Il 15/05/2017 14:24, sasha gesta ha scritto:
Thanks for suggestion. I found the problem was that I had multiple CN attributes in LDAP, after fixing that pulling started to work.

I forwarded the mail about Sasha Gesta.
The problem is resolved.

Marco

On Fri, May 12, 2017 at 11:40 PM, <[email protected] <mailto:[email protected]>> wrote:



    Il 12 maggio 2017 18:14:24 CEST, sasha gesta
    <[email protected] <mailto:[email protected]>> ha scritto:
    >How can I check it? In connector or in resource?
    >
    I reproduced your settings in my env and I'm able to pull users
    from ApacheDS to Syncope.

    I think there is an user in ApacheDS that have one of the mapped
    attributes with a multi value.

    Use jxplorer or ldapsearch to check it.

    M


    >On Fri, May 12, 2017 at 6:55 PM, Marco Di Sabatino Di Diodoro <
    >[email protected] <mailto:[email protected]>>
    wrote:
    >
    >>
    >>
    >> Il 12/05/2017 17:10, sasha gesta ha scritto:
    >>
    >> *Connector* :
    >>
    >> host : ldap1.example.org <http://ldap1.example.org>
    >> tcp port : 10389
    >> principal : uid=admin,ou=system
    >> password : ********
    >> Base Contexts : ou=Users,dc=example,dc=org
    >> Password Attribute : userPassword
    >> Account Object Classes : inetOrgPerson
    >> Account User Name Attributes : cn
    >> LDAP Filter for Retrieving Accounts : cn=*
    >> Uid Attribute : cn
    >> Base Contexts to Synchronize : ou=Users,dc=examples,dc=org
    >> Object Classes to Synchronize : inetOrgPerson
    >> Status management class : net.tirasa.connid.bundles.ldap.commons.
    >> AttributeStatusManagement
    >> Retrieve passwords with search : true
    >>
    >> Capabilies : SEARCH,DELETE,CREATE,UPDATE
    >>
    >>
    >> *Resource* :
    >>
    >> Propagation Actions :
    >> LDAPMembershipPropagation
    >> LDAPPasswordPropagation
    >>
    >> Provisioning rules :
    >> username cn true remotekey checked
    >> password __PASSWORD__ true password checked
    >> Object Link : 'cn=' + username + ',ou=Users,dc=example,dc=org'
    >>
    >> Can you check if description is a multivalue field?
    >>
    >> M
    >>
    >> --
    >> Dott. Marco Di Sabatino Di Diodoro
    >> Tel. +39 3939065570 <tel:%2B39%203939065570>
    <+39%20393%20906%205570>
    >>
    >> Tirasa S.r.l.
    >> Viale D'Annunzio 267 - 65127 Pescara
    >> Tel+39 0859116307 <tel:%2B39%200859116307> <+39%20085%20911%206307> /
    FAX +39 0859111173 <tel:%2B39%200859111173>
    ><+39%20085%20911%201173>http://www.tirasa.net <http://www.tirasa.net>
    >>
    >> Apache Syncope PMC Memberhttp://people.apache.org/~mdisabatino/
    <http://people.apache.org/%7Emdisabatino/>
    >>
    >>

    --
    Marco Di Sabatino Di Diodoro



--
Dott. Marco Di Sabatino Di Diodoro
Tel. +39 3939065570

Tirasa S.r.l.
Viale D'Annunzio 267 - 65127 Pescara
Tel +39 0859116307 / FAX +39 0859111173
http://www.tirasa.net

Apache Syncope PMC Member
http://people.apache.org/~mdisabatino/

Reply via email to