<html dir="ltr">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style id="owaParaStyle">P {
MARGIN-BOTTOM: 0px; MARGIN-TOP: 0px
}
</style>
</head>
<body fPStyle="1" ocsi="0">
<div style="direction: ltr;font-family: Tahoma;color: #000000;font-size: 10pt;">
<div>
<p><font face="Arial">Hi,</font></p>
<p><font face="Arial"></font> </p>
<p><font face="Arial">I'm trying to configure a simulated capability to manage the status for an account on OpenLDAP using the attribute
<strong>pwdAccountLockedTime</strong>.<br>
Normally, a value "000001010000Z" means that the account is permanently locked and the absence of that attribute means the account is normal.</font></p>
<p><font face="Arial"></font> </p>
<p><font face="Arial"> <cap:activation><br>
<cap:status><br>
<cap:attribute>ri:pwdAccountLockedTime</cap:attribute><br>
<cap:enableValue/><br>
<cap:disableValue>000001010000Z</cap:disableValue><br>
</cap:status><br>
</cap:activation></font></p>
<p><font face="Arial"></font> </p>
<p><font face="Arial">However, midPoint seems to reject these values.<br>
When I enable a user, the attribute should be removed, but I get this error:<br>
For input string: "": For input string: "": For input string: "": For input string: ""</font></p>
<p><font face="Arial"></font> </p>
<p><font face="Arial">And when I disable a user, I get that error:<br>
For input string: "000001010000Z": For input string: "000001010000Z": For input string: "000001010000Z": For input string: "000001010000Z"</font></p>
<p><font face="Arial"></font> </p>
<p><font face="Arial">I do not know if it is relevant, but according to the LDAP schema, the value must be of type "GeneralizedTime" but midPoint handle it as a "long" and seems to interpret the value entered as string because of the character "Z".
<br>
Any other numeric value (without "Z") is accepted and is converted to a date on OpenLDAP side.</font></p>
<p><font face="Arial"></font> </p>
<p> </p>
<div style="FONT-SIZE: 13px; FONT-FAMILY: Tahoma"><span lang="FR" style="FONT-SIZE: 10.5pt; FONT-FAMILY: "Calibri Light","sans-serif"; BACKGROUND: white; COLOR: blue">
<div style="FONT-SIZE: 13px; FONT-FAMILY: Tahoma"><span lang="FR" style="FONT-SIZE: 10.5pt; FONT-FAMILY: "Calibri Light","sans-serif"; BACKGROUND: white; COLOR: blue">
<div style="FONT-SIZE: 13px; FONT-FAMILY: Tahoma">
<p><b><span lang="FR" style="FONT-SIZE: 10.5pt; FONT-FAMILY: "Calibri Light","sans-serif"; BACKGROUND: white; COLOR: blue"><font face="Arial">Esteban Jeria</font></span></b></p>
<p><span><a href="mailto:esteban.jeria@cgi.com"><font face="Arial">esteban.jeria@cgi.com</font></a><br>
</span><font face="Arial"><span lang="FR" style="FONT-SIZE: 9.5pt; FONT-FAMILY: "Calibri Light","sans-serif"; BACKGROUND: white; COLOR: black">Conseiller
</span><b><span lang="FR" style="FONT-SIZE: 9.5pt; FONT-FAMILY: "Calibri Light","sans-serif"; BACKGROUND: white; COLOR: red">CGI</span></b><span lang="FR" style="FONT-SIZE: 9.5pt; FONT-FAMILY: "Calibri Light","sans-serif"; BACKGROUND: white; COLOR: black">
/ </span><b><span style="FONT-SIZE: 9.5pt; FONT-FAMILY: "Calibri Light","sans-serif"; BACKGROUND: white; COLOR: red">CGI</span></b><span style="FONT-SIZE: 9.5pt; FONT-FAMILY: "Calibri Light","sans-serif"; BACKGROUND: white; COLOR: black"> Consultant</span><span style="FONT-SIZE: 10pt; FONT-FAMILY: "Tahoma","sans-serif"; COLOR: black"></span></font></p>
<p><span style="FONT-SIZE: 9.5pt; FONT-FAMILY: "Calibri Light","sans-serif"; BACKGROUND: white; COLOR: black"><span style="FONT-SIZE: 9.5pt; FONT-FAMILY: "Calibri Light","sans-serif"; BACKGROUND: white; COLOR: black"><font face="Arial">Sécurité - Gestion des
Identités et des Accès / Security - Identity and Access Management</font></span></span><span style="FONT-SIZE: 10pt; FONT-FAMILY: "Tahoma","sans-serif"; COLOR: black"></span></p>
</div>
</span></div>
</span></div>
</div>
</div>
</body>
</html>