<div dir="ltr"><div><div><div>Hello Ivan,<br></div>I had not this attribute in schema handling before only in the schema and capabilities sections.<br></div>Anyway the solution of adding this attribute to schema handling did not solve my problem with broken resource.<br><br></div>Best regards, Oleksandr<br><div><div><div><div><br></div></div></div></div></div><div class="gmail_extra"><br><div class="gmail_quote">2017-09-22 14:37 GMT+03:00 Ivan Noris <span dir="ltr"><<a href="mailto:ivan.noris@evolveum.com" target="_blank">ivan.noris@evolveum.com</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div text="#000000" bgcolor="#FFFFFF">
<p>Hi Oleksandr,</p>
<p>I think Gustav meant to use the limitations in schema handling,
not in schema, as schema may be refreshed and your changes would
be lost:</p>
<p><attribute><br>
<ref>ri:midPointAccountStatus<<wbr>/ref><span class=""><br>
<limitations><br>
<maxOccurs>1</maxOccurs><br>
</limitations></span></p>
<p></attribute><br>
</p>
I can't imagine why it works with one resource and not other... For
sure I have not been working with a resource which has multivalue
attribute for account state...<br>
<br>
Ivan<div><div class="h5"><br>
<br>
<div class="m_5306763014934344982moz-cite-prefix">On 21.09.2017 17:13, Oleksandr Nekriach
wrote:<br>
</div>
<blockquote type="cite">
<div dir="ltr">
<div>Hello Pálos,<br>
</div>
I have tried to apply this limitation on resource schema and the
limitation doesn't help me too.<br>
<div>
<div><br>
<xsd:element minOccurs="0"
maxOccurs="1" name="midPointAccountStatus"
type="xsd:string"><br>
<xsd:annotation><br>
<xsd:appinfo><br>
<a:ignore>true</a:ignore><br>
<a:displayOrder>140</a:<wbr>displayOrder><br>
<a:matchingRule xmlns:qn289="<a href="http://prism.evolveum.com/xml/ns/public/matching-rule-3" target="_blank">http://prism.<wbr>evolveum.com/xml/ns/public/<wbr>matching-rule-3</a>">qn289:<wbr>stringIgnoreCase</a:<wbr>matchingRule><br>
<ra:nativeAttributeName><wbr>midPointAccountStatus</ra:<wbr>nativeAttributeName><br>
<ra:frameworkAttributeName><wbr>midPointAccountStatus</ra:<wbr>frameworkAttributeName><br>
</xsd:appinfo><br>
</xsd:annotation><br>
</xsd:element><br>
<br>
</div>
<div>But the new resource created from scratch works fine. I
have compared XML of both resources and do not see any
differences.<br>
<br>
</div>
</div>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">2017-09-21 17:17 GMT+03:00 Pálos Gustáv
<span dir="ltr"><<a href="mailto:gustav.palos@gmail.com" target="_blank">gustav.palos@gmail.com</a>></span>:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr">Hi <span style="color:rgb(76,76,76);font-size:12.8px">Oleksandr</span>
<div><font color="#4c4c4c"><span style="font-size:12.8px"><br>
</span></font></div>
<div><font color="#4c4c4c"><span style="font-size:12.8px">try
to set up this attribute as single-valued over:</span></font></div>
<div>
<table class="m_5306763014934344982m_-2351540492955452774gmail-highlight m_5306763014934344982m_-2351540492955452774gmail-tab-size m_5306763014934344982m_-2351540492955452774gmail-js-file-line-container">
<tbody style="box-sizing:border-box">
<tr style="box-sizing:border-box">
<td id="m_5306763014934344982m_-2351540492955452774gmail-LC107" class="m_5306763014934344982m_-2351540492955452774gmail-blob-code m_5306763014934344982m_-2351540492955452774gmail-blob-code-inner m_5306763014934344982m_-2351540492955452774gmail-js-file-line" style="box-sizing:border-box;padding:0px 10px;line-height:20px;vertical-align:top;overflow:visible;word-wrap:normal"><limitations><br>
<maxOccurs>1</maxOccurs><br>
</limitations></td>
</tr>
</tbody>
</table>
<div class="gmail_extra"><br>
</div>
<div class="gmail_extra">Best regards,</div>
<div class="gmail_extra"><br>
</div>
<div class="gmail_extra">Gustav</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">
<div>
<div class="m_5306763014934344982h5">2017-09-21 15:58 GMT+02:00
Oleksandr Nekriach <span dir="ltr"><<a href="mailto:o.nekriach@dynatech.lv" target="_blank">o.nekriach@dynatech.lv</a>></span>:<br>
</div>
</div>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div>
<div class="m_5306763014934344982h5">
<div dir="ltr">
<div>
<div>
<div>Hello, <br>
I had followed guides to add
enable/disable Resource capabilities
to my openLdap resource.<br>
</div>
<div>I have configured it and everything
was fine I can disable resource but
when I tried to enable it I have got
an error <br>
</div>
"attribute 'midPointAccountStatus'
cannot have multiple values".<br>
</div>
I cant understand why connector try to
add attribute instead of modify it?<br>
</div>
Please help<br>
<div>
<div>
<div><br>
<a href="https://wiki.evolveum.com/display/midPoint/Recommended+OpenLDAP+Structure" target="_blank">https://wiki.evolveum.com/disp<wbr>lay/midPoint/Recommended+OpenL<wbr>DAP+Structure</a><br>
<a href="https://wiki.evolveum.com/display/midPoint/Simulated+Disable+HOWTO" target="_blank">https://wiki.evolveum.com/disp<wbr>lay/midPoint/Simulated+Disable<wbr>+HOWTO</a><br>
<a href="https://wiki.evolveum.com/display/midPoint/Auxiliary+Object+Classes" target="_blank">https://wiki.evolveum.com/disp<wbr>lay/midPoint/Auxiliary+Object+<wbr>Classes</a><br>
<br>
<br>
2017-09-21 16:44:24,841 [] [Thread-87]
ERROR (com.evolveum.midpoint.model.i<wbr>mpl.lens.ChangeExecutor):
Error executing changes for (account
(default) on
<a class="m_5306763014934344982moz-txt-link-freetext">resource:dd8b9ada-2dfa-4aec-b5</a><wbr>38-21357d2218be(OpenLdap3)):
Internal error:
com.evolveum.midpoint.util.exc<wbr>eption.SystemException:
Got unexpected exception:
org.identityconnectors.framewo<wbr>rk.common.exceptions.AlreadyEx<wbr>istsException:
Error modifying LDAP entry
uid=testuser6,ou=Users,ou=LV,d<wbr>c=dyninno,dc=test:
[add:midPointAccountStatus:
enabled,add:objectClass:
midPointPerson,]: constraintViolation:
attribute 'midPointAccountStatus'
cannot have multiple values (19)<br>
com.evolveum.midpoint.util.exc<wbr>eption.SystemException:
Internal error:
com.evolveum.midpoint.util.exc<wbr>eption.SystemException:
Got unexpected exception:
org.identityconnectors.framewo<wbr>rk.common.exceptions.AlreadyEx<wbr>istsException:
Error modifying LDAP entry
uid=testuser6,ou=Users,ou=LV,d<wbr>c=dyninno,dc=test:
[add:midPointAccountStatus:
enabled,add:objectClass:
midPointPerson,]: constraintViolation:
attribute 'midPointAccountStatus'
cannot have multiple values (19)<br>
at
com.evolveum.midpoint.provisio<wbr>ning.impl.ProvisioningServiceI<wbr>mpl.modifyObject(ProvisioningS<wbr>erviceImpl.java:701)
~[provisioning-impl-3.6.jar:na<wbr>]<br>
at <a href="http://com.evolveum.midpoint.model.im" target="_blank">com.evolveum.midpoint.model.im</a><wbr>pl.lens.ChangeExecutor.modifyP<wbr>rovisioningObject(ChangeExecut<wbr>or.java:1397)
~[model-impl-3.6.jar:na]<br>
at <a href="http://com.evolveum.midpoint.model.im" target="_blank">com.evolveum.midpoint.model.im</a><wbr>pl.lens.ChangeExecutor.execute<wbr>Modification(ChangeExecutor.ja<wbr>va:1281)
~[model-impl-3.6.jar:na]<br>
at <a href="http://com.evolveum.midpoint.model.im" target="_blank">com.evolveum.midpoint.model.im</a><wbr>pl.lens.ChangeExecutor.execute<wbr>Delta(ChangeExecutor.java:812)
~[model-impl-3.6.jar:na]<br>
at <a href="http://com.evolveum.midpoint.model.im" target="_blank">com.evolveum.midpoint.model.im</a><wbr>pl.lens.ChangeExecutor.execute<wbr>Changes(ChangeExecutor.java:30<wbr>8)
~[model-impl-3.6.jar:na]<br>
at <a href="http://com.evolveum.midpoint.model.im" target="_blank">com.evolveum.midpoint.model.im</a><wbr>pl.lens.Clockwork.lambda$proce<wbr>ssSecondary$0(Clockwork.java:4<wbr>81)
[model-impl-3.6.jar:na]<br>
at <a href="http://com.evolveum.midpoint.model.im" target="_blank">com.evolveum.midpoint.model.im</a><wbr>pl.lens.LensUtil.partialExecut<wbr>e(LensUtil.java:1253)
~[model-impl-3.6.jar:na]<br>
at <a href="http://com.evolveum.midpoint.model.im" target="_blank">com.evolveum.midpoint.model.im</a><wbr>pl.lens.LensUtil.partialExecut<wbr>e(LensUtil.java:1240)
~[model-impl-3.6.jar:na]<br>
at <a href="http://com.evolveum.midpoint.model.im" target="_blank">com.evolveum.midpoint.model.im</a><wbr>pl.lens.Clockwork.processSecon<wbr>dary(Clockwork.java:479)
[model-impl-3.6.jar:na]<br>
at <a href="http://com.evolveum.midpoint.model.im" target="_blank">com.evolveum.midpoint.model.im</a><wbr>pl.lens.Clockwork.click(Clockw<wbr>ork.java:327)
[model-impl-3.6.jar:na]<br>
at <a href="http://com.evolveum.midpoint.model.im" target="_blank">com.evolveum.midpoint.model.im</a><wbr>pl.lens.Clockwork.run(Clockwor<wbr>k.java:203)
[model-impl-3.6.jar:na]<br>
at <a href="http://com.evolveum.midpoint.model.im" target="_blank">com.evolveum.midpoint.model.im</a><wbr>pl.controller.ModelController.<wbr>executeChanges(ModelController<wbr>.java:569)
~[model-impl-3.6.jar:na]<br>
at
sun.reflect.GeneratedMethodAcc<wbr>essor1281.invoke(Unknown
Source) ~[na:na]<br>
at
sun.reflect.DelegatingMethodAc<wbr>cessorImpl.invoke(DelegatingMe<wbr>thodAccessorImpl.java:43)
~[na:1.8.0_131]<br>
at
java.lang.reflect.Method.invok<wbr>e(Method.java:498)
~[na:1.8.0_131]<br>
at
org.apache.wicket.proxy.LazyIn<wbr>itProxyFactory$JdkHandler.invo<wbr>ke(LazyInitProxyFactory.java:<wbr>507)
~[wicket-ioc-7.6.0.jar:7.6.0]<br>
at
com.sun.proxy.$Proxy154.execut<wbr>eChanges(Unknown
Source) ~[na:na]<br>
at
com.evolveum.midpoint.web.comp<wbr>onent.progress.ProgressReporte<wbr>r.lambda$executeChangesAsync$0<wbr>(ProgressReporter.java:187)
~[classes/:na]<br>
at
java.lang.Thread.run(Thread.ja<wbr>va:748)
~[na:1.8.0_131]<br>
Caused by:
com.evolveum.midpoint.util.exc<wbr>eption.SystemException:
com.evolveum.midpoint.util.exc<wbr>eption.SystemException:
Got unexpected exception:
org.identityconnectors.framewo<wbr>rk.common.exceptions.AlreadyEx<wbr>istsException:
Error modifying LDAP entry
uid=testuser6,ou=Users,ou=LV,d<wbr>c=dyninno,dc=test:
[add:midPointAccountStatus:
enabled,add:objectClass:
midPointPerson,]: constraintViolation:
attribute 'midPointAccountStatus'
cannot have multiple values (19)<br>
at
com.evolveum.midpoint.provisio<wbr>ning.consistency.impl.ErrorHan<wbr>dlerFactory.createErrorHandler<wbr>(ErrorHandlerFactory.java:89)
~[provisioning-impl-3.6.jar:na<wbr>]<br>
at
com.evolveum.midpoint.provisio<wbr>ning.impl.ShadowCache.handleEr<wbr>ror(ShadowCache.java:1128)
~[provisioning-impl-3.6.jar:na<wbr>]<br>
at
com.evolveum.midpoint.provisio<wbr>ning.impl.ShadowCache.modifySh<wbr>adow(ShadowCache.java:691)
~[provisioning-impl-3.6.jar:na<wbr>]<br>
at
com.evolveum.midpoint.provisio<wbr>ning.impl.ProvisioningServiceI<wbr>mpl.modifyObject(ProvisioningS<wbr>erviceImpl.java:679)
~[provisioning-impl-3.6.jar:na<wbr>]<br>
... 18 common frames omitted<br>
<br clear="all">
<br>
-- <br>
<div class="m_5306763014934344982m_-2351540492955452774gmail-m_2291122331824040345gmail_signature">
<div dir="ltr">
<div>
<div dir="ltr"><span style="color:rgb(76,76,76)">Best
regards, <br>
<br>
Oleksandr Nekriach |
Identity and access
management engineer <br>
<br>
Dynatech, Mednieku str. 4a,
Riga, LV-1010, Latvia <br>
<br>
<div style="display:inline-block"><a href="tel:+371%2025%20314%20685" value="+37125314685" target="_blank">+37125314685</a></div>
,
<div style="display:inline-block"><a href="mailto:o.nekriach@dynatech.lv" target="_blank">o.nekriach@dynatech.lv</a></div>
|
<div style="display:inline-block"><a href="http://www.dynatech.lv" target="_blank">www.dynatech.lv</a></div>
<br>
<br>
<img src="cid:part21.6D20B85C.C5A5F786@evolveum.com"> <br>
<br>
Stay connected: <br>
<div style="display:inline-block;margin:5px 5px 0px 0px"><a href="https://www.facebook.com/DynatechLatvia/?ref=br_rs" target="_blank"><img src="cid:part22.8C4EE2BC.C139D467@evolveum.com"></a></div>
<div style="display:inline-block;margin:5px 0px 0px"><a href="https://www.linkedin.com/company-beta/17893047/" target="_blank"><img src="cid:part24.A8D3CAD7.543C8D4F@evolveum.com"></a></div>
<br>
<br>
<span style="font-size:11px;color:rgb(161,161,161)">Confidentiality
Notice: This message
contains confidential
information and is
intended only for the
named recipient(s). If you
are not the addressee you
may not copy, distribute
or perform any other
activities with this
information. If you have
received this transmission
in error, please notify us
by e-mail immediately.
E-mail transmission cannot
be guaranteed to be secure
or error-free as
information could be
intercepted, corrupted,
lost, destroyed, arrive
late or incomplete, or
contain viruses.</span></span></div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<br>
</div>
</div>
______________________________<wbr>_________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">http://lists.evolveum.com/mail<wbr>man/listinfo/midpoint</a><br>
<br>
</blockquote>
</div>
<span class="m_5306763014934344982HOEnZb"><font color="#888888"><br>
<br clear="all">
<div><br>
</div>
-- <br>
<div class="m_5306763014934344982m_-2351540492955452774gmail_signature">s
pozdravom
<div><br>
</div>
<div>Gustáv Pálos</div>
</div>
</font></span></div>
</div>
</div>
<br>
______________________________<wbr>_________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">http://lists.evolveum.com/mail<wbr>man/listinfo/midpoint</a><br>
<br>
</blockquote>
</div>
<br>
<br clear="all">
<br>
-- <br>
<div class="m_5306763014934344982gmail_signature" data-smartmail="gmail_signature">
<div dir="ltr">
<div>
<div dir="ltr"><span style="color:#4c4c4c">Best regards, <br>
<br>
Oleksandr Nekriach | Identity and access management
engineer <br>
<br>
Dynatech, Mednieku str. 4a, Riga, LV-1010, Latvia <br>
<br>
<div style="display:inline-block"><a href="tel:+371%2025%20314%20685" value="+37125314685" target="_blank">+37125314685</a></div>
,
<div style="display:inline-block"><a href="mailto:o.nekriach@dynatech.lv" target="_blank">o.nekriach@dynatech.lv</a></div>
|
<div style="display:inline-block"><a href="http://www.dynatech.lv" target="_blank">www.dynatech.lv</a></div>
<br>
<br>
<img src="cid:part21.6D20B85C.C5A5F786@evolveum.com"> <br>
<br>
Stay connected: <br>
<div style="display:inline-block;margin:5px 5px 0 0"><a href="https://www.facebook.com/DynatechLatvia/?ref=br_rs" target="_blank"><img src="cid:part22.8C4EE2BC.C139D467@evolveum.com"></a></div>
<div style="display:inline-block;margin:5px 0 0 0"><a href="https://www.linkedin.com/company-beta/17893047/" target="_blank"><img src="cid:part24.A8D3CAD7.543C8D4F@evolveum.com"></a></div>
<br>
<br>
<span style="font-size:11px;color:#a1a1a1">Confidentiality
Notice: This message contains confidential
information and is intended only for the named
recipient(s). If you are not the addressee you may
not copy, distribute or perform any other activities
with this information. If you have received this
transmission in error, please notify us by e-mail
immediately. E-mail transmission cannot be
guaranteed to be secure or error-free as information
could be intercepted, corrupted, lost, destroyed,
arrive late or incomplete, or contain viruses.</span></span></div>
</div>
</div>
</div>
</div>
<br>
<fieldset class="m_5306763014934344982mimeAttachmentHeader"></fieldset>
<br>
<pre>______________________________<wbr>_________________
midPoint mailing list
<a class="m_5306763014934344982moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a>
<a class="m_5306763014934344982moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/<wbr>mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
</div></div><span class="HOEnZb"><font color="#888888"><pre class="m_5306763014934344982moz-signature" cols="72">--
Ivan Noris
Senior Identity Engineer
<a href="http://evolveum.com" target="_blank">evolveum.com</a>
</pre>
</font></span></div>
<br>______________________________<wbr>_________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">http://lists.evolveum.com/<wbr>mailman/listinfo/midpoint</a><br>
<br></blockquote></div><br><br clear="all"><br>-- <br><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><span style="color:#4c4c4c">Best regards, <br><br>Oleksandr Nekriach | Identity and access management engineer <br><br>Dynatech, Mednieku str. 4a, Riga, LV-1010, Latvia <br><br><div style="display:inline-block"><a href="tel:+371%2025%20314%20685" value="+37125314685" target="_blank">+37125314685</a></div>, <div style="display:inline-block"><a href="mailto:o.nekriach@dynatech.lv" target="_blank">o.nekriach@dynatech.lv</a></div> | <div style="display:inline-block"><a href="http://www.dynatech.lv" target="_blank">www.dynatech.lv</a></div> <br><br><img src="cid:o.nekriach@dynatech.lv1502777022855-7770"> <br><br>Stay connected: <br><div style="display:inline-block;margin:5px 5px 0 0"><a href="https://www.facebook.com/DynatechLatvia/?ref=br_rs" target="_blank"><img src="cid:o.nekriach@dynatech.lv1502777022855-7771"></a></div><div style="display:inline-block;margin:5px 0 0 0"><a href="https://www.linkedin.com/company-beta/17893047/" target="_blank"><img src="cid:o.nekriach@dynatech.lv1502777022855-7772"></a></div><br><br><span style="font-size:11px;color:#a1a1a1">Confidentiality
Notice: This message contains confidential information and is intended
only for the named recipient(s). If you are not the addressee you may
not copy, distribute or perform any other activities with this
information. If you have received this transmission in error, please
notify us by e-mail immediately. E-mail transmission cannot be
guaranteed to be secure or error-free as information could be
intercepted, corrupted, lost, destroyed, arrive late or incomplete, or
contain viruses.</span></span></div></div></div></div>
</div>