class="gmail_extra"><br><div class="gmail_quote">2017-09-21 17:17 GMT+03:00 Pálos Gustáv <span dir="ltr"><<a href="mailto:gustav.palos@gmail.com" target="_blank">gustav.palos@gmail.com</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Hi <span style="color:rgb(76,76,76);font-size:12.8px">Oleksandr</span><div><font color="#4c4c4c"><span style="font-size:12.8px"><br></span></font></div><div><font color="#4c4c4c"><span style="font-size:12.8px">try to set up this attribute as single-valued over:</span></font></div><div><table class="m_-2351540492955452774gmail-highlight m_-2351540492955452774gmail-tab-size m_-2351540492955452774gmail-js-file-line-container" style="box-sizing:border-box;border-collapse:collapse;color:rgb(36,41,46);font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",Helvetica,Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol";font-size:14px"><tbody style="box-sizing:border-box"><tr style="box-sizing:border-box"><td id="m_-2351540492955452774gmail-LC107" class="m_-2351540492955452774gmail-blob-code m_-2351540492955452774gmail-blob-code-inner m_-2351540492955452774gmail-js-file-line" style="box-sizing:border-box;padding:0px 10px;line-height:20px;vertical-align:top;overflow:visible;word-wrap:normal"><limitations><br><maxOccurs>1</maxOccurs><br></limitations></td></tr></tbody></table><div class="gmail_extra"><br></div><div class="gmail_extra">Best regards,</div><div class="gmail_extra"><br></div><div class="gmail_extra">Gustav</div><div class="gmail_extra"><br><div class="gmail_quote"><div><div class="h5">2017-09-21 15:58 GMT+02:00 Oleksandr Nekriach <span dir="ltr"><<a href="mailto:o.nekriach@dynatech.lv" target="_blank">o.nekriach@dynatech.lv</a>></span>:<br></div></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div><div class="h5"><div dir="ltr"><div><div><div>Hello, <br>I had followed guides to add enable/disable Resource capabilities to my openLdap resource.<br></div><div>I have configured it and everything was fine I can disable resource but when I tried to enable it I have got an error <br></div>"attribute 'midPointAccountStatus' cannot have multiple values".<br></div> I cant understand why connector try to add attribute instead of modify it?<br></div>Please help<br><div><div><div><br><a href="https://wiki.evolveum.com/display/midPoint/Recommended+OpenLDAP+Structure" target="_blank">https://wiki.evolveum.com/disp<wbr>lay/midPoint/Recommended+OpenL<wbr>DAP+Structure</a><br><a href="https://wiki.evolveum.com/display/midPoint/Simulated+Disable+HOWTO" target="_blank">https://wiki.evolveum.com/disp<wbr>lay/midPoint/Simulated+Disable<wbr>+HOWTO</a><br><a href="https://wiki.evolveum.com/display/midPoint/Auxiliary+Object+Classes" target="_blank">https://wiki.evolveum.com/disp<wbr>lay/midPoint/Auxiliary+Object+<wbr>Classes</a><br><br><br>2017-09-21 16:44:24,841 [] [Thread-87] ERROR (com.evolveum.midpoint.model.i<wbr>mpl.lens.ChangeExecutor): Error executing changes for (account (default) on resource:dd8b9ada-2dfa-4aec-b5<wbr>38-21357d2218be(OpenLdap3)): Internal error: com.evolveum.midpoint.util.exc<wbr>eption.SystemException: Got unexpected exception: org.identityconnectors.framewo<wbr>rk.common.exceptions.AlreadyEx<wbr>istsException: Error modifying LDAP entry uid=testuser6,ou=Users,ou=LV,d<wbr>c=dyninno,dc=test: [add:midPointAccountStatus: enabled,add:objectClass: midPointPerson,]: constraintViolation: attribute 'midPointAccountStatus' cannot have multiple values (19)<br>com.evolveum.midpoint.util.exc<wbr>eption.SystemException: Internal error: com.evolveum.midpoint.util.exc<wbr>eption.SystemException: Got unexpected exception: org.identityconnectors.framewo<wbr>rk.common.exceptions.AlreadyEx<wbr>istsException: Error modifying LDAP entry uid=testuser6,ou=Users,ou=LV,d<wbr>c=dyninno,dc=test: [add:midPointAccountStatus: enabled,add:objectClass: midPointPerson,]: constraintViolation: attribute 'midPointAccountStatus' cannot have multiple values (19)<br> at com.evolveum.midpoint.provisio<wbr>ning.impl.ProvisioningServiceI<wbr>mpl.modifyObject(ProvisioningS<wbr>erviceImpl.java:701) ~[provisioning-impl-3.6.jar:na<wbr>]<br> at <a href="http://com.evolveum.midpoint.model.im">com.evolveum.midpoint.model.im</a><wbr>pl.lens.ChangeExecutor.modifyP<wbr>rovisioningObject(ChangeExecut<wbr>or.java:1397) ~[model-impl-3.6.jar:na]<br> at <a href="http://com.evolveum.midpoint.model.im">com.evolveum.midpoint.model.im</a><wbr>pl.lens.ChangeExecutor.execute<wbr>Modification(ChangeExecutor.<wbr>java:1281) ~[model-impl-3.6.jar:na]<br> at <a href="http://com.evolveum.midpoint.model.im">com.evolveum.midpoint.model.im</a><wbr>pl.lens.ChangeExecutor.execute<wbr>Delta(ChangeExecutor.java:812) ~[model-impl-3.6.jar:na]<br> at <a href="http://com.evolveum.midpoint.model.im">com.evolveum.midpoint.model.im</a><wbr>pl.lens.ChangeExecutor.execute<wbr>Changes(ChangeExecutor.java:<wbr>308) ~[model-impl-3.6.jar:na]<br> at <a href="http://com.evolveum.midpoint.model.im">com.evolveum.midpoint.model.im</a><wbr>pl.lens.Clockwork.lambda$proce<wbr>ssSecondary$0(Clockwork.java:<wbr>481) [model-impl-3.6.jar:na]<br> at <a href="http://com.evolveum.midpoint.model.im">com.evolveum.midpoint.model.im</a><wbr>pl.lens.LensUtil.partialExecut<wbr>e(LensUtil.java:1253) ~[model-impl-3.6.jar:na]<br> at <a href="http://com.evolveum.midpoint.model.im">com.evolveum.midpoint.model.im</a><wbr>pl.lens.LensUtil.partialExecut<wbr>e(LensUtil.java:1240) ~[model-impl-3.6.jar:na]<br> at <a href="http://com.evolveum.midpoint.model.im">com.evolveum.midpoint.model.im</a><wbr>pl.lens.Clockwork.processSecon<wbr>dary(Clockwork.java:479) [model-impl-3.6.jar:na]<br> at <a href="http://com.evolveum.midpoint.model.im">com.evolveum.midpoint.model.im</a><wbr>pl.lens.Clockwork.click(Clockw<wbr>ork.java:327) [model-impl-3.6.jar:na]<br> at <a href="http://com.evolveum.midpoint.model.im">com.evolveum.midpoint.model.im</a><wbr>pl.lens.Clockwork.run(Clockwor<wbr>k.java:203) [model-impl-3.6.jar:na]<br> at <a href="http://com.evolveum.midpoint.model.im">com.evolveum.midpoint.model.im</a><wbr>pl.controller.ModelController.<wbr>executeChanges(ModelController<wbr>.java:569) ~[model-impl-3.6.jar:na]<br> at sun.reflect.GeneratedMethodAcc<wbr>essor1281.invoke(Unknown Source) ~[na:na]<br> at sun.reflect.DelegatingMethodAc<wbr>cessorImpl.invoke(DelegatingMe<wbr>thodAccessorImpl.java:43) ~[na:1.8.0_131]<br> at java.lang.reflect.Method.invok<wbr>e(Method.java:498) ~[na:1.8.0_131]<br> at org.apache.wicket.proxy.LazyIn<wbr>itProxyFactory$JdkHandler.<wbr>invoke(LazyInitProxyFactory.<wbr>java:507) ~[wicket-ioc-7.6.0.jar:7.6.0]<br> at com.sun.proxy.$Proxy154.execut<wbr>eChanges(Unknown Source) ~[na:na]<br> at com.evolveum.midpoint.web.comp<wbr>onent.progress.ProgressReporte<wbr>r.lambda$executeChangesAsync$<wbr>0(ProgressReporter.java:187) ~[classes/:na]<br> at java.lang.Thread.run(Thread.ja<wbr>va:748) ~[na:1.8.0_131]<br>Caused by: com.evolveum.midpoint.util.exc<wbr>eption.SystemException: com.evolveum.midpoint.util.exc<wbr>eption.SystemException: Got unexpected exception: org.identityconnectors.framewo<wbr>rk.common.exceptions.AlreadyEx<wbr>istsException: Error modifying LDAP entry uid=testuser6,ou=Users,ou=LV,d<wbr>c=dyninno,dc=test: [add:midPointAccountStatus: enabled,add:objectClass: midPointPerson,]: constraintViolation: attribute 'midPointAccountStatus' cannot have multiple values (19)<br> at com.evolveum.midpoint.provisio<wbr>ning.consistency.impl.ErrorHan<wbr>dlerFactory.createErrorHandler<wbr>(ErrorHandlerFactory.java:89) ~[provisioning-impl-3.6.jar:na<wbr>]<br> at com.evolveum.midpoint.provisio<wbr>ning.impl.ShadowCache.handleEr<wbr>ror(ShadowCache.java:1128) ~[provisioning-impl-3.6.jar:na<wbr>]<br> at com.evolveum.midpoint.provisio<wbr>ning.impl.ShadowCache.modifySh<wbr>adow(ShadowCache.java:691) ~[provisioning-impl-3.6.jar:na<wbr>]<br> at com.evolveum.midpoint.provisio<wbr>ning.impl.ProvisioningServiceI<wbr>mpl.modifyObject(ProvisioningS<wbr>erviceImpl.java:679) ~[provisioning-impl-3.6.jar:na<wbr>]<br> ... 18 common frames omitted<br><br clear="all"><br>-- <br><div class="m_-2351540492955452774gmail-m_2291122331824040345gmail_signature"><div dir="ltr"><div><div dir="ltr"><span style="color:rgb(76,76,76)">Best regards, <br><br>Oleksandr Nekriach | Identity and access management engineer <br><br>Dynatech, Mednieku str. 4a, Riga, LV-1010, Latvia <br><br><div style="display:inline-block"><a href="tel:+371%2025%20314%20685" value="+37125314685" target="_blank">+37125314685</a></div>, <div style="display:inline-block"><a href="mailto:o.nekriach@dynatech.lv" target="_blank">o.nekriach@dynatech.lv</a></div> | <div style="display:inline-block"><a href="http://www.dynatech.lv" target="_blank">www.dynatech.lv</a></div> <br><br><img src="cid:o.nekriach@dynatech.lv1502777022855-7770"> <br><br>Stay connected: <br><div style="display:inline-block;margin:5px 5px 0px 0px"><a href="https://www.facebook.com/DynatechLatvia/?ref=br_rs" target="_blank"><img src="cid:o.nekriach@dynatech.lv1502777022855-7771"></a></div><div style="display:inline-block;margin:5px 0px 0px"><a href="https://www.linkedin.com/company-beta/17893047/" target="_blank"><img src="cid:o.nekriach@dynatech.lv1502777022855-7772"></a></div><br><br><span style="font-size:11px;color:rgb(161,161,161)">Confidentiality
Notice: This message contains confidential information and is intended
only for the named recipient(s). If you are not the addressee you may
not copy, distribute or perform any other activities with this
information. If you have received this transmission in error, please
notify us by e-mail immediately. E-mail transmission cannot be
guaranteed to be secure or error-free as information could be
intercepted, corrupted, lost, destroyed, arrive late or incomplete, or
contain viruses.</span></span></div></div></div></div>
</div></div></div></div>
<br></div></div>______________________________<wbr>_________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">http://lists.evolveum.com/mail<wbr>man/listinfo/midpoint</a><br>
<br></blockquote></div><span class="HOEnZb"><font color="#888888"><br><br clear="all"><div><br></div>-- <br><div class="m_-2351540492955452774gmail_signature">s pozdravom<div><br></div><div>Gustáv Pálos</div></div>
</font></span></div></div></div>
<br>______________________________<wbr>_________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">http://lists.evolveum.com/<wbr>mailman/listinfo/midpoint</a><br>
<br></blockquote></div><br><br clear="all"><br>-- <br><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><span style="color:#4c4c4c">Best regards, <br><br>Oleksandr Nekriach | Identity and access management engineer <br><br>Dynatech, Mednieku str. 4a, Riga, LV-1010, Latvia <br><br><div style="display:inline-block"><a href="tel:+371%2025%20314%20685" value="+37125314685" target="_blank">+37125314685</a></div>, <div style="display:inline-block"><a href="mailto:o.nekriach@dynatech.lv" target="_blank">o.nekriach@dynatech.lv</a></div> | <div style="display:inline-block"><a href="http://www.dynatech.lv" target="_blank">www.dynatech.lv</a></div> <br><br><img src="cid:o.nekriach@dynatech.lv1502777022855-7770"> <br><br>Stay connected: <br><div style="display:inline-block;margin:5px 5px 0 0"><a href="https://www.facebook.com/DynatechLatvia/?ref=br_rs" target="_blank"><img src="cid:o.nekriach@dynatech.lv1502777022855-7771"></a></div><div style="display:inline-block;margin:5px 0 0 0"><a href="https://www.linkedin.com/company-beta/17893047/" target="_blank"><img src="cid:o.nekriach@dynatech.lv1502777022855-7772"></a></div><br><br><span style="font-size:11px;color:#a1a1a1">Confidentiality
Notice: This message contains confidential information and is intended
only for the named recipient(s). If you are not the addressee you may
not copy, distribute or perform any other activities with this
information. If you have received this transmission in error, please
notify us by e-mail immediately. E-mail transmission cannot be
guaranteed to be secure or error-free as information could be
intercepted, corrupted, lost, destroyed, arrive late or incomplete, or
contain viruses.</span></span></div></div></div></div>
</div>