<div dir="ltr"><div dir="ltr"><div>Hi guys,</div><div>One simple question</div><div>How to delete (remove) Protected String value?</div><div>I have extended IDM schema by adding initialPasswordProtected of ProtectedStringType.</div><div>I am able to add and change attribute value but can't remove.</div><div>Is it bug or by design it is ok?<br></div><div><br></div><div>Attribute schema <br></div><div><xsd:element name="initialPasswordProtected" type="t:ProtectedStringType" minOccurs="0" maxOccurs="1"><br>                <xsd:annotation><br>                    <xsd:appinfo><br>                        <a:indexed>false</a:indexed><br>                        <a:displayName>initialPasswordProtected</a:displayName>                        <br>                        <a:displayOrder>300</a:displayOrder><br>                    </xsd:appinfo><br>                </xsd:annotation><br>            </xsd:element><br></div><div><br></div><div>Log of error<br clear="all"></div><div dir="ltr"><div><br></div><div>Operation<br>    Execute changes (Model) <br>Message<br>    Empty ProtectedStringType found in property value PPV(ProtectedStringType:ProtectedStringType()) (extension/initialPasswordProtected in PropertyDelta(extension / {<a href="http://example.com/xml/ns/mySchema}initialPasswordProtected">http://example.com/xml/ns/mySchema}initialPasswordProtected</a>, DELETE))<br>Parameters<br>    options    [ModelExecuteOptions(executeImmediatelyAfterApproval=false,force=false,reconcile=false,reconcileAffected=false)]<br>Error<br>    Empty ProtectedStringType found in property value PPV(ProtectedStringType:ProtectedStringType()) (extension/initialPasswordProtected in PropertyDelta(extension / {<a href="http://example.com/xml/ns/mySchema}initialPasswordProtected">http://example.com/xml/ns/mySchema}initialPasswordProtected</a>, DELETE))<br>    show<br>    java.lang.IllegalStateException: Empty ProtectedStringType found in property value PPV(ProtectedStringType:ProtectedStringType()) (extension/initialPasswordProtected in PropertyDelta(extension / {<a href="http://example.com/xml/ns/mySchema}initialPasswordProtected">http://example.com/xml/ns/mySchema}initialPasswordProtected</a>, DELETE))<br>        at com.evolveum.midpoint.prism.PrismPropertyValue.checkConsistenceInternal(PrismPropertyValue.java:317)<br>        at com.evolveum.midpoint.prism.delta.ItemDelta.assertSetConsistence(ItemDelta.java:1119)<br>        at com.evolveum.midpoint.prism.delta.ItemDelta.checkConsistence(ItemDelta.java:1098)<br>        at com.evolveum.midpoint.prism.delta.ItemDelta.checkConsistence(ItemDelta.java:1062)<br>        at com.evolveum.midpoint.prism.delta.ObjectDelta.checkConsistence(ObjectDelta.java:1426)<br>        at com.evolveum.midpoint.prism.delta.ObjectDelta.checkConsistence(ObjectDelta.java:1396)<br>        at com.evolveum.midpoint.prism.delta.ObjectDelta.checkConsistence(ObjectDelta.java:1392)<br>        at com.evolveum.midpoint.model.impl.controller.ModelController.lambda$executeChanges$0(ModelController.java:378)<br>        at com.evolveum.midpoint.schema.result.OperationResultRunner.run(OperationResultRunner.java:26)<br>        at com.evolveum.midpoint.model.impl.controller.ModelController.executeChanges(ModelController.java:376)<br>        at com.evolveum.midpoint.web.component.progress.ProgressPanel$14.callWithContextPrepared(ProgressPanel.java:605)<br>        at com.evolveum.midpoint.web.component.progress.ProgressPanel$14.callWithContextPrepared(ProgressPanel.java:591)<br>        at com.evolveum.midpoint.web.component.SecurityContextAwareCallable.call(SecurityContextAwareCallable.java:59)<br>        at java.util.concurrent.FutureTask.run(FutureTask.java:266)<br>        at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)<br>        at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)<br>        at java.lang.Thread.run(Thread.java:748)<br></div><div><br></div><div><br></div>-- <br><div dir="ltr" class="gmail_signature"><div dir="ltr"><div><div dir="ltr"><span style="color:rgb(76,76,76)">Best regards, <br><br><img src="cid:o.nekriach@dynatech.lv1520941785292-7770"> <br><br>Oleksandr Nekriach | Identity and access management engineer <br><br>Dynatech, <a href="https://www.google.com/maps/place/DYNATECH/@56.9575205,24.1107235,17z/data=!3m1!4b1!4m5!3m4!1s0x46eecf5753e42351:0x23b120b9745cae62!8m2!3d56.9575205!4d24.1129122" target="_blank">Jeruzalemes iela 1, Rīga, LV-1010, Latvia</a><br><br><div style="display:inline-block"><a href="tel:+371%2025%20314%20685" value="+37125314685" target="_blank">+37125314685</a></div>,<div style="display:inline-block"><a href="mailto:o.nekriach@dynatech.lv" target="_blank">o.nekriach@dynatech.lv</a></div>|<div style="display:inline-block"><a href="http://www.dynatech.lv" target="_blank">www.dynatech.lv</a></div> <br><br>Stay connected: <br><div style="display:inline-block;margin:5px 5px 0px 0px"><a href="https://www.facebook.com/DynatechLatvia/?ref=br_rs" target="_blank"><img src="cid:o.nekriach@dynatech.lv1520941785292-7771"></a></div><div style="display:inline-block;margin:5px 0px 0px"><a href="https://www.linkedin.com/company-beta/17893047/" target="_blank"><img src="cid:o.nekriach@dynatech.lv1520941785292-7772"></a></div><br><br><span style="font-size:11px;color:rgb(161,161,161)">Confidentiality Notice: This message contains confidential information and is intended only for the named recipient(s). If you are not the addressee you may not copy, distribute or perform any other activities with this information. If you have received this transmission in error, please notify us by e-mail immediately. E-mail transmission cannot be guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses.</span></span></div></div></div></div></div></div></div>