Identity Broker Forum

Welcome to the community forum for Identity Broker.

Browse the knowledge base, ask questions directly to the product group, or leverage the community to get answers. Leave ideas for new features and vote for the features or bug fixes you want most.

0
Not a bug

Chris21 "Trying to pass a table-valued parameter with 6 column(s) where the corresponding user-defined table type requires 5 column(s)" during processing

In my newly upgraded customer environment I am seeing the following error when running an Import All for a Chris21 connector:

Image 5382

No entries were imported.  Could you please advise what I should do about it?

UNIFYBroker v5.3.2.0
UNIFYBroker/Chris21 v5.3.0.0

0
Fixed

Aderant Express v.5.3.1.0 connector reports "Invalid column name 'OBSOLETE_1'" on Import All

I am upgrading from IDB to UNIFYBroker and recreating the Aderant Expert connector (using a SQL Agent).  Test Connection on the Agent returns successfully with no warnings or errors.

When I run an Import All I immediately see the following error logged:

Image 5377

Looking at the Aderant Expert database in SSMS I see that the HSM_PERSNL table has an OBSOLETE_1 field as might be expected:

Image 5378

Image 5379

Image 5380

Can you advise what SQL command is being executed, or otherwise help work out why it's failing?

0
Planned

Error "EaiFlagDeleteAttribute field is required" when upgrading from an older Chris21 connector

When upgrading from a pre-UNIFYBroker v5 Chris21 environment I copied the Connector configuration XML across directly.  When associating the Chris21 Connector to the new v5 Agent, there was a UI error on save:

Image 5375

This happened because the newer version of the Chris21 Agent/Connector package has an additional attribute in the XML configuration that wasn't previously present (and UNIFYBroker doesn't automatically add it).

The solution is to edit the XML configuration file to add the attribute by hand then restart the UNIFYBroker service:

Image 5376

The value used for the attribute (eaiFlagDeleteAttribute="eaiunifyfl") were obtained by manually creating a new Chris21 Connector to see what value the system assigned to the attribute.

0
Won't fix

Cannot specify default (blank) Logon Application for the Chris21 Agent in the UI

In the Chris21 Agent form in the UNIFYBroker UI the "Logon Application" field is mandatory:

Image 5373


However the help for the the field says it can be left blank to not include it in the logon:

Image 5374

I was able to workaround this by editing the Agent configuration XML directly, to remove the value.  When I did so the value passed to Chris21 defaulted to "chris21".  So another workaround is likely to be entering "chris21" into the field directly rather than leaving it blank.

UNIFYBroker v5.3.2.0
Chris21 Connector v5.3.0.0

0
Fixed

Sequence contains more than one element

Hayden Gray 5 years ago updated by Beau Harrison (Senior Product Software Engineer) 5 years ago 4

Hi Guys,

Getting this error when trying to do DIDS operations in FIM. Issue started last night and all DI operaions appear to be failing now. I'm doing Full imports now as a work around for now.

Reading through a similar ticket I stumbled across this one Richard had raise quite a while ago:
https://voice.unifysolutions.net/communities/6/topics/474-delta-imports-from-idb-on-ldap-groups-consistently-fail-with-sequence-contains-more-than-one

The comments on this ticket say that this was resolved in v5.0.2 however the version in this environment is v5.0.4. For some additional imformation the version of FIM is 4.1.3646.0.

The extensible extension returned an unsupported error.
The stack trace is:
"Unify.Product.IdentityBroker.LdapOperationException: Internal Server Error #11: System.InvalidOperationException: Sequence contains more than one element
at System.Data.Linq.SqlClient.SqlProvider.Execute(Expression query, QueryInfo queryInfo, IObjectReaderFactory factory, Object[] parentArgs, Object[] userArgs, ICompiledSubQuery[] subQueries, Object lastResult)
at System.Data.Linq.SqlClient.SqlProvider.ExecuteAll(Expression query, QueryInfo[] queryInfos, IObjectReaderFactory factory, Object[] userArguments, ICompiledSubQuery[] subQueries)
at System.Data.Linq.SqlClient.SqlProvider.System.Data.Linq.Provider.IProvider.Execute(Expression query)
at System.Data.Linq.Table`1.System.Linq.IQueryProvider.Execute[TResult](Expression expression)
at Unify.Framework.Data.LinqQueryConversionProvider`5.ExecuteMethodCallExpression[TResult](MethodCallExpression methodCallExpression)
at Unify.Framework.Data.LinqQueryConversionProvider`5.Execute[TResult](Expression expression)
at System.Linq.Queryable.SingleOrDefault[TSource](IQueryable`1 source, Expression`1 predicate)
at Unify.Product.IdentityBroker.ChangeLogToLDAPEntryConverter.EntryUuidAttributeValue(IChangeLogItem sourceValue, IDictionary`2 partialAttributes)
at Unify.Product.IdentityBroker.ChangeLogToLDAPEntryConverter.Transform(IChangeLogItem sourceValue)
at Unify.Product.IdentityBroker.SearchRequestHandlerBase.d__13.MoveNext()
at Unify.Framework.Visitor.Visit[T](IEnumerable`1 visitCollection, Action`2 visitor)
at Unify.Product.IdentityBroker.LDAPConnection.d__33.MoveNext()
at Unify.Product.IdentityBroker.LdapConnection.GetMessage(Int32 messageId)
at Unify.Product.IdentityBroker.SearchRequest.Send(Func`2 send, Func`2 recv)
at Unify.Product.IdentityBroker.LdapConnection.SendRequest(ILdapRequest request)
at Unify.Product.IdentityBroker.LdapConnectionProxy.PartitionDeltaRequestPaged(String partitionDN, Int64 lastChangeNumber, Int32 pageSize)
at System.Linq.Enumerable.d__14`2.MoveNext()
at System.Linq.Enumerable.WhereSelectEnumerableIterator`2.MoveNext()
at System.Linq.Enumerable.d__14`2.MoveNext()
at Unify.Product.IdentityBroker.ExtensionMethods.Take[TSource](IEnumerator`1 source, Int32 count, IList`1& items)
at Unify.Product.IdentityBroker.ExtensionMethods.d__0`1.MoveNext()
at Unify.Product.IdentityBroker.ImportProxy.Import(GetImportEntriesRunStep importRunStep)
Forefront Identity Manager 4.1.3646.0"

This is current a high priority ticket so any help is greatly appreciated.

Thanks,

Hayden

0
Not a bug

UNIFYBroker 5.3.1 RC2: Entities are not reflected in the adapter

Anthony Soquin 5 years ago in UNIFYBroker/Plus updated by Matthew Davis (Technical Product Manager) 5 years ago 6

Hi,

I have a connector named "Student" with 28k users but in the Student adapter I have at the momentL 3k entities.

The maximum entities in the adapter was 13k. 

UNIFY Broker has been fully reinstalled and the database re-created to try to fix the issue.

The logs are in Diagnostic mode, there is no error.

We are in UAT env, the same configuration is working fine in DEV and TEST environments.

Answer

Closing due to no response. Feel free to re-open the ticket if the issue persists.

0
Planned

Connector comment not saved

Seems this has happened before - but in version 5.2.1 Revision #0 the SQL connector instances do not allow you to save comments

0
Planned

UNIFY Broker for SQL Virtual Table Support

Sometimes SQL tables and views are not able to be modified as part of an implementation, but the next best thing would often be the use of virtual tables (i.e. a select statement encapsulated by parentheses followed by a table alias.  Presently this is not possible to configure via the UI - perhaps this is only a UI limitation and not a service limitation.

The benefits of this will be in removing dependencies on DBAs, particularly during the build phase when 3rd party SQL resource availability may be an issue (e.g. 3rd party).

0
Not a bug

After the key of an object is changed polling creates a new object but doesn't delete the old one

Adrian Corston 5 years ago in UNIFYBroker/Microsoft Active Directory updated by Adam van Vliet 5 years ago 1

When using polling with the AD connector, a new record is created for objects where any attribute that is part of the key has been changed, and the old object is not removed.  This either means that the polling functionality is not useful, or else the connector cannot be usefully used with any key other than objectGUID.

If this behaviour can't be improved then it really should be mentioned in the documentation for the connector since it's quite important.

Answer
Adam van Vliet 5 years ago
Depending on the specification of the target system we are not always able to retrieve deletions during polling import. This is one of the reasons full imports are scheduled and not just relying on polling. This is unfortunately the case with this connector, as it uses the uSNChanged method, which doesn't surface deletions. I will take a note to update the documentation. Thanks.
0
Answered

How can I see all of the current Adapters/Locker joins?

How can I view which Adapters and Lockers objects are currently joined in the UNIFYBroker/Plus UI?