Identity Broker Forum

Welcome to the community forum for Identity Broker.

Browse the knowledge base, ask questions directly to the product group, or leverage the community to get answers. Leave ideas for new features and vote for the features or bug fixes you want most.

0
Answered

Further investigation of chris21 change detection mechanisms

Matthew Clark 12 years ago in UNIFYBroker/Frontier ichris/chris21 updated by anonymous 9 years ago 8

As part of IDBCHRS-34, the change detection mechanism has been updated such that the user will not be required to select the relevant "EAI Type" field, as this is believed to be too advanced for the goals of Identity Broker v4.0 (in particular, the "Parts" type). These require the user to have full understanding of how chris21 is sending its data back to Identity Broker, down to the position in the string returned, and be able to interpret the result in full.

The mechanism has been updated such that a large majority of forms are completely covered by the changes. However, some forms return change data which cannot be directly mapped back to a chris21 request, such as the ALW form:

cbr="eailst",gw_transactionid="186",eaiidentity="12051411062278000023200000000",eaifile="EMALW",eaichange="A",eaikeydata="OK1006 .79496PAATF00",eaiempno="OK1006",eaiempdate,eailogonid,updatetag="FRONTIER;20514110622",accesslevel="delete",status="ok"

The key for the form is made of 5 components, but things can be of varying lengths. Compare the above key data with:

eaikeydata="101137.79372EABT00"
eaikeydata="100500008790PON_P00"

Under the old mechanism, the user would need to add a Parts type and manually enter the position of the second key in the string in order to use EAI.

Given this complexity, investigate the success of the current changes to change detection for user requirements, further investigate the wrapping of these keys, and also consider alternate change mechanisms to overcome this apparent limitation (such as seeing the impact "Changes enabled" has on file tables).

A dictionary has been added for additional handling of specific forms in the future. Specific forms should be investigated and added to the dictionary.

0
Answered

Identity Broker for chris21 errors when attempting to write to fax attribute

Nick Mathas 13 years ago in UNIFYBroker/Novell Identity Manager updated by anonymous 9 years ago 8

Here is an error I am getting when I attempt to write the fax attribute (alttele) to CHRIS21... I think this is the same error reflected twice.

Identity Broker Errors:

Timestamp Severity Source Module Message
26/07/2011 3:26:26 PM Warning Save entities to connector failed. Connector "Save entities Count:1 to connector Chris21 Person Connector failed with reason GTR result has an invalid status=""fail"" attribute.

Chris21 GTR returned no additional error messages.. Duration: 00:00:00.1552735
Error details:
System.IO.InvalidDataException: GTR result has an invalid status=""fail"" attribute.

Chris21 GTR returned no additional error messages.
at Unify.Framework.Chris21GtrWorker.CheckStatusAttribute(IChris21GtrCommandLine chris21GtrCommandLine)
at Unify.Framework.Chris21GtrWorker.CheckUpdateResult(IChris21GtrRecord updateResultRecord)
at Unify.Communicators.Chris21GtrCommunicatorBase.Update(IChris21GtrEntity entity)
at Unify.Connectors.Chris21GtrConnectorBase`1.SaveEntity(IConnectorEntity entity)
at Unify.Connectors.Chris21GtrConnectorBase`1.SaveEntities(IEnumerable`1 entities)
at Unify.Framework.ConnectorToWritingConnectorBridge.SaveEntities(IEnumerable`1 entities)
at Unify.Framework.EventNotifierWritingConnectorDecorator.SaveEntities(IEnumerable`1 entities)
at Unify.Framework.Adapter.SaveEntities(IEnumerable`1 entities, Boolean reflect)
at Unify.Framework.Adapter.SaveEntity(IAdapterEntity entity, Boolean reflect)
at Unify.Framework.AdapterNotifierDecorator.SaveEntity(IAdapterEntity entity, Boolean reflect)
at Unify.Adapters.NovellIdentityManagerIdentityBrokerDriverAdapter.PerformSubscribeModifyAction(XElement actionNode, IAdapter adapter)"

Timestamp Severity Source Module Message
26/07/2011 3:26:26 PM Warning Adapter request to save entity to adapter space failed. Adapter "Adapter request to save entity bb2a8727-836e-4c78-a7e0-8871b03367a9 to adapter space 53e85508-7648-409c-bd3a-0737028eba29 failed with reason GTR result has an invalid status=""fail"" attribute.

Chris21 GTR returned no additional error messages.. Duration: 00:00:00.3388672
Error details:
System.IO.InvalidDataException: GTR result has an invalid status=""fail"" attribute.

Chris21 GTR returned no additional error messages.
at Unify.Framework.Chris21GtrWorker.CheckStatusAttribute(IChris21GtrCommandLine chris21GtrCommandLine)
at Unify.Framework.Chris21GtrWorker.CheckUpdateResult(IChris21GtrRecord updateResultRecord)
at Unify.Communicators.Chris21GtrCommunicatorBase.Update(IChris21GtrEntity entity)
at Unify.Connectors.Chris21GtrConnectorBase`1.SaveEntity(IConnectorEntity entity)
at Unify.Connectors.Chris21GtrConnectorBase`1.SaveEntities(IEnumerable`1 entities)
at Unify.Framework.ConnectorToWritingConnectorBridge.SaveEntities(IEnumerable`1 entities)
at Unify.Framework.EventNotifierWritingConnectorDecorator.SaveEntities(IEnumerable`1 entities)
at Unify.Framework.Adapter.SaveEntities(IEnumerable`1 entities, Boolean reflect)
at Unify.Framework.Adapter.SaveEntity(IAdapterEntity entity, Boolean reflect)
at Unify.Framework.AdapterNotifierDecorator.SaveEntity(IAdapterEntity entity, Boolean reflect)
at Unify.Adapters.NovellIdentityManagerIdentityBrokerDriverAdapter.PerformSubscribeModifyAction(XElement actionNode, IAdapter adapter)"


FaxNumberConvertPolicy.xml
0
Completed

Give Identity Broker a Support and Help link in Programs and Features.

Tony Sheehy 12 years ago updated by anonymous 9 years ago 2

It's possible to give installed applications a Help and Support link, visible in the Programs and Features section. If this isn't too hard it might be worthwhile.

Start at http://msdn.microsoft.com/en-us/library/aa368032.aspx and http://blogs.technet.com/b/alexshev/archive/2008/02/09/from-msi-to-wix-part-2.aspx. Looks like the following might work:

<Property Id="ARPHELPLINK" Value="somelink.com" />
0
Fixed

sapPerson Edit Connector Page looks wierd

Monash 9 years ago in UNIFYBroker/SAP ERP Human Capital Management updated by anonymous 9 years ago 1

IdB 4.1.4.2
SAP 4.1.3.1

Please look at screenshot as editing / viewing via GUI of sapPerson is not working. Currently using XML.


image-20150725122128.png
0
Completed

Manage details from CXA_DIR_ENTRY table

Adam van Vliet 13 years ago in UNIFYBroker/Aderant Expert updated by anonymous 9 years ago 0

Add new table to be managed by Expert connector - CXA_DIR_ENTRY:

DIRCTY_UNO - Primary key, to be generated using stored procedure.
NAME_UNO - Foreign key, known.
DIR_TYPE_UNO - Not sure, was set to "20" in shown data, need to confirm.
INACTIVE - Defaults to "N"
DIRECTORY_LISTING - login@freehills.com, use simple attribute flow and a rules extension.
LISTING_DESC - Defaults to null.
DISPLAY_AS - Defaults to null.
COUNTRY_CODE - Defaults to null.
SCREEN_TIP - Defaults to null.
LAST_MODIFIED_BY - Defaults to zero (use simple flow with rules extension).
CREATED - Use GetDatabaseDateTime function in connector code to get database time.
CREATED_BY - Defaults to zero (use simple flow with rules extension).
LAST_MODIFIED - Don't include in database schema, should have a trigger.

0
Fixed

Cannot update Date Relational Relevant transformation if DN generator used

Tony Sheehy 12 years ago updated by anonymous 9 years ago 2

Unable to edit the Date Relational Relevant transformation if the DN generator is used. This is because the EntityDistinguishedNameDateRelationalRelevantValueAdapterFactory class does not implement the IAdapterEntityDNTransformationFactory interface.

0
Answered

Identity Broker Group membership relational tranformation with multi value attribute

Shane Lim 13 years ago updated by anonymous 9 years ago 8

I would like to use Identity Broker Group membership relational tranformation to construct the group membership.
What I would like to know is can we use string based multi-value attribute (value separated by comma) for the InputKey(info) and RelationKey (groupmember) to determine the matching such that one Group can have multiple criteria for determining which users can be it member.

Sample IdB Adapter configuration

				<!-- generating the multi-value Members attribute -->
				<adapter name="Relation.Group" 
					 InputKey="info"
					 RelationshipConnectorId="{cf81fc63-2206-413a-a102-804d399526de}"
					 RelationKey="groupmember"
					 RelationReference="employeeId"
					 GroupTarget="Members" >
					<dn>
						<dnComponent name="Field" key="employeeId" attributeType="UID" />
					</dn>
				</adapter>	

Example - The Security Group's info attribute in AD and Metaverse is a multi-value attribute. The user's groupmember attribute is a multi-value attribute (could be a string base comma separated values).

  • A Security Group (A) info attribute has these values: "Sales" and "Marketing".
  • Another Security Group (B) info attribute has these values: "General".
  • A user's (C) groupmember attribute has these values: "General" and "Sales".
  • Another user's (D) groupmember attribute has these values: "General" and "Marketing".
  • We want to user (C) and (D) to be a member of Security Group (A) and Security Group (B) based on the above information.

Can this be achieved?

0
Fixed

Composite key relational transformation breaking column sources

Tony Sheehy 11 years ago updated by anonymous 9 years ago 2

The composite key relational transformation hits key conflict as the same contribution is added for each relation for each column source.

This implementation is actually correct, the offending code is the Add call in the AdapterColumnSources which is missing logic that was not migrated in the 660 Rev ("IDB-231: Added support for multiple contributions to a transformation contribution.")

The rest of the changes in this revision need to be checked to confirm that they have been migrated.

Additionally, the UI has a bug in which a relationship that has already been added cannot be removed (the page just refreshes).

0
Fixed

Error thrown when removing exclusion period

Matthew Clark 12 years ago updated by anonymous 9 years ago 3

The following error was thrown when I attempted to delete one of the multiple exclusion periods on the schedule UI for a connector:

System.ServiceModel.FaultException`1System.ServiceModel.ExceptionDetail: A connector matching the id '00000000-0000-0000-0000-000000000000' could not be located. (Fault Detail is equal to An ExceptionDetail, likely created by IncludeExceptionDetailInFaults=true, whose value is: Unify.Framework.UnifyEngineException: A connector matching the id '00000000-0000-0000-0000-000000000000' could not be located. at Unify.Product.IdentityBroker.ConnectorRepository.GetConnector(Guid connectorId)
at Unify.Product.IdentityBroker.EventNotifierConnectorRepositoryDecorator.GetConnector(Guid connectorId)
at Unify.Product.IdentityBroker.ConnectorEngine.GetConnectorGetAllEntitiesTimings(Guid connectorId)
at Unify.Product.IdentityBroker.ConnectorEngineNotifierDecorator.GetConnectorGetAllEntitiesTimings(Guid connectorId)
at Unify.Product.IdentityBroker.ConnectorEngineAccessor.GetConnectorGetAllEntitiesTimings(Guid connectorId)
at Unify.Product.IdentityBroker.IdentityServiceCollector.GetConnectorGetAllEntitiesTimings(Guid connectorId)
at SyncInvokeGetConnectorGetAllEntitiesTimings(Object , Object[] , Object[] )
at System.ServiceModel.Dispatcher.SyncMethodInvoker.Invoke(Object instan...).

Potentially another issue caused by IE caching requests.

0
Completed

Identity Broker for Aurion on Synchronization Import fail with error: Change detection engine poll for connector Aurion Employee Connector failed with reason The connector 6375bc27-6543-4a58-a5ea-9065380ba76a does not support polling

André van der Westhuizen 12 years ago in UNIFYBroker/Aurion updated by anonymous 9 years ago 1

When I run a Synchronization Import on the Aurion Employee connector or Security User connector I get "Change detection engine poll for connector Aurion Employee Connector failed with reason The connector 6375bc27-6543-4a58-a5ea-9065380ba76a does not support polling"

When I run a full import all is working.