<div dir="ltr">Hi Keith,<div><br></div><div>try to put</div><div><icfcldap:operationalAttributes><span style="color:rgb(51,51,51);font-family:"Source Sans Pro","Helvetica Neue",Helvetica,Arial,sans-serif;font-size:14px">pwdAccountLockedTime</span></icfcldap:operationalAttributes> </div><div>to resource configurationProperties:<br></div><div><a href="https://wiki.evolveum.com/display/midPoint/OpenLDAP#OpenLDAP-ConnectorConfigurationExample">https://wiki.evolveum.com/display/midPoint/OpenLDAP#OpenLDAP-ConnectorConfigurationExample</a><br></div><div><br></div><div>best regards</div><div><br></div><div>Gustav</div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">št 25. 3. 2021 o 20:32 Keith LeValley via midPoint <<a href="mailto:midpoint@lists.evolveum.com">midpoint@lists.evolveum.com</a>> napísal(a):<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr">Attempting to set up a quick demo to show some colleagues some of the capabilities of midpoint next week.  I setup an openldap connector using the ldap connector and it has been working but now I am getting the following error when I try to reconcile users:<div><br></div><div><dl><dt id="gmail-m_-8929223727682471010gmail-id2c53" style="box-sizing:border-box;line-height:1.42857;font-weight:700;float:left;width:100px;clear:left;text-align:right;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;color:rgb(51,51,51);font-family:"Source Sans Pro","Helvetica Neue",Helvetica,Arial,sans-serif;font-size:14px">Error</dt><dd id="gmail-m_-8929223727682471010gmail-id2c54" style="box-sizing:border-box;line-height:1.42857;margin-left:130px;word-break:break-word;color:rgb(51,51,51);font-family:"Source Sans Pro","Helvetica Neue",Helvetica,Arial,sans-serif;font-size:14px">Got unexpected exception: java.lang.IllegalArgumentException: Unknown LDAP attribute pwdAccountLockedTime (translated from ICF attribute pwdAccountLockedTime)</dd><dd id="gmail-m_-8929223727682471010gmail-id2c54" style="box-sizing:border-box;line-height:1.42857;margin-left:130px;word-break:break-word;color:rgb(51,51,51);font-family:"Source Sans Pro","Helvetica Neue",Helvetica,Arial,sans-serif;font-size:14px"><br></dd></dl><div>I used the openldap resource from github and to be honest I really don't care about the ability to lock accounts for the demo if it's easy to simply get around the error.  Below is the capabilities section of the connector (if other sections are helpful I can get them also, it's just a really long xml file so I didn't want to blow up the email)</div><div><br></div><div><capabilities><br>        <cachingMetadata><br>            <retrievalTimestamp>2021-03-25T15:06:15.623-04:00</retrievalTimestamp><br>            <serialNumber>fe8e6c15dc55d43c-56ae57148f4f79d9</serialNumber><br>        </cachingMetadata><br>        <native xmlns:cap="<a href="http://midpoint.evolveum.com/xml/ns/public/resource/capabilities-3" target="_blank">http://midpoint.evolveum.com/xml/ns/public/resource/capabilities-3</a>"><br>            <cap:schema/><br>            <cap:liveSync/><br>            <cap:testConnection/><br>            <cap:create/><br>            <cap:update><br>                <cap:delta>true</cap:delta><br>                <cap:addRemoveAttributeValues>true</cap:addRemoveAttributeValues><br>            </cap:update><br>            <cap:delete/><br>            <cap:script><br>                <cap:host><br>                    <cap:type>connector</cap:type><br>                </cap:host><br>            </cap:script><br>            <cap:activation><br>                <cap:lockoutStatus/><br>            </cap:activation><br>            <cap:credentials><br>                <cap:password><br>                    <cap:returnedByDefault>false</cap:returnedByDefault><br>                </cap:password><br>            </cap:credentials><br>            <cap:auxiliaryObjectClasses/><br>            <cap:pagedSearch/><br>            <cap:read><br>                <cap:returnDefaultAttributesOption>true</cap:returnDefaultAttributesOption><br>            </cap:read><br>        </native><br>    </capabilities><br></div><div><br></div><div>Thank you again for all your help you guys have provided.</div>-- <br><div dir="ltr"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div dir="ltr"><div dir="ltr">Keith LeValley<br><div><font face="arial, helvetica, sans-serif">Identity Services Architect</font>, Davenport University</div><div>phone:  (616) 732-1102</div><div><a href="mailto:klevalley2@davenport.edu" target="_blank">klevalley2@davenport.edu<br></a></div></div></div></div></div></div></div></div></div></div></div>
_______________________________________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="https://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">https://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
</blockquote></div><br clear="all"><div><br></div>-- <br><div dir="ltr" class="gmail_signature">s pozdravom<div><br></div><div>Gustáv Pálos</div></div>