<div dir="ltr">Dear Jan,<div><br></div><div>it seems more like a problem with mappings. The error message says that midpoint tries to put two different values into attribute __NAME__ of shadow (AD account).</div><div><br></div><div>My theory is that inbound mapping from AD gets a different name than inbound mapping from CSV and midpoint then executes outbound mappings which have different results in the upper/lower-case. Try it without inbound mapping in AD resource to confirm it.</div><div><br></div><div>Best Regards</div><div>Oskar Butovič</div><div class="gmail_extra"><br><div class="gmail_quote">2017-12-10 20:36 GMT+01:00 Jan Kaspar <span dir="ltr"><<a href="mailto:Caspi@seznam.cz" target="_blank">Caspi@seznam.cz</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div><span style="color:rgb(51,51,51);font-family:'Source Sans Pro','Helvetica Neue',Helvetica,Arial,sans-serif;font-size:14px">Hi All, </span></div><div style="color:rgb(51,51,51);font-family:'Source Sans Pro','Helvetica Neue',Helvetica,Arial,sans-serif;font-size:14px"><span style="color:rgb(51,51,51);font-family:'Source Sans Pro','Helvetica Neue',Helvetica,Arial,sans-serif;font-size:14px"><br></span></div><div style="color:rgb(51,51,51);font-family:'Source Sans Pro','Helvetica Neue',Helvetica,Arial,sans-serif;font-size:14px"><span style="color:rgb(51,51,51);font-family:'Source Sans Pro','Helvetica Neue',Helvetica,Arial,sans-serif;font-size:14px">I have another question for setup. </span><span style="background-color:transparent">I have two sources CSV and AD LDAP. </span></div><div style="color:rgb(51,51,51);font-family:'Source Sans Pro','Helvetica Neue',Helvetica,Arial,sans-serif;font-size:14px"><span style="background-color:transparent">I am creating users from CSV in MidPoint and then I am matching it with existing accounts in AD.</span><br></div><div style="color:rgb(51,51,51);font-family:'Source Sans Pro','Helvetica Neue',Helvetica,Arial,sans-serif;font-size:14px"><span style="background-color:transparent">Currently i am expiriencing problem with case sensitivity in correlation rule.</span><br></div><div style="color:rgb(51,51,51);font-family:'Source Sans Pro','Helvetica Neue',Helvetica,Arial,sans-serif;font-size:14px"><br></div><div style="color:rgb(51,51,51);font-family:'Source Sans Pro','Helvetica Neue',Helvetica,Arial,sans-serif;font-size:14px">Template user (generating username)</div><div style="color:rgb(51,51,51);font-family:'Source Sans Pro','Helvetica Neue',Helvetica,Arial,sans-serif;font-size:14px"><br></div><div><div><font color="#333333" face="Source Sans Pro, Helvetica Neue, Helvetica, Arial, sans-serif"><span style="font-size:14px"> <mapping></span></font></div><div><font color="#333333" face="Source Sans Pro, Helvetica Neue, Helvetica, Arial, sans-serif"><span style="font-size:14px"> <source></span></font></div><div><font color="#333333" face="Source Sans Pro, Helvetica Neue, Helvetica, Arial, sans-serif"><span style="font-size:14px"> <c:path>$user/givenName</c:<wbr>path></span></font></div><div><font color="#333333" face="Source Sans Pro, Helvetica Neue, Helvetica, Arial, sans-serif"><span style="font-size:14px"> </source></span></font></div><div><font color="#333333" face="Source Sans Pro, Helvetica Neue, Helvetica, Arial, sans-serif"><span style="font-size:14px"> <source></span></font></div><div><font color="#333333" face="Source Sans Pro, Helvetica Neue, Helvetica, Arial, sans-serif"><span style="font-size:14px"> <c:path>$user/familyName</c:<wbr>path></span></font></div><div><font color="#333333" face="Source Sans Pro, Helvetica Neue, Helvetica, Arial, sans-serif"><span style="font-size:14px"> </source></span></font></div><div><font color="#333333" face="Source Sans Pro, Helvetica Neue, Helvetica, Arial, sans-serif"><span style="font-size:14px"> <expression></span></font></div><div><font color="#333333" face="Source Sans Pro, Helvetica Neue, Helvetica, Arial, sans-serif"><span style="font-size:14px"> <script xmlns:xsi="<a href="http://www.w3.org/2001/XMLSchema-instance" target="_blank">http://www.w3.org/<wbr>2001/XMLSchema-instance</a>"</span></font></div><div><font color="#333333" face="Source Sans Pro, Helvetica Neue, Helvetica, Arial, sans-serif"><span style="font-size:14px"> xsi:type="c:<wbr>ScriptExpressionEvaluatorType"<wbr>></span></font></div><div><font color="#333333" face="Source Sans Pro, Helvetica Neue, Helvetica, Arial, sans-serif"><span style="font-size:14px"> <code>(givenName == null ? '' : givenName) + ' ' + (familyName == null ? '' : familyName)</code></span></font></div><div><font color="#333333" face="Source Sans Pro, Helvetica Neue, Helvetica, Arial, sans-serif"><span style="font-size:14px"> </script></span></font></div><div><font color="#333333" face="Source Sans Pro, Helvetica Neue, Helvetica, Arial, sans-serif"><span style="font-size:14px"> </expression></span></font></div><div><font color="#333333" face="Source Sans Pro, Helvetica Neue, Helvetica, Arial, sans-serif"><span style="font-size:14px"> <target></span></font></div><div><font color="#333333" face="Source Sans Pro, Helvetica Neue, Helvetica, Arial, sans-serif"><span style="font-size:14px"> <c:path>fullName</c:path></span></font></div><div><font color="#333333" face="Source Sans Pro, Helvetica Neue, Helvetica, Arial, sans-serif"><span style="font-size:14px"> </target></span></font></div><div><font color="#333333" face="Source Sans Pro, Helvetica Neue, Helvetica, Arial, sans-serif"><span style="font-size:14px"> </mapping></span></font></div></div><div style="color:rgb(51,51,51);font-family:'Source Sans Pro','Helvetica Neue',Helvetica,Arial,sans-serif;font-size:14px"><br></div><div style="color:rgb(51,51,51);font-family:'Source Sans Pro','Helvetica Neue',Helvetica,Arial,sans-serif;font-size:14px">Attirbute sAMAccountName in AD-LDAP</div><div style="color:rgb(51,51,51);font-family:'Source Sans Pro','Helvetica Neue',Helvetica,Arial,sans-serif;font-size:14px"><br></div><div><div><font color="#333333" face="Source Sans Pro, Helvetica Neue, Helvetica, Arial, sans-serif"><span style="font-size:14px"><attribute></span></font></div><div><font color="#333333" face="Source Sans Pro, Helvetica Neue, Helvetica, Arial, sans-serif"><span style="font-size:14px"> <c:ref>ri:sAMAccountName</c:<wbr>ref></span></font></div><div><font color="#333333" face="Source Sans Pro, Helvetica Neue, Helvetica, Arial, sans-serif"><span style="font-size:14px"> <displayName>Login name</displayName></span></font></div><div><font color="#333333" face="Source Sans Pro, Helvetica Neue, Helvetica, Arial, sans-serif"><span style="font-size:14px"> <matchingRule xmlns:gen68="<a href="http://prism.evolveum.com/xml/ns/public/matching-rule-3" target="_blank">http://prism.<wbr>evolveum.com/xml/ns/public/<wbr>matching-rule-3</a>">gen68:<wbr>stringIgnoreCase</<wbr>matchingRule></span></font></div><div><font color="#333333" face="Source Sans Pro, Helvetica Neue, Helvetica, Arial, sans-serif"><span style="font-size:14px"> <tolerant>true</tolerant></span></font></div><div><font color="#333333" face="Source Sans Pro, Helvetica Neue, Helvetica, Arial, sans-serif"><span style="font-size:14px"> <exclusiveStrong>false</<wbr>exclusiveStrong></span></font></div><div><font color="#333333" face="Source Sans Pro, Helvetica Neue, Helvetica, Arial, sans-serif"><span style="font-size:14px"> <outbound></span></font></div><div><font color="#333333" face="Source Sans Pro, Helvetica Neue, Helvetica, Arial, sans-serif"><span style="font-size:14px"> <authoritative>false</<wbr>authoritative></span></font></div><div><font color="#333333" face="Source Sans Pro, Helvetica Neue, Helvetica, Arial, sans-serif"><span style="font-size:14px"> <exclusive>false</exclusive></span></font></div><div><font color="#333333" face="Source Sans Pro, Helvetica Neue, Helvetica, Arial, sans-serif"><span style="font-size:14px"> <strength>normal</strength></span></font></div><div><font color="#333333" face="Source Sans Pro, Helvetica Neue, Helvetica, Arial, sans-serif"><span style="font-size:14px"> <source></span></font></div><div><font color="#333333" face="Source Sans Pro, Helvetica Neue, Helvetica, Arial, sans-serif"><span style="font-size:14px"> <c:path>$user/name</c:path></span></font></div><div><font color="#333333" face="Source Sans Pro, Helvetica Neue, Helvetica, Arial, sans-serif"><span style="font-size:14px"> </source></span></font></div><div><font color="#333333" face="Source Sans Pro, Helvetica Neue, Helvetica, Arial, sans-serif"><span style="font-size:14px"> </outbound></span></font></div><div><font color="#333333" face="Source Sans Pro, Helvetica Neue, Helvetica, Arial, sans-serif"><span style="font-size:14px"> <inbound></span></font></div><div><font color="#333333" face="Source Sans Pro, Helvetica Neue, Helvetica, Arial, sans-serif"><span style="font-size:14px"> <authoritative>true</<wbr>authoritative></span></font></div><div><font color="#333333" face="Source Sans Pro, Helvetica Neue, Helvetica, Arial, sans-serif"><span style="font-size:14px"> <exclusive>false</exclusive></span></font></div><div><font color="#333333" face="Source Sans Pro, Helvetica Neue, Helvetica, Arial, sans-serif"><span style="font-size:14px"> <strength>normal</strength></span></font></div><div><font color="#333333" face="Source Sans Pro, Helvetica Neue, Helvetica, Arial, sans-serif"><span style="font-size:14px"> <target></span></font></div><div><font color="#333333" face="Source Sans Pro, Helvetica Neue, Helvetica, Arial, sans-serif"><span style="font-size:14px"> <c:path>$focus/name</c:path></span></font></div><div><font color="#333333" face="Source Sans Pro, Helvetica Neue, Helvetica, Arial, sans-serif"><span style="font-size:14px"> </target></span></font></div><div><font color="#333333" face="Source Sans Pro, Helvetica Neue, Helvetica, Arial, sans-serif"><span style="font-size:14px"> </inbound></span></font></div><div><font color="#333333" face="Source Sans Pro, Helvetica Neue, Helvetica, Arial, sans-serif"><span style="font-size:14px"> </attribute></span></font></div></div><div style="color:rgb(51,51,51);font-family:'Source Sans Pro','Helvetica Neue',Helvetica,Arial,sans-serif;font-size:14px"><span style="color:rgb(51,51,51);font-family:'Source Sans Pro','Helvetica Neue',Helvetica,Arial,sans-serif;font-size:14px"><br></span></div><div style="color:rgb(51,51,51);font-family:'Source Sans Pro','Helvetica Neue',Helvetica,Arial,sans-serif;font-size:14px"><span style="color:rgb(51,51,51);font-family:'Source Sans Pro','Helvetica Neue',Helvetica,Arial,sans-serif;font-size:14px">Sync of accounts:</span></div><div style="color:rgb(51,51,51);font-family:'Source Sans Pro','Helvetica Neue',Helvetica,Arial,sans-serif;font-size:14px"><span style="color:rgb(51,51,51);font-family:'Source Sans Pro','Helvetica Neue',Helvetica,Arial,sans-serif;font-size:14px"><br></span></div><div style="color:rgb(51,51,51);font-family:'Source Sans Pro','Helvetica Neue',Helvetica,Arial,sans-serif;font-size:14px"><span style="color:rgb(51,51,51);font-family:'Source Sans Pro','Helvetica Neue',Helvetica,Arial,sans-serif;font-size:14px"><div> <synchronization></div><div> <objectSynchronization></div><div> <name>Account sync</name></div><div> <objectClass>ri:user</<wbr>objectClass></div><div> <kind>account</kind></div><div> <intent>default</intent></div><div> <enabled>true</enabled></div><div> <correlation></div><div> <q:equal></div><div> <q:matching><span style="font-family:monospace">polyStringNorm</span></<wbr>q:matching></div><div> <q:path>c:name</q:path></div><div> <expression xmlns=""></div><div> <path>$shadow/attributes/<wbr>sAMAccountName</path></div><div> </expression></div><div> </q:equal></div><div> </correlation></div><div> <reconcile>false</reconcile></div><div> <reaction></div><div> <situation>linked</situation></div><div> <synchronize>true</<wbr>synchronize></div><div> </reaction></div><div> <reaction></div><div> <situation>deleted</situation></div><div> <action ref="<a href="http://midpoint.evolveum.com/xml/ns/public/model/action-3#unlink" target="_blank">http://midpoint.evolveum.<wbr>com/xml/ns/public/model/<wbr>action-3#unlink</a>"/></div><div> </reaction></div><div> <reaction></div><div> <situation>unlinked</<wbr>situation></div><div> <action ref="<a href="http://midpoint.evolveum.com/xml/ns/public/model/action-3#link" target="_blank">http://midpoint.evolveum.<wbr>com/xml/ns/public/model/<wbr>action-3#link</a>"/></div><div> </reaction></div><div> <reaction></div><div> <situation>unmatched</<wbr>situation></div><div> <action ref="<a href="http://midpoint.evolveum.com/xml/ns/public/model/action-3#addFocus" target="_blank">http://midpoint.evolveum.<wbr>com/xml/ns/public/model/<wbr>action-3#addFocus</a>"/></div><div> </reaction></div><div> </objectSynchronization></div><div><br></div><div>For some users I am getting following error: </div></span></div><div style="color:rgb(51,51,51);font-family:'Source Sans Pro','Helvetica Neue',Helvetica,Arial,sans-serif;font-size:14px"><span style="color:rgb(51,51,51);font-family:'Source Sans Pro','Helvetica Neue',Helvetica,Arial,sans-serif;font-size:14px"><br></span></div><font color="#333333" face="Source Sans Pro, Helvetica Neue, Helvetica, Arial, sans-serif"><span style="font-size:14px">SystemException: Schema violation during processing shadow: shadow: CN=Gilbert Stephens,OU=Users,OU=CZ,DC=<wbr>HELL,DC=LOCAL (OID:afefb716-7cab-4d0f-bd5e-<wbr>c74bf0e868df): Schema violation: Value of attribute '__NAME__' must be a single value, but it has 0values: Schema violation during processing shadow: shadow: CN=Gilbert Stephens,OU=Users,OU=CZ,DC=<wbr>HELL,DC=LOCAL (OID:afefb716-7cab-4d0f-bd5e-<wbr>c74bf0e868df): Schema violation: Value of attribute '__NAME__' must be a single value, but it has 0values: Schema violation during processing shadow: shadow: CN=Gilbert Stephens,OU=Users,OU=CZ,DC=<wbr>HELL,DC=LOCAL (OID:afefb716-7cab-4d0f-bd5e-<wbr>c74bf0e868df): Schema violation: Value of attribute '__NAME__' must be a single value, but it has 0values: Schema violation during processing shadow: shadow: CN=Gilbert Stephens,OU=Users,OU=CZ,DC=<wbr>HELL,DC=LOCAL (OID:afefb716-7cab-4d0f-bd5e-<wbr>c74bf0e868df): Schema violation: Value of attribute '__NAME__' must be a single value, but it has 0values</span></font><div><font color="#333333" face="Source Sans Pro, Helvetica Neue, Helvetica, Arial, sans-serif"><span style="font-size:14px"><br></span></font></div><div><font color="#333333" face="Source Sans Pro, Helvetica Neue, Helvetica, Arial, sans-serif"><span style="font-size:14px">It can be easily solved by changing samaccountname in AD from "gilbert.stephens" to "Gilbert.Stephens".</span></font></div><div><font color="#333333" face="Source Sans Pro, Helvetica Neue, Helvetica, Arial, sans-serif"><span style="font-size:14px"><br></span></font></div><div><font color="#333333" face="Source Sans Pro, Helvetica Neue, Helvetica, Arial, sans-serif"><span style="font-size:14px">How hadle that? how to prevent to that behaviour?</span></font></div><div><font color="#333333" face="Source Sans Pro, Helvetica Neue, Helvetica, Arial, sans-serif"><span style="font-size:14px"><br></span></font></div><div><font color="#333333" face="Source Sans Pro, Helvetica Neue, Helvetica, Arial, sans-serif"><span style="font-size:14px">Thanks Jan</span></font></div><div><br></div></div><br>______________________________<wbr>_________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">http://lists.evolveum.com/<wbr>mailman/listinfo/midpoint</a><br>
<br></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div dir="ltr"><table style="font-family:Verdana,Arial,Helvetica,sans-serif;border-collapse:collapse;padding:0px;margin:0px;border-width:0px!important;border-style:solid!important;width:482px!important"><tbody><tr style="padding:0px;margin:0px;border:0px solid gray!important"><td style="color:rgb(0,0,0);font-family:Arial,sans-serif;font-size:11px;width:160px;vertical-align:bottom;padding:0px;border:0px solid gray!important"><p><span style="font-size:14px;font-weight:bold">Oskar Butovič</span><br>solution architect<br><br>gsm: [+420] 774 480 101<br>e-mail: <a href="mailto:oskar.butovic@ami.cz" target="_blank">oskar.butovic@ami.cz</a></p></td><td style="color:rgb(0,0,0);font-family:Verdana,Arial,Helvetica,sans-serif;font-size:10px;border-right-width:1px;border-right-style:solid;border-right-color:rgb(204,204,204);padding:0px;border-top-width:0px!important;border-bottom-width:0px!important;border-left-width:0px!important;border-top-style:solid!important;border-bottom-style:solid!important;border-left-style:solid!important;border-top-color:gray!important;border-bottom-color:gray!important;border-left-color:gray!important"> </td><td style="color:rgb(0,0,0);font-family:Verdana,Arial,Helvetica,sans-serif;font-size:10px;padding:0px;border:0px solid gray!important"> </td><td style="color:rgb(0,0,0);font-family:Arial,sans-serif;font-size:11px;vertical-align:bottom;padding:0px;width:123px;border:0px solid gray!important"><p>AMI Praha a.s.<br>Pláničkova 11<br>162 00 Praha 6<br>tel.: [+420] 274 783 239<br>web: <a href="http://www.ami.cz/" target="_blank">www.ami.cz</a></p></td><td style="color:rgb(0,0,0);font-family:Verdana,Arial,Helvetica,sans-serif;font-size:10px;border-right-width:1px;border-right-style:solid;border-right-color:rgb(204,204,204);padding:0px;border-top-width:0px!important;border-bottom-width:0px!important;border-left-width:0px!important;border-top-style:solid!important;border-bottom-style:solid!important;border-left-style:solid!important;border-top-color:gray!important;border-bottom-color:gray!important;border-left-color:gray!important"> </td><td style="color:rgb(0,0,0);font-family:Verdana,Arial,Helvetica,sans-serif;font-size:10px;padding:0px;border:0px solid gray!important"> </td><td style="color:rgb(0,0,0);font-family:Arial,sans-serif;font-size:11px;margin:8px;border:0px solid gray!important;width:116px"><p><img src="http://www.ami.cz/images/podpis/ami_logo.gif" alt="AMI Praha a.s." style="border:0px"></p></td></tr><tr style="padding:0px;margin:0px;border:0px solid gray!important"><td colspan="7" style="color:rgb(0,0,0);font-family:Verdana,Arial,Helvetica,sans-serif;font-size:10px;padding:0px;width:480px;border:0px solid gray!important"><br><a href="http://www.ami.cz/reseni-a-sluzby/bezpecnost-dat/identity-management" target="_blank"><img src="http://www.ami.cz/images/podpis/AMI-podpis-IdM_1.png" alt="AMI Praha a.s." style="border:0px;width:480px!important;height:82px!important"></a></td></tr><tr style="padding:0px;margin:0px;border:0px solid gray!important"><td colspan="7" style="color:rgb(128,128,128);font-family:Arial,sans-serif;font-size:11px;padding:0px;border:0px solid gray!important"><br>Textem tohoto e-mailu podepisující neslibuje uzavřít ani neuzavírá za společnost AMI Praha a.s.<br>jakoukoliv smlouvu. Každá smlouva, pokud bude uzavřena, musí mít výhradně písemnou formu.<br><br></td></tr></tbody></table></div></div></div></div></div></div></div>
</div></div>