Identity Broker Forum
Welcome to the community forum for Identity Broker.
Browse the knowledge base, ask questions directly to the product group, or leverage the community to get answers. Leave ideas for new features and vote for the features or bug fixes you want most.
Feature Request: Logging from PowerShell Connector
The ability to write directly to the Identity Broker logs - such that any Broker log writer can be employed to pick this up apart from the default - is highly desirable.
Such a feature would avoid the need for the current practice of logging to custom log files using either custom code or various logging libraries.
Hi Bob,
This is already available. See this knowledge page for details:
https://voice.unifysolutions.net/knowledge-bases/7/articles/2917-powershell-connector-logger
Feature Request: Debug Capability for PowerShell Connector
Presently debugging a PowerShell connector script requires extensive use of logging.
While the above is still going to be necessary, the ability to attach a PowerShell ISE session to a PowerShell process to allow step-throughs and breakpoints is highly desirable.
# The following approach allows you to debug a PowerShell connector or adapter transform in IdB # See the following for background: # - https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.utility/wait-debugger?view=powershell-6 # - https://stackoverflow.com/questions/42731150/how-to-pause-a-powershell-script-until-a-debugger-attaches # Prerequisite: PowerShell v5, IdB 5.*, PS connector or adapter transform # 1. Edit the PowerShell code and set a pause in your PowerShell code - long enough to intercept the process and enter debug mode: # you can use wait-debugger, but for now Matt showed me by using start-sleep instead #Wait-Debugger -Timeout 10 Start-Sleep 30 # 2. Find the process ID Get-Runspace # 3. Attach the ISE Enter-PSHostProcess -Name Unify.Service.Connect # 4. Debug the process Debug-Runspace -Id xx
SQL Connector Delta Import auto disable
The delta import functionality on the SQL connector requires a "Modified" column be present in the database, as a DateTime.
If the schema provider doesn't have this column, the "Poll Changes" operation on the connector should be disabled. Currently it just throws an error:
Not currently viable due to the design, backlogged improving the error message and documentation.
Chris21 full import not completing
Chris21 full import is getting partway through and then blocking - no errors thrown, just doesn't complete.
It's only processing 23,000 entities out of a total of 114,000.
SQL Connector Schema Provider not showing error
Noticed today that if you've got a database connector, and the account you're connecting with has access to the database but no roles assigned (db_reader etc) then a request schema will not show an error - it will instead show that there are no schema fields.
Test agent completes without issue.
The only way to show the error (no SELECT permission), you have to manually add a schema field and attempt an import.
The schema provider should display this same error when attempting to get the schema.
Duplicate Error on DN in PowerShell script
I have a PowerShell connector that is pulling two attributes, DN and another one. DN is the key and it's throwing errors saying "An item with the same key has already been added". This isn't possible because DN is unique. Here is the Import All script:
import-module ActiveDirectory
$server = "Dcbr2wdc1"
$searchBase = "ou=Users,ou=dams,dc=internaldmz-dev,dc=local"
$users = get-aduser -Server $server -SearchBase $searchBase -Properties DistinguishedName, msDS-UserPasswordExpiryTimeComputed -Filter {PasswordNeverExpires -eq $false}
foreach($user in $users)
{
$entity=$entities.Create()
$entity["ADDN"] = $user.DistinguishedName
$entity["ComputedPasswordExpiry"] = $user.'msDS-UserPasswordExpiryTimeComputed'
$entity.Commit()
}
and here is the schema
New-Field 'ADDN' 'string' $true $false $true;
New-Field 'ComputedPasswordExpiry' 'string' $false $false $false;
# name type key read-only required
I tried writing the DNs to a file in the script and just got a list of DNs, no obvious duplicate. Attached the log and connector config.
More context in error messages
Can we get more information in error messages. An example is today, in a connector, I'm getting the error:
"An error has occurred: An item with the same key has already been added."
This is all the information I'm getting and though it tells me what the error is it doesn't give me any information that helps me resolve it. What would be useful is if it provided the key that it's faulting on.
Adapter Error: DN Component, Argument Out of Range Exception
I have an adapter that is a position type that has a field for the ReportsTo position. I'm generating a DN on this field. I've got bad data here so it wouldn't be able to resolve the DN. My question is, should this prevent the entire adapter from loading in changes. Right now I've got 19 changes and 0 entities and this error being thrown. Does the bad DN reference prevent the whole thing from loading?
This is the error I'm getting:
It'll stop reflection because of the nature of the way it's currently calculated and the requirement that the changes are in order. As Matthew mentioned we are exploring ways to improve this process. For now you'll need to fix the transformation configuration so that it does not error out. Regarding the generated reference, UNIFYBroker does not do reference checking, as it's assumed that this is done by the identity management platform.
Adapter Error: A task was cancelled
I've created an adapter and only just had the connector populated. The adapter shows >1000 entities but when I click on the link to go to the Entity Search, it sits at Processing for a few minutes and then the following pop-up appears. There's nothing about it in Event Viewer or the IdB logs
Daniel has confirmed that the patch fixed the issue.
Error retrieving certificate for LDAP Security
What is this error indicating and how do I resolve it?
I am having some connectivity problems in one of my agents that should be over SSL, not sure if it's unrelated.
Customer support service by UserEcho