<div dir="ltr">Hi Neil,<div>Sorry I missed your response.<br>As you mentioned, there is nothing in plain sight.<br><br>I would try to scope the schema discovery to check if the offensive syntax interpretation is elsewhere.<br>```xml</div><div><font face="monospace"> <schema><br>          <generationConstraints><br>                 <generateObjectClass>ri:orclUser</generateObjectClass><br></generationConstraints><br>    </schema></font></div><div>```<br><br>Regards,</div><div><br></div><div>Gustavo<br><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, Mar 10, 2026 at 4:50 PM Gaede, Neil <<a href="mailto:NSGaede@sbec.com" target="_blank">NSGaede@sbec.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div>




<div dir="ltr">
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
Yeah, I'm more of a DSEE guy myself.</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
The schema LDIF is over 1700 lines, so here are the lines that reference OID 1.3.6.1.4.1.1466.115.121.1.38 or the objectIdentifierMatch matching rule that it seems to be getting hung up on:</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
attributetypes: ( 2.5.4.0 NAME 'objectClass' EQUALITY objectIdentifierMatch SYNTAX '1.3.6.1.4.1.1466.115.121.1.38' )</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
attributetypes: ( 2.5.4.30 NAME 'supportedApplicationContext' EQUALITY objectIdentifierMatch SYNTAX '1.3.6.1.4.1.1466.115.121.1.38' )</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
attributetypes: ( 1.3.6.1.4.1.1466.101.120.7 NAME 'supportedExtension' SYNTAX '1.3.6.1.4.1.1466.115.121.1.38' USAGE dSAOperation )</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
attributetypes: ( 1.3.6.1.4.1.1466.101.120.13 NAME 'supportedControl' SYNTAX '1.3.6.1.4.1.1466.115.121.1.38' USAGE dSAOperation )</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
attributetypes: ( 2.5.18.7 NAME 'collectiveExclusions' EQUALITY  objectIdentifierMatch SYNTAX '1.3.6.1.4.1.1466.115.121.1.38' )</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
attributetypes: ( 2.5.18.0 NAME 'excludeAllCollectiveAttributes' EQUALITY  objectIdentifierMatch SYNTAX '1.3.6.1.4.1.1466.115.121.1.38' SINGLE-VALUE )</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
attributetypes: ( 2.16.840.1.113894.1.1.709 NAME 'orclcertExtensionOID' EQUALITY objectIdentifierMatch SYNTAX '1.3.6.1.4.1.1466.115.121.1.38' SINGLE-VALUE )</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
attributetypes: ( 2.16.840.1.113894.1.1.711 NAME 'orclcertExtensionAttribute' EQUALITY objectIdentifierMatch SYNTAX '1.3.6.1.4.1.1466.115.121.1.38' SINGLE-VALUE )</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
matchingrules: ( 2.5.13.0 NAME 'objectIdentifierMatch' SYNTAX '1.3.6.1.4.1.1466.115.121.1.38' )</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
ldapsyntaxes: ( 1.3.6.1.4.1.1466.115.121.1.38 DESC 'OID' )</div>
<div><br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
I'm not seeing anything unexpected here, but also I'm not well versed on how the ConnID LDAP connector processes the LDAP schema.</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
Thanks,</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
Neil</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
<br>
</div>
<hr style="display:inline-block;width:98%">
<div style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
<b>From:</b> Gustavo J Gallardo <<a href="mailto:ggallard@identicum.com" target="_blank">ggallard@identicum.com</a>><br>
<b>Sent:</b> Tuesday, March 10, 2026 7:36 AM<br>
<b>To:</b> MidPoint General Discussion <<a href="mailto:midpoint@lists.evolveum.com" target="_blank">midpoint@lists.evolveum.com</a>><br>
<b>Cc:</b> Gaede, Neil <<a href="mailto:NSGaede@sbec.com" target="_blank">NSGaede@sbec.com</a>><br>
<b>Subject:</b> Re: [midPoint] Use of LDAP Connector with Oracle Internet Directory
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
<br>
</div>
<div style="direction:ltr">Hi Neal,</div>
<div style="direction:ltr">not really an expert in Oracle OID here, but can you export the schema (cn=subschemasubentry) to an LDIF file to compare attributes?</div>
<div style="direction:ltr"><br>
</div>
<div style="direction:ltr"><br>
</div>
<div style="direction:ltr">Regards,</div>
<div style="direction:ltr"><br>
</div>
<div style="direction:ltr">Gustavo</div>
<div style="direction:ltr"><br>
</div>
<div><br>
</div>
<div style="direction:ltr">On Mon, Mar 9, 2026 at 7:23 PM Gaede, Neil via midPoint <<a id="m_-2191375861738816141m_-5580147887690437628OWA63bd2552-bf85-91e8-d998-756be659de3a" href="mailto:midpoint@lists.evolveum.com" target="_blank">midpoint@lists.evolveum.com</a>> wrote:</div>
<blockquote style="margin:0px 0px 0px 0.8ex;padding-left:1ex;border-left:1px solid rgb(204,204,204)">
<div style="direction:ltr;font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
Has anyone had any luck using the current version of the LDAP connector with Oracle Internet Directory? I'm getting an InvalidAttributeValueException at the discovery step when trying to add our OID server as a resource.</div>
<div style="direction:ltr;font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
<br>
</div>
<div style="direction:ltr;font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
2026-03-09 21:56:02,327 [] [http-nio-8080-exec-135] WARN (com.evolveum.midpoint.provisioning.ucf.impl.connid.ConnIdUtil): Got ConnId exception (might be handled by upper layers later) org.identityconnectors.framework.common.exceptions.InvalidAttributeValueException
 in OID Test: ConnectorSpec.Main(resource:null(SBEC OID Test)): Error parsing resource schema: ERR_13787_OID_EXPECTED An oid is expected (line ( 2.5.13.0 NAME 'objectIdentifierMatch' SYNTAX '1.3.6.1.4.1.1466.115.121.1.38' ), col 47), reason: Error parsing resource
 schema: ERR_13787_OID_EXPECTED An oid is expected (line ( 2.5.13.0 NAME 'objectIdentifierMatch' SYNTAX '1.3.6.1.4.1.1466.115.121.1.38' ), col 47) (class org.identityconnectors.framework.common.exceptions.InvalidAttributeValueException)</div>
<div style="direction:ltr;font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
<br>
</div>
<div style="direction:ltr;font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
I find the "OID Expected" at column 47 message to be interesting because it sure looks to be an OID, though maybe the fact that it's single-quoted is throwing it off?</div>
<div style="direction:ltr;font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
<br>
</div>
<div style="direction:ltr;font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
We're running a pretty bog-standard implementation of Internet Directory 12.2.1.4.0.</div>
<div style="direction:ltr;font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
<br>
</div>
<div style="direction:ltr;font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
Apologies for any potential OID (Object Identifier) / OID (Oracle Internet Directory) confusion.</div>
<div style="direction:ltr;font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
<br>
</div>
<div style="direction:ltr;font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
<br>
</div>
<div style="direction:ltr;font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
Thanks,</div>
<div style="direction:ltr;font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
<br>
</div>
<div style="direction:ltr;font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
<br>
</div>
<div style="direction:ltr;font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
Neil</div>
<div>_______________________________________________<br>
midPoint mailing list<br>
<a id="m_-2191375861738816141m_-5580147887690437628OWAa27fc420-8d49-3808-b102-356aa3dedfe4" href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a id="m_-2191375861738816141m_-5580147887690437628OWAf2d15eb8-2c46-9559-d657-666060daee76" href="https://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">https://lists.evolveum.com/mailman/listinfo/midpoint</a></div>
</blockquote>
</div>

</div></blockquote></div>