<div dir="ltr"><div>Hi Ivan,<br></div>We have added to OpenLdap memberOf overlay (see config below). But I don't sure that is good idea to remove it. Do you have some idea?<br><br>dn: cn=module{2},cn=config<br>cn: module{2}<br>changetype: modify<br>objectClass: olcModuleList<br>olcModuleLoad: memberof<br>olcModulePath: /usr/lib/ldap<br><br>dn: olcOverlay={0}memberof,olcDatabase={1}mdb,cn=config<br>objectClass: olcConfig<br>objectClass: olcMemberOf<br>objectClass: olcOverlayConfig<br>objectClass: top<br>olcOverlay: memberof<br>olcMemberOfDangling: ignore<br>olcMemberOfRefInt: TRUE<br>olcMemberOfGroupOC: groupOfNames<br>olcMemberOfMemberAD: member<br>olcMemberOfMemberOfAD: memberOf<br></div><div class="gmail_extra"><br><div class="gmail_quote">2017-09-27 15:49 GMT+03:00 Ivan Noris <span dir="ltr"><<a href="mailto:ivan.noris@evolveum.com" target="_blank">ivan.noris@evolveum.com</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div text="#000000" bgcolor="#FFFFFF">
<p>Hi Oleksandr,</p>
<p>you have association set with explicitReferentialIntegrity, that
means midpoint will update group membership if user DN changes.
Could this collide with your OpenLDAP refint overlay (or whatever
is the name for automatic referential integrity)?<br>
</p>
I<div><div class="h5"><br>
<br>
<div class="m_2017915729427977816moz-cite-prefix">On 27.09.2017 13:28, Oleksandr Nekriach
wrote:<br>
</div>
</div></div><blockquote type="cite"><div><div class="h5">
<div dir="ltr">
<div>Hello,<br>
</div>
<div>Please help me understand what is wrong.<br>
</div>
<div>I have role which assign a group to OpenLdap resource
acount. Also I have resource with expresion which dynamical
calculates Distinguished Name and has dependency on source
attribute "Locality". Also I expand ldap resource schema with
memberOf attribute.<br>
</div>
<div>When I change Locality attribute I get an error <br>
InvalidAttributeValueException<wbr>: Error modifying LDAP entry
cn=TestRole_forMidpoint_2,ou=<wbr>InternalGroups,ou=Groups,ou=<wbr>MD,dc=dyninno,dc=test:
[remove:member:
uid=Oleksandr.Nekriach,ou=<wbr>Agents,ou=Users,ou=MD,dc=<wbr>dyninno,dc=test,]:
noSuchAttribute: (16)<br>
</div>
<div><br>
</div>
I can't understand why I got this error if resource account was
modified successfuly as I want.<br>
<div>
<div>
<div>
<div><br>
<displayName>TestRole_<wbr>forMidpoint</displayName><br>
<inducement id="5"><br>
<construction><br>
<resourceRef
oid="00000000-0004-0000-0000-<wbr>00000000004"<br>
relation="org:default"<br>
type="c:ResourceType"><!--
myOpenLDAP4 --></resourceRef><br>
<association><br>
<c:ref>ri:Group</c:ref><br>
<outbound><br>
<expression><br>
<associationTargetSearch
xmlns:xsi="<a href="http://www.w3.org/2001/XMLSchema-instance" target="_blank">http://www.w3.org/<wbr>2001/XMLSchema-instance</a>"<br>
<wbr>
xsi:type="c:<wbr>SearchObjectExpressionEvaluato<wbr>rType"><br>
<filter><br>
<q:equal><br>
<q:path>declare
namespace icfs='<a href="http://midpoint.evolveum.com/xml/ns/public/connector/icf-1/resource-schema-3" target="_blank">http://midpoint.<wbr>evolveum.com/xml/ns/public/<wbr>connector/icf-1/resource-<wbr>schema-3</a>';
declare namespace ri='<a href="http://midpoint.evolveum.com/xml/ns/public/resource/instance-3" target="_blank">http://midpoint.evolveum.<wbr>com/xml/ns/public/resource/<wbr>instance-3</a>';
attributes/ri:cn</q:path><br>
<q:value>TestRole_forMidpoint_<wbr>2</q:value><br>
</q:equal><br>
</filter><br>
<searchOnResource>true</<wbr>searchOnResource><br>
</associationTargetSearch><br>
</expression><br>
</outbound><br>
</association><br>
</construction><br>
</inducement><br>
<br>
<attribute><br>
<c:ref>ri:dn</c:ref><br>
<displayName>Distinguished
Name</displayName><br>
<matchingRule xmlns:mr="<a href="http://prism.evolveum.com/xml/ns/public/matching-rule-3" target="_blank">http://prism.<wbr>evolveum.com/xml/ns/public/<wbr>matching-rule-3</a>">mr:<wbr>distinguishedName</<wbr>matchingRule><br>
<outbound><br>
<strength>strong</strength><br>
<source><br>
<c:path>$user/name</c:path><br>
</source><br>
<source><br>
<c:path>$user/description</c:<wbr>path><br>
</source><br>
<source><br>
<c:path>$user/locality</c:<wbr>path><br>
</source><br>
<expression><br>
<script
xsi:type="c:<wbr>ScriptExpressionEvaluatorType"<wbr>><br>
<code><br>
String
rightPartOfDN=",ou=<wbr>InternalUsers,ou=Users,ou=LV";<br>
String dc=",dc=dyninno,dc=test";<br>
if(name!=null &&
description!=null && locality!=null){<br>
if(locality.toString().<wbr>equalsIgnoreCase("RIX")
&&
description.toString().<wbr>contains("Agent")){<br>
rightPartOfDN=",ou=Agents,ou=<wbr>Users,ou=LV";<br>
}<br>
if(locality.toString().<wbr>equalsIgnoreCase("KIV")
&&
description.toString().<wbr>contains("Agent")){<br>
rightPartOfDN=",ou=Agents,ou=<wbr>Users,ou=MD";<br>
}<br>
}<br>
return "uid=" + name.toString()
+ iterationToken + rightPartOfDN+dc;<br>
</code><br>
</script><br>
</expression><br>
</outbound><br>
</attribute><br>
<br>
<br>
<br>
2017-09-27 13:59:42,925 [] [Thread-24] WARN
(com.evolveum.polygon.<wbr>connector.ldap.schema.<wbr>AbstractSchemaTranslator):
method: null msg:Uknown attribute
1.3.6.1.4.1.1466.115.121.1.15, cannot determine if it is
binary<br>
2017-09-27 13:59:42,939 [] [Thread-23] WARN
(com.evolveum.midpoint.<wbr>provisioning.impl.<wbr>ResourceObjectConverter):
The resource: myOpenLDAP4
(OID:00000000-0004-0000-0000-<wbr>00000000004) does not
provide definition for null value of simulated
activation attribute<br>
2017-09-27 13:59:43,893 [] [Thread-23] WARN
(com.evolveum.polygon.<wbr>connector.ldap.schema.<wbr>AbstractSchemaTranslator):
method: null msg:Uknown attribute
1.3.6.1.4.1.1466.115.121.1.15, cannot determine if it is
binary<br>
2017-09-27 13:59:44,410 [] [Thread-23] WARN
(com.evolveum.polygon.<wbr>connector.ldap.schema.<wbr>AbstractSchemaTranslator):
method: null msg:Uknown attribute
1.3.6.1.4.1.1466.115.121.1.15, cannot determine if it is
binary<br>
2017-09-27 13:59:44,712 [] [Thread-23] WARN
(com.evolveum.polygon.<wbr>connector.ldap.schema.<wbr>AbstractSchemaTranslator):
method: null msg:Uknown attribute
1.3.6.1.4.1.1466.115.121.1.12, cannot determine if it is
binary<br>
2017-09-27 13:59:45,077 [] [Thread-23] WARN
(com.evolveum.polygon.<wbr>connector.ldap.schema.<wbr>AbstractSchemaTranslator):
method: null msg:Uknown attribute
1.3.6.1.4.1.1466.115.121.1.12, cannot determine if it is
binary<br>
2017-09-27 13:59:45,120 [] [Thread-23] ERROR
(com.evolveum.midpoint.<wbr>provisioning.ucf.impl.connid.<wbr>ConnIdUtil):
ConnId Exception
org.identityconnectors.<wbr>framework.common.exceptions.<wbr>InvalidAttributeValueException
in connector:cb288b2c-1e5f-4b78-<wbr>924e-a215b723137d(ConnId
com.evolveum.polygon.<wbr>connector.ldap.LdapConnector
v1.4.5):
ConnectorSpec(object:00000000-<wbr>0004-0000-0000-00000000004(<wbr>myOpenLDAP4),
name=null, oid=cb288b2c-1e5f-4b78-924e-<wbr>a215b723137d)
while removing attribute values from object identified
by ConnId UID '57ef6422-32fa-1037-9380-<wbr>3b12ae02d26c':
Error modifying LDAP entry
cn=TestRole_forMidpoint_2,ou=<wbr>InternalGroups,ou=Groups,ou=<wbr>MD,dc=dyninno,dc=test:
[remove:member:
uid=Oleksandr.Nekriach,ou=<wbr>Agents,ou=Users,ou=MD,dc=<wbr>dyninno,dc=test,]:
noSuchAttribute: (16)<br>
org.identityconnectors.<wbr>framework.common.exceptions.<wbr>InvalidAttributeValueException<wbr>:
Error modifying LDAP entry
cn=TestRole_forMidpoint_2,ou=<wbr>InternalGroups,ou=Groups,ou=<wbr>MD,dc=dyninno,dc=test:
[remove:member:
uid=Oleksandr.Nekriach,ou=<wbr>Agents,ou=Users,ou=MD,dc=<wbr>dyninno,dc=test,]:
noSuchAttribute: (16)<br>
at
com.evolveum.polygon.<wbr>connector.ldap.LdapUtil.<wbr>processLdapResult(LdapUtil.<wbr>java:455)
~[connector-ldap-1.4.5.jar:na]<br>
at
com.evolveum.polygon.<wbr>connector.ldap.<wbr>AbstractLdapConnector.<wbr>processModifyResult(<wbr>AbstractLdapConnector.java:<wbr>1119)
~[connector-ldap-1.4.5.jar:na]<br>
at
com.evolveum.polygon.<wbr>connector.ldap.<wbr>AbstractLdapConnector.modify(<wbr>AbstractLdapConnector.java:<wbr>1110)
~[connector-ldap-1.4.5.jar:na]<br>
at
com.evolveum.polygon.<wbr>connector.ldap.<wbr>AbstractLdapConnector.<wbr>ldapUpdateAttempt(<wbr>AbstractLdapConnector.java:<wbr>1060)
~[connector-ldap-1.4.5.jar:na]<br>
at
com.evolveum.polygon.<wbr>connector.ldap.<wbr>AbstractLdapConnector.<wbr>ldapUpdate(<wbr>AbstractLdapConnector.java:<wbr>1019)
~[connector-ldap-1.4.5.jar:na]<br>
at
com.evolveum.polygon.<wbr>connector.ldap.<wbr>AbstractLdapConnector.<wbr>removeAttributeValues(<wbr>AbstractLdapConnector.java:<wbr>990)
~[connector-ldap-1.4.5.jar:na]<br>
at
org.identityconnectors.<wbr>framework.impl.api.local.<wbr>operations.UpdateImpl.<wbr>removeAttributeValues(<wbr>UpdateImpl.java:171)
~[connector-framework-<wbr>internal-1.4.2.35.jar:na]<br>
at
sun.reflect.<wbr>NativeMethodAccessorImpl.<wbr>invoke0(Native
Method) ~[na:1.8.0_131]<br>
at
sun.reflect.<wbr>NativeMethodAccessorImpl.<wbr>invoke(<wbr>NativeMethodAccessorImpl.java:<wbr>62)
~[na:1.8.0_131]<br>
at
sun.reflect.<wbr>DelegatingMethodAccessorImpl.<wbr>invoke(<wbr>DelegatingMethodAccessorImpl.<wbr>java:43)
~[na:1.8.0_131]<br>
at
java.lang.reflect.Method.<wbr>invoke(Method.java:498)
~[na:1.8.0_131]<br>
at
org.identityconnectors.<wbr>framework.impl.api.local.<wbr>operations.<wbr>ConnectorAPIOperationRunnerPro<wbr>xy.invoke(<wbr>ConnectorAPIOperationRunnerPro<wbr>xy.java:98)
~[connector-framework-<wbr>internal-1.4.2.35.jar:na]<br>
at
com.sun.proxy.$Proxy184.<wbr>removeAttributeValues(Unknown
Source) ~[na:na]<br>
at
sun.reflect.<wbr>NativeMethodAccessorImpl.<wbr>invoke0(Native
Method) ~[na:1.8.0_131]<br>
at
sun.reflect.<wbr>NativeMethodAccessorImpl.<wbr>invoke(<wbr>NativeMethodAccessorImpl.java:<wbr>62)
~[na:1.8.0_131]<br>
at
sun.reflect.<wbr>DelegatingMethodAccessorImpl.<wbr>invoke(<wbr>DelegatingMethodAccessorImpl.<wbr>java:43)
~[na:1.8.0_131]<br>
at
java.lang.reflect.Method.<wbr>invoke(Method.java:498)
~[na:1.8.0_131]<br>
at
org.identityconnectors.<wbr>framework.impl.api.local.<wbr>operations.<wbr>ThreadClassLoaderManagerProxy.<wbr>invoke(<wbr>ThreadClassLoaderManagerProxy.<wbr>java:96)
~[connector-framework-<wbr>internal-1.4.2.35.jar:na]<br>
at
com.sun.proxy.$Proxy184.<wbr>removeAttributeValues(Unknown
Source) ~[na:na]<br>
at
sun.reflect.<wbr>NativeMethodAccessorImpl.<wbr>invoke0(Native
Method) ~[na:1.8.0_131]<br>
at
sun.reflect.<wbr>NativeMethodAccessorImpl.<wbr>invoke(<wbr>NativeMethodAccessorImpl.java:<wbr>62)
~[na:1.8.0_131]<br>
at
sun.reflect.<wbr>DelegatingMethodAccessorImpl.<wbr>invoke(<wbr>DelegatingMethodAccessorImpl.<wbr>java:43)
~[na:1.8.0_131]<br>
at
java.lang.reflect.Method.<wbr>invoke(Method.java:498)
~[na:1.8.0_131]<br>
at
org.identityconnectors.<wbr>framework.impl.api.<wbr>DelegatingTimeoutProxy.invoke(<wbr>DelegatingTimeoutProxy.java:<wbr>99)
~[connector-framework-<wbr>internal-1.4.2.35.jar:na]<br>
at
com.sun.proxy.$Proxy184.<wbr>removeAttributeValues(Unknown
Source) ~[na:na]<br>
at
sun.reflect.<wbr>NativeMethodAccessorImpl.<wbr>invoke0(Native
Method) ~[na:1.8.0_131]<br>
at
sun.reflect.<wbr>NativeMethodAccessorImpl.<wbr>invoke(<wbr>NativeMethodAccessorImpl.java:<wbr>62)
~[na:1.8.0_131]<br>
at
sun.reflect.<wbr>DelegatingMethodAccessorImpl.<wbr>invoke(<wbr>DelegatingMethodAccessorImpl.<wbr>java:43)
~[na:1.8.0_131]<br>
at
java.lang.reflect.Method.<wbr>invoke(Method.java:498)
~[na:1.8.0_131]<br>
at
org.identityconnectors.<wbr>framework.impl.api.<wbr>LoggingProxy.invoke(<wbr>LoggingProxy.java:83)
~[connector-framework-<wbr>internal-1.4.2.35.jar:na]<br>
at
com.sun.proxy.$Proxy184.<wbr>removeAttributeValues(Unknown
Source) ~[na:na]<br>
at
org.identityconnectors.<wbr>framework.impl.api.<wbr>AbstractConnectorFacade.<wbr>removeAttributeValues(<wbr>AbstractConnectorFacade.java:<wbr>225)
~[connector-framework-<wbr>internal-1.4.2.35.jar:na]<br>
at
com.evolveum.midpoint.<wbr>provisioning.ucf.impl.connid.<wbr>ConnectorInstanceConnIdImpl.<wbr>modifyObject(<wbr>ConnectorInstanceConnIdImpl.<wbr>java:1843)
~[ucf-impl-connid-3.6.jar:na]<br>
at
com.evolveum.midpoint.<wbr>provisioning.impl.<wbr>ResourceObjectConverter.<wbr>executeModify(<wbr>ResourceObjectConverter.java:<wbr>765)
[provisioning-impl-3.6.jar:na]<br>
at
com.evolveum.midpoint.<wbr>provisioning.impl.<wbr>ResourceObjectConverter.<wbr>executeEntitlements(<wbr>ResourceObjectConverter.java:<wbr>1165)
[provisioning-impl-3.6.jar:na]<br>
at
com.evolveum.midpoint.<wbr>provisioning.impl.<wbr>ResourceObjectConverter.<wbr>executeEntitlementChangesModif<wbr>y(ResourceObjectConverter.<wbr>java:1112)
[provisioning-impl-3.6.jar:na]<br>
at
com.evolveum.midpoint.<wbr>provisioning.impl.<wbr>ResourceObjectConverter.<wbr>modifyResourceObject(<wbr>ResourceObjectConverter.java:<wbr>612)
[provisioning-impl-3.6.jar:na]<br>
at
com.evolveum.midpoint.<wbr>provisioning.impl.ShadowCache.<wbr>modifyShadow(ShadowCache.java:<wbr>684)
[provisioning-impl-3.6.jar:na]<br>
at
com.evolveum.midpoint.<wbr>provisioning.impl.<wbr>ProvisioningServiceImpl.<wbr>modifyObject(<wbr>ProvisioningServiceImpl.java:<wbr>679)
[provisioning-impl-3.6.jar:na]<br>
at
com.evolveum.midpoint.model.<wbr>impl.lens.ChangeExecutor.<wbr>modifyProvisioningObject(<wbr>ChangeExecutor.java:1397)
[model-impl-3.6.jar:na]<br>
at
com.evolveum.midpoint.model.<wbr>impl.lens.ChangeExecutor.<wbr>executeModification(<wbr>ChangeExecutor.java:1281)
[model-impl-3.6.jar:na]<br>
at
com.evolveum.midpoint.model.<wbr>impl.lens.ChangeExecutor.<wbr>executeDelta(ChangeExecutor.<wbr>java:812)
[model-impl-3.6.jar:na]<br>
at
com.evolveum.midpoint.model.<wbr>impl.lens.ChangeExecutor.<wbr>executeChanges(ChangeExecutor.<wbr>java:308)
[model-impl-3.6.jar:na]<br>
at
com.evolveum.midpoint.model.<wbr>impl.lens.Clockwork.lambda$<wbr>processSecondary$0(Clockwork.<wbr>java:481)
[model-impl-3.6.jar:na]<br>
at
com.evolveum.midpoint.model.<wbr>impl.lens.LensUtil.<wbr>partialExecute(LensUtil.java:<wbr>1253)
~[model-impl-3.6.jar:na]<br>
at
com.evolveum.midpoint.model.<wbr>impl.lens.LensUtil.<wbr>partialExecute(LensUtil.java:<wbr>1240)
~[model-impl-3.6.jar:na]<br>
at
com.evolveum.midpoint.model.<wbr>impl.lens.Clockwork.<wbr>processSecondary(Clockwork.<wbr>java:479)
[model-impl-3.6.jar:na]<br>
at
com.evolveum.midpoint.model.<wbr>impl.lens.Clockwork.click(<wbr>Clockwork.java:327)
[model-impl-3.6.jar:na]<br>
at
com.evolveum.midpoint.model.<wbr>impl.lens.Clockwork.run(<wbr>Clockwork.java:203)
[model-impl-3.6.jar:na]<br>
at
com.evolveum.midpoint.model.<wbr>impl.controller.<wbr>ModelController.<wbr>executeChanges(<wbr>ModelController.java:569)
~[model-impl-3.6.jar:na]<br>
at
sun.reflect.<wbr>NativeMethodAccessorImpl.<wbr>invoke0(Native
Method) ~[na:1.8.0_131]<br>
at
sun.reflect.<wbr>NativeMethodAccessorImpl.<wbr>invoke(<wbr>NativeMethodAccessorImpl.java:<wbr>62)
~[na:1.8.0_131]<br>
at
sun.reflect.<wbr>DelegatingMethodAccessorImpl.<wbr>invoke(<wbr>DelegatingMethodAccessorImpl.<wbr>java:43)
~[na:1.8.0_131]<br>
at
java.lang.reflect.Method.<wbr>invoke(Method.java:498)
~[na:1.8.0_131]<br>
at
org.apache.wicket.proxy.<wbr>LazyInitProxyFactory$<wbr>JdkHandler.invoke(<wbr>LazyInitProxyFactory.java:507)
~[wicket-ioc-7.6.0.jar:7.6.0]<br>
at
com.sun.proxy.$Proxy156.<wbr>executeChanges(Unknown Source)
~[na:na]<br>
at
com.evolveum.midpoint.web.<wbr>component.progress.<wbr>ProgressReporter.lambda$<wbr>executeChangesAsync$0(<wbr>ProgressReporter.java:187)
~[classes/:na]<br>
at java.lang.Thread.run(Thread.<wbr>java:748)
~[na:1.8.0_131]<br>
2017-09-27 13:59:45,129 [] [Thread-23] ERROR
(com.evolveum.midpoint.<wbr>provisioning.impl.<wbr>ResourceObjectConverter):
Error while modifying entitlement
ProvisioningContext(for RSD(entitlement (Group)
@00000000-0004-0000-0000-<wbr>00000000004) in
object:00000000-0004-0000-<wbr>0000-00000000004(myOpenLDAP4))
of ProvisioningContext(for
shadow:9873b7ed-3679-4a66-<wbr>9445-344e9b52dd34(uid=<wbr>Oleksandr.Nekriach,ou=Agents,<wbr>ou=Users,ou=MD,dc=dyninno,dc=<wbr>test)
in
object:00000000-0004-0000-<wbr>0000-00000000004(myOpenLDAP4))<wbr>:
Schema violation: Invalid attribute:
org.identityconnectors.<wbr>framework.common.exceptions.<wbr>InvalidAttributeValueException<wbr>(Error
modifying LDAP entry
cn=TestRole_forMidpoint_2,ou=<wbr>InternalGroups,ou=Groups,ou=<wbr>MD,dc=dyninno,dc=test:
[remove:member:
uid=Oleksandr.Nekriach,ou=<wbr>Agents,ou=Users,ou=MD,dc=<wbr>dyninno,dc=test,]:
noSuchAttribute: (16))<br>
com.evolveum.midpoint.util.<wbr>exception.SchemaException:
Schema violation: Invalid attribute:
org.identityconnectors.<wbr>framework.common.exceptions.<wbr>InvalidAttributeValueException<wbr>(Error
modifying LDAP entry
cn=TestRole_forMidpoint_2,ou=<wbr>InternalGroups,ou=Groups,ou=<wbr>MD,dc=dyninno,dc=test:
[remove:member:
uid=Oleksandr.Nekriach,ou=<wbr>Agents,ou=Users,ou=MD,dc=<wbr>dyninno,dc=test,]:
noSuchAttribute: (16))<br>
at
com.evolveum.midpoint.<wbr>provisioning.impl.<wbr>ResourceObjectConverter.<wbr>executeModify(<wbr>ResourceObjectConverter.java:<wbr>797)
[provisioning-impl-3.6.jar:na]<br>
at
com.evolveum.midpoint.<wbr>provisioning.impl.<wbr>ResourceObjectConverter.<wbr>executeEntitlements(<wbr>ResourceObjectConverter.java:<wbr>1165)
[provisioning-impl-3.6.jar:na]<br>
at
com.evolveum.midpoint.<wbr>provisioning.impl.<wbr>ResourceObjectConverter.<wbr>executeEntitlementChangesModif<wbr>y(ResourceObjectConverter.<wbr>java:1112)
[provisioning-impl-3.6.jar:na]<br>
at
com.evolveum.midpoint.<wbr>provisioning.impl.<wbr>ResourceObjectConverter.<wbr>modifyResourceObject(<wbr>ResourceObjectConverter.java:<wbr>612)
[provisioning-impl-3.6.jar:na]<br>
at
com.evolveum.midpoint.<wbr>provisioning.impl.ShadowCache.<wbr>modifyShadow(ShadowCache.java:<wbr>684)
[provisioning-impl-3.6.jar:na]<br>
at
com.evolveum.midpoint.<wbr>provisioning.impl.<wbr>ProvisioningServiceImpl.<wbr>modifyObject(<wbr>ProvisioningServiceImpl.java:<wbr>679)
[provisioning-impl-3.6.jar:na]<br>
at
com.evolveum.midpoint.model.<wbr>impl.lens.ChangeExecutor.<wbr>modifyProvisioningObject(<wbr>ChangeExecutor.java:1397)
[model-impl-3.6.jar:na]<br>
at
com.evolveum.midpoint.model.<wbr>impl.lens.ChangeExecutor.<wbr>executeModification(<wbr>ChangeExecutor.java:1281)
[model-impl-3.6.jar:na]<br>
at
com.evolveum.midpoint.model.<wbr>impl.lens.ChangeExecutor.<wbr>executeDelta(ChangeExecutor.<wbr>java:812)
[model-impl-3.6.jar:na]<br>
at
com.evolveum.midpoint.model.<wbr>impl.lens.ChangeExecutor.<wbr>executeChanges(ChangeExecutor.<wbr>java:308)
[model-impl-3.6.jar:na]<br>
at
com.evolveum.midpoint.model.<wbr>impl.lens.Clockwork.lambda$<wbr>processSecondary$0(Clockwork.<wbr>java:481)
[model-impl-3.6.jar:na]<br>
at
com.evolveum.midpoint.model.<wbr>impl.lens.LensUtil.<wbr>partialExecute(LensUtil.java:<wbr>1253)
~[model-impl-3.6.jar:na]<br>
at
com.evolveum.midpoint.model.<wbr>impl.lens.LensUtil.<wbr>partialExecute(LensUtil.java:<wbr>1240)
~[model-impl-3.6.jar:na]<br>
at
com.evolveum.midpoint.model.<wbr>impl.lens.Clockwork.<wbr>processSecondary(Clockwork.<wbr>java:479)
[model-impl-3.6.jar:na]<br>
at
com.evolveum.midpoint.model.<wbr>impl.lens.Clockwork.click(<wbr>Clockwork.java:327)
[model-impl-3.6.jar:na]<br>
at
com.evolveum.midpoint.model.<wbr>impl.lens.Clockwork.run(<wbr>Clockwork.java:203)
[model-impl-3.6.jar:na]<br>
at
com.evolveum.midpoint.model.<wbr>impl.controller.<wbr>ModelController.<wbr>executeChanges(<wbr>ModelController.java:569)
~[model-impl-3.6.jar:na]<br>
at
sun.reflect.<wbr>NativeMethodAccessorImpl.<wbr>invoke0(Native
Method) ~[na:1.8.0_131]<br>
at
sun.reflect.<wbr>NativeMethodAccessorImpl.<wbr>invoke(<wbr>NativeMethodAccessorImpl.java:<wbr>62)
~[na:1.8.0_131]<br>
at
sun.reflect.<wbr>DelegatingMethodAccessorImpl.<wbr>invoke(<wbr>DelegatingMethodAccessorImpl.<wbr>java:43)
~[na:1.8.0_131]<br>
at
java.lang.reflect.Method.<wbr>invoke(Method.java:498)
~[na:1.8.0_131]<br>
at
org.apache.wicket.proxy.<wbr>LazyInitProxyFactory$<wbr>JdkHandler.invoke(<wbr>LazyInitProxyFactory.java:507)
~[wicket-ioc-7.6.0.jar:7.6.0]<br>
at
com.sun.proxy.$Proxy156.<wbr>executeChanges(Unknown Source)
~[na:na]<br>
at
com.evolveum.midpoint.web.<wbr>component.progress.<wbr>ProgressReporter.lambda$<wbr>executeChangesAsync$0(<wbr>ProgressReporter.java:187)
~[classes/:na]<br>
at java.lang.Thread.run(Thread.<wbr>java:748)
~[na:1.8.0_131]<br>
Caused by:
com.evolveum.midpoint.util.<wbr>exception.SchemaException:
Invalid attribute:
org.identityconnectors.<wbr>framework.common.exceptions.<wbr>InvalidAttributeValueException<wbr>(Error
modifying LDAP entry
cn=TestRole_forMidpoint_2,ou=<wbr>InternalGroups,ou=Groups,ou=<wbr>MD,dc=dyninno,dc=test:
[remove:member:
uid=Oleksandr.Nekriach,ou=<wbr>Agents,ou=Users,ou=MD,dc=<wbr>dyninno,dc=test,]:
noSuchAttribute: (16))<br>
at
com.evolveum.midpoint.<wbr>provisioning.ucf.impl.connid.<wbr>ConnIdUtil.lookForKnownCause(<wbr>ConnIdUtil.java:352)
~[ucf-impl-connid-3.6.jar:na]<br>
at
com.evolveum.midpoint.<wbr>provisioning.ucf.impl.connid.<wbr>ConnIdUtil.<wbr>processIcfException(<wbr>ConnIdUtil.java:215)
~[ucf-impl-connid-3.6.jar:na]<br>
at
com.evolveum.midpoint.<wbr>provisioning.ucf.impl.connid.<wbr>ConnectorInstanceConnIdImpl.<wbr>modifyObject(<wbr>ConnectorInstanceConnIdImpl.<wbr>java:1850)
~[ucf-impl-connid-3.6.jar:na]<br>
at
com.evolveum.midpoint.<wbr>provisioning.impl.<wbr>ResourceObjectConverter.<wbr>executeModify(<wbr>ResourceObjectConverter.java:<wbr>765)
[provisioning-impl-3.6.jar:na]<br>
... 24 common frames omitted<br>
<br>
<br>
-- <br>
<div class="m_2017915729427977816gmail_signature">
<div dir="ltr">
<div>
<div dir="ltr"><span style="color:rgb(76,76,76)">Best
regards, <br>
<br>
Oleksandr Nekriach | Identity and access
management engineer <br>
<br>
Dynatech, Mednieku str. 4a, Riga, LV-1010,
Latvia <br>
<br>
<div style="display:inline-block"><a href="tel:+371%2025%20314%20685" value="+37125314685" target="_blank">+37125314685</a></div>
,
<div style="display:inline-block"><a href="mailto:o.nekriach@dynatech.lv" target="_blank">o.nekriach@dynatech.lv</a></div>
|
<div style="display:inline-block"><a href="http://www.dynatech.lv" target="_blank">www.dynatech.lv</a></div>
<br>
<br>
<img src="cid:part8.A2D2A2D0.F10B5A17@evolveum.com"> <br>
<br>
Stay connected: <br>
<div style="display:inline-block;margin:5px 5px 0px 0px"><a href="https://www.facebook.com/DynatechLatvia/?ref=br_rs" target="_blank"><img src="cid:part9.82A90F55.6C3E52D4@evolveum.com"></a></div>
<div style="display:inline-block;margin:5px 0px 0px"><a href="https://www.linkedin.com/company-beta/17893047/" target="_blank"><img src="cid:part11.1DE67174.83AF6AC6@evolveum.com"></a></div>
<br>
<br>
<span style="font-size:11px;color:rgb(161,161,161)">Confidentiality
Notice: This message contains confidential
information and is intended only for the
named recipient(s). If you are not the
addressee you may not copy, distribute or
perform any other activities with this
information. If you have received this
transmission in error, please notify us by
e-mail immediately. E-mail transmission
cannot be guaranteed to be secure or
error-free as information could be
intercepted, corrupted, lost, destroyed,
arrive late or incomplete, or contain
viruses.</span></span></div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<br>
<fieldset class="m_2017915729427977816mimeAttachmentHeader"></fieldset>
<br>
</div></div><pre>______________________________<wbr>_________________
midPoint mailing list
<a class="m_2017915729427977816moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a>
<a class="m_2017915729427977816moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/<wbr>mailman/listinfo/midpoint</a><span class="HOEnZb"><font color="#888888">
</font></span></pre><span class="HOEnZb"><font color="#888888">
</font></span></blockquote><span class="HOEnZb"><font color="#888888">
<br>
<pre class="m_2017915729427977816moz-signature" cols="72">--
Ivan Noris
Senior Identity Engineer
<a href="http://evolveum.com" target="_blank">evolveum.com</a>
</pre>
</font></span></div>
<br>______________________________<wbr>_________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">http://lists.evolveum.com/<wbr>mailman/listinfo/midpoint</a><br>
<br></blockquote></div><br><br clear="all"><br>-- <br><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><span style="color:#4c4c4c">Best regards, <br><br>Oleksandr Nekriach | Identity and access management engineer <br><br>Dynatech, Mednieku str. 4a, Riga, LV-1010, Latvia <br><br><div style="display:inline-block"><a href="tel:+371%2025%20314%20685" value="+37125314685" target="_blank">+37125314685</a></div>, <div style="display:inline-block"><a href="mailto:o.nekriach@dynatech.lv" target="_blank">o.nekriach@dynatech.lv</a></div> | <div style="display:inline-block"><a href="http://www.dynatech.lv" target="_blank">www.dynatech.lv</a></div> <br><br><img src="cid:o.nekriach@dynatech.lv1502777022855-7770"> <br><br>Stay connected: <br><div style="display:inline-block;margin:5px 5px 0 0"><a href="https://www.facebook.com/DynatechLatvia/?ref=br_rs" target="_blank"><img src="cid:o.nekriach@dynatech.lv1502777022855-7771"></a></div><div style="display:inline-block;margin:5px 0 0 0"><a href="https://www.linkedin.com/company-beta/17893047/" target="_blank"><img src="cid:o.nekriach@dynatech.lv1502777022855-7772"></a></div><br><br><span style="font-size:11px;color:#a1a1a1">Confidentiality
Notice: This message contains confidential information and is intended
only for the named recipient(s). If you are not the addressee you may
not copy, distribute or perform any other activities with this
information. If you have received this transmission in error, please
notify us by e-mail immediately. E-mail transmission cannot be
guaranteed to be secure or error-free as information could be
intercepted, corrupted, lost, destroyed, arrive late or incomplete, or
contain viruses.</span></span></div></div></div></div>
</div>