You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@syncope.apache.org by Alexander Tsvetkov <al...@gmail.com> on 2018/10/22 14:35:13 UTC
SchemaViolationException on pulling realms
Hi,
I have to pull org units from MS Active Directory into syncope.
My Resource has
defaultIdAttribute: ou
Mapping is
Object Class: organizationalUnit
name is mapped to ou, is a remote key
connObjectLink: *syncope:fullPath2Dn(fullPath, 'ou') +
',OU=ANIMALS,OU=CH,DC=sesdev,DC=lab'*
I have a pull task with Matching rule: UPDATE, Unmatching rule: ASSIGN.
Org Units are successfully imported from Active Directory, BUT in logs
there is a SchemaViolationException:
17:18:03.075 DEBUG Enter: update(ObjectClass: organizationalUnit,
Attribute: {Name=__UID__, Value=[CATS]}, [Attribute: {Name=OU,
Value=[CATS]}, Attribute: {Name=__NAME__,
Value=[ou=CATS,OU=ANIMALS,OU=CH,DC=sesdev,DC=lab]}], null) Method: update
17:18:03.119 DEBUG Enter: update(ObjectClass: organizationalUnit,
Attribute: {Name=__UID__, Value=[CATS]}, [Attribute: {Name=OU,
Value=[CATS]}, Attribute: {Name=__NAME__,
Value=[ou=CATS,OU=ANIMALS,OU=CH,DC=sesdev,DC=lab]}], OperationOpti
ons: {}) Method: update
17:18:03.119 DEBUG Searching for object of class organizationalUnit with
filter LdapFilter[nativeFilter: OU=CATS; entryDN: null] Method:
findObject
17:18:03.120 DEBUG Searching in [OU=ANIMALS,OU=CH,DC=sesdev,DC=lab] with
filter (&(objectClass=organizationalUnit)(OU=CATS)) and SearchControls:
{returningAttributes=[ntSecurityDescriptor, objectSID, OU, primaryGroupID,
userAccountContro
l], scope=SUBTREE} Method: doSearch
17:18:03.262 DEBUG Exception: Method: update
org.identityconnectors.framework.common.exceptions.ConnectorException:
javax.naming.directory.SchemaViolationException: [LDAP: error code 67 -
000020B1: UpdErr: DSID-030F1087, problem 6004 (CANT_ON_RDN), data 0
^@]; remaining name 'OU=CATS,OU=ANIMALS,OU=CH,DC=sesdev,DC=lab'
at
net.tirasa.connid.bundles.ad.crud.ADUpdate.modifyAttributes(ADUpdate.java:354)
~[?:?]
at
net.tirasa.connid.bundles.ad.crud.ADUpdate.modifyAttributes(ADUpdate.java:347)
~[?:?]
at
net.tirasa.connid.bundles.ad.crud.ADUpdate.update(ADUpdate.java:160) ~[?:?]
at
net.tirasa.connid.bundles.ad.ADConnector.update(ADConnector.java:215) ~[?:?]
at
org.identityconnectors.framework.impl.api.local.operations.UpdateImpl.update(UpdateImpl.java:101)
~[connector-framework-internal-1.4.3.0.jar:?]
at sun.reflect.GeneratedMethodAccessor584.invoke(Unknown Source)
~[?:?]
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
~[?:1.8.0_72]
at java.lang.reflect.Method.invoke(Method.java:498) ~[?:1.8.0_72]
Any ideas?
Re: SchemaViolationException on pulling realms
Posted by Francesco Chicchiriccò <il...@apache.org>.
On 22/10/18 16:35, Alexander Tsvetkov wrote:
> Hi,
> I have to pull org units from MS Active Directory into syncope.
> My Resource has
> defaultIdAttribute: ou
> Mapping is
> Object Class: organizationalUnit
> name is mapped to ou, is a remote key
> connObjectLink: *syncope:fullPath2Dn(fullPath, 'ou') +
> ',OU=ANIMALS,OU=CH,DC=sesdev,DC=lab'*
>
> I have a pull task with Matching rule: UPDATE, Unmatching rule: ASSIGN.
> Org Units are successfully imported from Active Directory, BUT in logs
> there is a SchemaViolationException:
>
> 17:18:03.075 DEBUG Enter: update(ObjectClass: organizationalUnit,
> Attribute: {Name=__UID__, Value=[CATS]}, [Attribute: {Name=OU,
> Value=[CATS]}, Attribute: {Name=__NAME__,
> Value=[ou=CATS,OU=ANIMALS,OU=CH,DC=sesdev,DC=lab]}], null) Method:
> update
> 17:18:03.119 DEBUG Enter: update(ObjectClass: organizationalUnit,
> Attribute: {Name=__UID__, Value=[CATS]}, [Attribute: {Name=OU,
> Value=[CATS]}, Attribute: {Name=__NAME__,
> Value=[ou=CATS,OU=ANIMALS,OU=CH,DC=sesdev,DC=lab]}], OperationOpti
> ons: {}) Method: update
> 17:18:03.119 DEBUG Searching for object of class organizationalUnit
> with filter LdapFilter[nativeFilter: OU=CATS; entryDN: null] Method:
> findObject
> 17:18:03.120 DEBUG Searching in [OU=ANIMALS,OU=CH,DC=sesdev,DC=lab]
> with filter (&(objectClass=organizationalUnit)(OU=CATS)) and
> SearchControls: {returningAttributes=[ntSecurityDescriptor, objectSID,
> OU, primaryGroupID, userAccountContro
> l], scope=SUBTREE} Method: doSearch
> 17:18:03.262 DEBUG Exception: Method: update
> org.identityconnectors.framework.common.exceptions.ConnectorException:
> javax.naming.directory.SchemaViolationException: [LDAP: error code 67
> - 000020B1: UpdErr: DSID-030F1087, problem 6004 (CANT_ON_RDN), data 0
> ^@]; remaining name 'OU=CATS,OU=ANIMALS,OU=CH,DC=sesdev,DC=lab'
> at
> net.tirasa.connid.bundles.ad.crud.ADUpdate.modifyAttributes(ADUpdate.java:354)
> ~[?:?]
> at
> net.tirasa.connid.bundles.ad.crud.ADUpdate.modifyAttributes(ADUpdate.java:347)
> ~[?:?]
> at
> net.tirasa.connid.bundles.ad.crud.ADUpdate.update(ADUpdate.java:160)
> ~[?:?]
> at
> net.tirasa.connid.bundles.ad.ADConnector.update(ADConnector.java:215)
> ~[?:?]
> at
> org.identityconnectors.framework.impl.api.local.operations.UpdateImpl.update(UpdateImpl.java:101)
> ~[connector-framework-internal-1.4.3.0.jar:?]
> at sun.reflect.GeneratedMethodAccessor584.invoke(Unknown
> Source) ~[?:?]
> at
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
> ~[?:1.8.0_72]
> at java.lang.reflect.Method.invoke(Method.java:498) ~[?:1.8.0_72]
>
>
> Any ideas?
Hi,
since the exception is raised during the communication with AD, I would
suggest to try to replicate the problem with the latest version of the
AD connector (1.3.5, up to Syncope 2.0.10 there is 1.3.45 bundled, instead).
Regards.
--
Francesco Chicchiriccò
Tirasa - Open Source Excellence
http://www.tirasa.net/
Member at The Apache Software Foundation
Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail
http://home.apache.org/~ilgrosso/