Identity Broker Forum

Welcome to the community forum for Identity Broker.

Browse the knowledge base, ask questions directly to the product group, or leverage the community to get answers. Leave ideas for new features and vote for the features or bug fixes you want most.

0
Fixed

The IdentityBroker service will not start due to an 'IsolatedStorageException: Unable to determine application identity of caller' exception.

Tony Sheehy 13 years ago updated by anonymous 9 years ago 3

A determination may be necessary for the correct course of action with regards to the exception:

System.IO.IsolatedStorage.IsolatedStorageException occurred
  Message=Unable to determine application identity of the caller.
  Source=mscorlib
  StackTrace:
       at System.IO.IsolatedStorage.IsolatedStorage.InitStore(IsolatedStorageScope scope, Type appEvidenceType)
       at System.IO.IsolatedStorage.IsolatedStorageFile.GetStore(IsolatedStorageScope scope, Type applicationEvidenceType)
       at Unify.Console.Program.Main() in S:\hg\Product\IdentityBroker\Master-T\Source\Service\Unify.Console.Connect\Program.cs:line 26
  InnerException: 

This exception is encountered while debugging the IdentityBroker service in its current state.

A temporary workaround has been encountered whereby the the IsolatedStorageFile of the IdentityBrokerServiceEngine is changed to:

IsolatedStorageFile.GetMachineStoreForAssembly();

but a determination will need to be made as to whether this is correct and what implications it has with regards to the IdentityBroker service.

0
Fixed

Relative DN Type UI breaks If no DN type fields are in the schema

Tony Sheehy 12 years ago updated by anonymous 9 years ago 4

The following is unhandled:

System.ArgumentException: The parameters dictionary contains a null entry for parameter 'transformationId' of non-nullable type 'System.Guid' for method 'System.Web.Mvc.ActionResult AddDNGenerator(System.Guid, System.Guid)' in 'Unify.Connect.Web.AdapterController'. An optional parameter must be a reference type, a nullable type, or be declared as an optional parameter.
Parameter name: parameters
 at System.Web.Mvc.ActionDescriptor.ExtractParameterFromDictionary(ParameterInfo parameterInfo, IDictionary`2 parameters, MethodInfo methodInfo)
 at System.Linq.Enumerable.WhereSelectArrayIterator`2.MoveNext()
 at System.Linq.Buffer`1..ctor(IEnumerable`1 source)
 at System.Linq.Enumerable.ToArray[TSource](IEnumerable`1 source)
 at System.Web.Mvc.ReflectedActionDescriptor.Execute(ControllerContext controllerContext, IDictionary`2 parameters)
 at System.Web.Mvc.ControllerActionInvoker.InvokeActionMethod(ControllerContext controllerContext, ActionDescriptor actionDescriptor, IDictionary`2 parameters)
 at System.Web.Mvc.ControllerActionInvoker.<>c__DisplayClass15.<InvokeActionMethodWithFilters>b__12()
 at System.Web.Mvc.ControllerActionInvoker.InvokeActionMethodFilter(IActionFilter filter, ActionExecutingContext preContext, Func`1 continuation)
 at System.Web.Mvc.ControllerActionInvoker.InvokeActionMethodWithFilters(ControllerContext controllerContext, IList`1 filters, ActionDescriptor actionDescriptor, IDictionary`2 parameters)
 at System.Web.Mvc.ControllerActionInvoker.InvokeAction(ControllerContext controllerContext, String actionName)
0
Fixed

Null reference on entity search when using a DN field added by a relational transformation

Matthew Clark 12 years ago updated by anonymous 9 years ago 9

Attempting an entity search on an adapter with a DN value generated by a relational transformation following the changes for IDB-514, the following error appears:

System.ArgumentNullException: Value cannot be null.
Parameter name: source
at System.Linq.Enumerable.SelectTSource,TResult(IEnumerable`1 source, Func`2 selector)
at Unify.Framework.IO.DistinguishedNameMultiPartComponent.ToString() in c:\workspaces\DEV\FrameworkCore\Source\IO\Unify.Framework.IO.LDIF\DistinguishedNameMultiPartComponent.cs:line 140
at System.Linq.Enumerable.WhereSelectListIterator`2.MoveNext()
at System.Linq.Buffer`1..ctor(IEnumerable`1 source)
at System.Linq.Enumerable.ToArrayTSource(IEnumerable`1 source)
at Unify.Framework.IO.DistinguishedName.GetStringValue() in c:\workspaces\DEV\FrameworkCore\Source\IO\Unify.Framework.IO.LDIF\DistinguishedName.cs:line 214
at Unify.Connect.Web.EntitySerializer.<>c_DisplayClass5.<EntityDisplayValues>b_2(GroupedNameValueCollectionKey valueKey) in c:\workspaces\DEV\IdentityBroker\Source\Studio\Unify.Connect.Web\Extensions\Entity\EntitySerializer.cs:line 43
at System.Linq.Enumerable.ToDictionaryTSource,TKey,TElement(IEnumerable`1 source, Func`2 keySelector, Func`2 elementSelector, IEqualityComparer`1 comparer)
at Unify.Connect.Web.EntitySerializer.EntityDisplayValues(IEntity entity, IDictionary`2 schemaConfiguration) in c:\workspaces\DEV\IdentityBroker\Source\Studio\Unify.Connect.Web\Extensions\Entity\EntitySerializer.cs:line 41
at ASP.Page_Views_Shared_SearchEntities_cshtml.<>cDisplayClass12.<RenderEntities>b_11(TextWriter __razor_helper_writer) in c:\Program Files\UNIFY Solutions\Identity Broker\Web\Views\Shared\SearchEntities.cshtml:line 623
at ASP._Page_Views_Shared_SearchEntities_cshtml.Execute() in c:\Program Files\UNIFY Solutions\Identity Broker\Web\Views\Shared\SearchEntities.cshtml:line 133
at System.Web.WebPages.WebPageBase.ExecutePageHierarchy()
at System.Web.Mvc.WebViewPage.ExecutePageHierarchy()
at System.Web.WebPages.StartPage.ExecutePageHierarchy()
at System.Web.WebPages.WebPageBase.ExecutePageHierarchy(WebPageContext pageContext, TextWriter writer, WebPageRenderingBase startPage)
at System.Web.Mvc.ViewResultBase.ExecuteResult(ControllerContext context)
at System.Web.Mvc.ControllerActionInvoker.<>c_DisplayClass1c.<InvokeActionResultWithFilters>b_19()
at System.Web.Mvc.ControllerActionInvoker.InvokeActionResultFilter(IResultFilter filter, ResultExecutingContext preContext, Func`1 continuation)
at System.Web.Mvc.ControllerActionInvoker.InvokeActionResultWithFilters(ControllerContext controllerContext, IList`1 filters, ActionResult actionResult)
at System.Web.Mvc.ControllerActionInvoker.InvokeAction(ControllerContext controllerContext, String actionName)

0
Completed

How to terminate or deactivate a user in Aurion system

Shane Lim 13 years ago in UNIFYBroker/Aurion updated by anonymous 9 years ago 25

I need to be able to test Codeless Framework configuration for enabling and disabling of user account in AD based on the Aurion termination status.

Would you be able to provide me details on how to terminate or deactivate and unterminate (re-active) a user in Aurion system v10.01.02.04.

I have tried reading the Aurion online help but failed achieve the above.

Thank you

0
Fixed

Default url encoding might be wrong

Mitchell Dowd (Coffey Internat 11 years ago in UNIFYBroker/Frontier ichris/chris21 updated by anonymous 9 years ago 2

Default encoding in the base http communicator does not match the default encoding coming from chris21.

chris21 can be changed to output UTF-8 (the default behaviour of the communicator), but this is not a robust long term solution.

UFCORE-56 will add the ability for the response encoding type to be changed, but the default will be UTF-8 (current behaviour). Identity Broker for Frontier chris21 should have it's use of the communicator information changed to default to UTF-7.

Example data (Célia outputs as C?lia):

detg1name1=%22C%E9lia%22
0
Completed

Extend Database Connector for polling (delta) imports

Adam van Vliet 11 years ago updated by anonymous 9 years ago 2

The Identity Broker IDB40:Database Connector should be extended to provide other methods of doing polling (delta) imports:

  1. Select a datetime column.
  2. Select another table for delta information (optionally clear table).
  3. PowerShell script to return the changed entity id's (copy from PowerShell connector), the regular database GetEntities call (unchanged) to do the rest.

Consider another method where a PowerShell script is configurable to obtain the changed keys, allowing the database connector to then retrieve those items. Or some other use of PowerShell to allow for this to be configurable.

0
Completed

Import containers even when there are no objects in the connector

Matthew Clark 11 years ago updated by anonymous 9 years ago 1

See ENVIRON-25. The Identity Broker adapter currently generates container objects out of all the DNs that it processes and passes them through on an adapter import. This is especially true when DN generation is configured in Identity Broker to be of a similar format to

cn=Field,cn=ObjectClass (constant field generator)

which would generate a container object with DN "cn=ObjectClass" and pass it to the IdM system.

In FIM, you cannot provision objects until the container exists in the connector space, meaning at present you either need to have already imported an object with a DN in this format, or you would need to provision the container to the connector space. This is fine for most cases but when you have systems that are targets only that will begin empty, you will have to either add a mock object to the system (which is sometimes impossible) or write some provisioning logic to add the empty container.

It would be useful if in cases where the DN structure for adapters is known to have been set up as described above (ie. using constant field generators), to always pass through the container.

0
Fixed

What should I set the validator to so that I can import a smallint from a SQL table?

Daniel Walters 13 years ago updated by anonymous 9 years ago 7

I'm configuring a connector that connects to SQL database. There's a field in the table whose type is smallint.

When I try to import the unifylog.csv file returns this line for each row.
Type ShortValue of value 1 in field Status is invalid. Expected type SingleValue.,Normal

I got the list of valid validators below from an Event Log error when I tried setting the validator to short.

boolean, binary, timestamp, date, decimal, dn, guid, int, long, double, single, string, boolean.multi, timestamp.multi, date.multi, decimal.multi, dn.multi, guid.multi, int.multi, long.multi, double.multi, single.multi, string.multi.

I've tried setting the validator in the connector config for the status field to int, long and string and none of them have worked.

What should I set the validator to so that I can import a smallint from a SQL table?

0
Completed

Improve exception when object class mismatch encountered

Tony Sheehy 11 years ago updated by anonymous 9 years ago 2

There is no safe retrieve on the objectclass lookup for adapter saves,
(LDIFToAdapterEntitySaveAdapterBase.cs line 118), this throws an exception similar to the following:

System.Exception: Error occurred when attempting to save entity with distinguished name
 
UID=a71bfacc-8201-4ec6-84c3-0a2ecc942d2e
 
Error:
 
The given key was not present in the dictionary.
   at System.Collections.Generic.Dictionary`2.get_Item(TKey key)
   at Unify.Product.IdentityBroker.LDIFToAdapterEntitySaveAdapterBase`1.ConvertValues(String objectClass, IEnumerable`1 convertedValues)
   at Unify.Product.IdentityBroker.LDIFToAdapterEntitySaveChangeAdapter.GetConvertedValuesFromSchema(String objectClass, IEnumerable`1 values)
   at Unify.Product.IdentityBroker.LDIFToAdapterEntitySaveChangeAdapter.&lt;Transform&gt;d__3.MoveNext()
   at Unify.Product.IdentityBroker.LDIFAdapterBase.ExportChanges(ExportedLDIFForAdapter exportedLdifForAdapter)
   at SyncInvokeExportChanges(Object , Object[] , Object[] )
   at System.ServiceModel.Dispatcher.SyncMethodInvoker.Invoke(Object instance, Object[] inputs, Object[]&amp; outputs)
   at System.ServiceModel.Dispatcher.DispatchOperationRuntime.InvokeBegin(MessageRpc&amp; rpc)
   at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage5(MessageRpc&amp; rpc)
   at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage31(MessageRpc&amp; rpc)
   at System.ServiceModel.Dispatcher.MessageRpc.Process(Boolean isOperationContextSet)
   at Unify.Product.IdentityBroker.IdentityBrokerManagementAgentProxy.ExportEntry(ModificationType modificationType, String[] changedAttributes, CSEntry csentry)

This isn't very descriptive of the real problem and needs to be updated; make sure every usage of that dictionary employs the TryGet call.

0
Completed

Remove ability to save xMA to services directory

Matthew Clark 12 years ago in UNIFYBroker/Microsoft Identity Manager updated by anonymous 9 years ago 2

It was decided that the xMA Generator should not allow users to save xMAs to the Service directory of Identity Broker, as this may involve writing to and cluttering an applications drive. This feature should be removed from the generator, with the FIM Instance and Download Locally options providing more than enough flexibility.