A small issue I noticed with IdB is that when logging to the Windows event log and logging is set for severity of Information, the text in the event is not correct for the event type, the event text for non-error events is prefix with "an error occurred in module" as below. Small thing.

Log Name: Application
Source: Changes register item processing completed.
Date: 11/04/2011 11:59:22 AM
Event ID: 0
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: EDTIDM001VS.test.act.gov.au
Description:
*Error occurred in module: *Change detection engine

Changes register item processing on connector MAZE HUGHES PRIMARY Class connector completed. Duration: 00:00:00.3906200

Basically - What's the best way to blow away an IdB database and start with a fresh one? Can I do it without having to re-install all the add-ons?

Backstory - During testing I switched out the adapters and connectors for ones that connected to csv files instead of the end point systems and switching them back has scrambled everything. PartitionsIDs in IdB or something. After running the clear SQL database script in the IDB install directory the service wouldn't start - said bad db connection - but strangley the service debugger ran fine. I found another copy of the IDB database in sql named differently so I added the connection string for that one and the service started working. I used the clear sql script on that one and now i'm running a full import since about 11 this morning - so about five hours. I'm pretty sure there's about 20000 users but I don't think it would take that long just to get into the connector. My question is above in the basically part.

A validator "short cut" is required so that in connector configuration files a column can be given the type of short. This was required when importing from a SQL Server DB with a smallint value.

Shane attempted to create one but there were problems with this deeper in the framework to do with IComparable methods not being implemented for a particular data type or something. Below is the code he tried and the errors returned.

public class ShortValueValidatorFactory : Unify.Framework.ValidatorFactory.RangeValidatorFactoryBase<ShortValue, int>
{

protected override ShortValue GetValue(System.Xml.Linq.XName attribute, ShortValue missingValue, System.Xml.Linq.XElement fieldXml)

protected override ShortValue MissingMaxValue()

protected override ShortValue MissingMinValue()

}
}

Error 1 The type 'Unify.Framework.ShortValue' cannot be used as type parameter 'TValue' in the generic type or method 'Unify.Framework.ValidatorFactory.RangeValidatorFactoryBase<TValue,T>'. There is no boxing conversion from 'Unify.Framework.ShortValue' to 'System.IComparable<Unify.Framework.ShortValue>'. \\VBOXSVR\VMShare\DETSAFEPersonConnector\DETSAFEPersonConnector\DETSAFEPersonConnector\Connector\Unify.Connector.DETSAFEPerson\ShortValueValidatorFactory.cs 9 18 Unify.Connector.DETSAFEPerson

Error 2 The type 'Unify.Framework.ShortValue' cannot be used as type parameter 'TValue' in the generic type or method 'Unify.Framework.ValidatorFactory.RangeValidatorFactoryBase<TValue,T>'. There is no boxing conversion from 'Unify.Framework.ShortValue' to 'Unify.Framework.IValue<int>'. \\VBOXSVR\VMShare\DETSAFEPersonConnector\DETSAFEPersonConnector\DETSAFEPersonConnector\Connector\Unify.Connector.DETSAFEPerson\ShortValueValidatorFactory.cs 9 18 Unify.Connector.DETSAFEPerson

Lifehouse and our test Riskman environment have conflicting web service namespaces, which means the connector has to be recompiled against each one depending on what the client has. I've asked Riskman (company) what to do about this but have not received an answer.

Date: 5/05/2014 10:30 AM
From; Patrick
To; Simon Welsh (simonw@riskman.net.au)
Subject: Riskman.Net web service question

Good morning Simon,

Hope things are well on your end.

From what I understand the deployment of our RiskMan integration product at Lifehouse went very well and is now up and running in production, so thank you again for your help in making that happen.

We did run in to one small issue relating to the namespaces of the web service though; the namespace of our test instance (https://online.riskman.net.au/RiskManACTHealthUnifyTest/WebServices/GenericWebService.asmx) is tempuri.org while Lifehouse’s instance is riskman.net.au. As such we had to recompile our software to contain the new namespace.

Is there a way I can know ahead of time what the namespace will be? Is it configuration, version, hosted vs on-premise or something else?

Thanks in advance,

Currently, when importing on a connector, Identity Broker will generate a duplicate key error when it encounters multiple records that have the same key. This is problematic in itself, but is exacerbated because IdB apparently drops the whole page (~1000 records) when this occurs.

The error presented is something like this:
System.ArgumentException: An item with the same key has already been added.

Given that the impact of having a single duplicate record is quite high (1000 records not imported!), it's important to find these duplicate records in the end source and to either eradicate them, or select a more appropriate key value. To this end, I request an improvement for IdB to display the duplicate key in the error message when the error is thrown. Eg,

System.ArgumentException: An item with the same key (12345) has already been added.

Or perhaps even go so far as to include the attribute(s) used in the key:

System.ArgumentException: An item with the same key (entityID:12345) has already been added.
or (in the case of multiple attribute keys
System.ArgumentException: An item with the same key - (entityID,12345):(locationID,123) - has already been added.

I have not played with IdB nearly enough a, nor read the manual enough times, so please be gentle with me if any of these features already exist.

"Search" entities in connector or adapter - it would be great to have an option to enter search criteria first rather than have to list all then sort.
It is probably not so bad in many sites, but DET as an example, takes an age to load 109,000 entities, which is a pain when we only want to look at one.

It would also be really nice to have an option to do a limited import based on similar criteria (so as well as full import or delta import to have an option to import all sn=smith or something. That is of most use during set up and troubleshooting so maybe an "admin" feature.

I guess what would achieve the same (and be more operationally useful) would be a filter option to include or exclude specific entities - based on attributes and built up like an SQL query or an LDAP query.

Configuration via a web front end rather than by editing XML files - yipee!

Scheduling.
The polling intervals being set in ticks is horrible, so something in seconds or minutes would be far nicer.
Better still would be some form of schedulting in the product that offers more than get full import every 30 minutes, get deltas every 5 mins etc.
Something along the lines of the scheduling that can be set up in EB would be great, but even if there was just the option to not run on certain days or between certain times.
I guess a hook into EB would work too.

GUIDs
I was talking to Nick Mathas about a problem in the Novell world, where clearing the connector also clears the GUIDs which stuffs up the Novell IDM association value (unique key). He and I think this is something that needs to be addressed in the NIM adapter or the NIM end of the system rather than the IdB engine, but would there be a possibility to have a configuration item that could allow the source system unique key to be used as the IdB unique key in place of the IdB GUID?
i.e. If you do not select a unique key, you get IdB generated GUID and clearing the Connector and re-importing will generate new keys, but if you have selected that, for example, detnumber from a Chris connector should be the unique key, it will use that (relying on the source to guarantee uniqueness) and clearing the connector and re-importing will bring entities in exactly the same.

That's all the springs to mind for now

Optionally allow Relational.Compare.String to exclude items not in priority list. This was raised as an issue on BCE-220.

Hi Doug,

Hoping you can direct this to the right person.
One of the administrators of Chris21 pointed something out to me yesterday. It seems that the Unify application is connecting to Chris21 and leaving behind open logins.
It appears to be the scheduled process that picks up any changes in Chris21: one login per Connector every 2 hours. So every 2 hours there are another 6 open logins created.

I'm not sure what the potential implications are - I'm trying to find out what I can from this end - but could I please ask you to check with your people as to why these logins are left open? As you can imagine the number of open logins builds up very rapidly and need to be cleared manually.

Regards
Deanna March
Senior Applications Developer
Corporate Office
Automotive Holdings Group Limited

21 Old Aberdeen Place, West Perth WA 6005
P: +61 8 9422 7758
F: +61 8 9422 7686
M: 0457 524 306
E: dmarch@ahg.com.au
W: www.ahg.com.au

Monash require to write back UserID, Email and MonashPersonID as below:

• Subtype 9008, is for FIM SAP interface on user ID and email address. Field mapping:
  Field Name Data Type length
  User ID ZZFIMINT Characters 30
  Email USRID_LONG Characters 241

• Subtype 9009, is for Monash Person ID. Field Mapping :
  Field Name Data Type length
  Monash Person ID USRID_LONG Characters 241

When trying to test the write back permission using the SAP harness, the infotype update function does not allow to specify subtype.