By: Gene Liverman user 27 Sep 2016 at 6:38 p.m. CDT

4 Responses
Gene Liverman gravatar
I can't seem to figure out why I am having issues sync'ing to my AD. I get lots of errors like this from the end of my log: ``` 2016-09-27 19:31:05,057 ERROR [gluu.oxtrust.ldap.cache.service.CacheRefreshTimer] (pool-2-thread-2) Failed to 'add' person '@!F5EB.ED90.372C.905F!0001!1F88.EF99!0000!8158.03F0' org.gluu.site.ldap.persistence.exception.EntryPersistenceException: Failed to persist entry: inum=@!F5EB.ED90.372C.905F!0001!1F88.EF99!0000!8158.03F0,ou=people,o=@!F5EB.ED90.372C.905F!0001!1F88.EF99,o=gluu at org.gluu.site.ldap.persistence.LdapEntryManager.persist(LdapEntryManager.java:106) at org.gluu.site.ldap.persistence.AbstractEntryManager.persist(AbstractEntryManager.java:92) at org.gluu.oxtrust.ldap.service.PersonService.addPerson(PersonService.java:102) at sun.reflect.GeneratedMethodAccessor1347.invoke(Unknown Source) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:606) at org.jboss.seam.util.Reflections.invoke(Reflections.java:22) at org.jboss.seam.intercept.RootInvocationContext.proceed(RootInvocationContext.java:32) at org.jboss.seam.intercept.SeamInvocationContext.proceed(SeamInvocationContext.java:56) at org.jboss.seam.transaction.RollbackInterceptor.aroundInvoke(RollbackInterceptor.java:28) at org.jboss.seam.intercept.SeamInvocationContext.proceed(SeamInvocationContext.java:68) at org.jboss.seam.core.BijectionInterceptor.aroundInvoke(BijectionInterceptor.java:79) at org.jboss.seam.intercept.SeamInvocationContext.proceed(SeamInvocationContext.java:68) at org.jboss.seam.core.MethodContextInterceptor.aroundInvoke(MethodContextInterceptor.java:44) at org.jboss.seam.intercept.SeamInvocationContext.proceed(SeamInvocationContext.java:68) at org.jboss.seam.intercept.RootInterceptor.invoke(RootInterceptor.java:107) at org.jboss.seam.intercept.JavaBeanInterceptor.interceptInvocation(JavaBeanInterceptor.java:196) at org.jboss.seam.intercept.JavaBeanInterceptor.invoke(JavaBeanInterceptor.java:114) at org.gluu.oxtrust.ldap.service.PersonService_$$_javassist_seam_10.addPerson(PersonService_$$_javassist_seam_10.java) at org.gluu.oxtrust.ldap.cache.service.CacheRefreshTimer.updateTargetEntryViaCopy(CacheRefreshTimer.java:667) at org.gluu.oxtrust.ldap.cache.service.CacheRefreshTimer.updateTargetEntriesViaCopy(CacheRefreshTimer.java:556) at org.gluu.oxtrust.ldap.cache.service.CacheRefreshTimer.detectChangedEntries(CacheRefreshTimer.java:379) at org.gluu.oxtrust.ldap.cache.service.CacheRefreshTimer.processImpl(CacheRefreshTimer.java:270) at org.gluu.oxtrust.ldap.cache.service.CacheRefreshTimer.process(CacheRefreshTimer.java:178) at sun.reflect.GeneratedMethodAccessor364.invoke(Unknown Source) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:606) at org.jboss.seam.util.Reflections.invoke(Reflections.java:22) at org.jboss.seam.intercept.RootInvocationContext.proceed(RootInvocationContext.java:32) at org.jboss.seam.intercept.SeamInvocationContext.proceed(SeamInvocationContext.java:56) at org.jboss.seam.transaction.RollbackInterceptor.aroundInvoke(RollbackInterceptor.java:28) at org.jboss.seam.intercept.SeamInvocationContext.proceed(SeamInvocationContext.java:68) at org.jboss.seam.core.BijectionInterceptor.aroundInvoke(BijectionInterceptor.java:79) at org.jboss.seam.intercept.SeamInvocationContext.proceed(SeamInvocationContext.java:68) at org.jboss.seam.core.MethodContextInterceptor.aroundInvoke(MethodContextInterceptor.java:44) at org.jboss.seam.intercept.SeamInvocationContext.proceed(SeamInvocationContext.java:68) at org.jboss.seam.async.AsynchronousInterceptor.aroundInvoke(AsynchronousInterceptor.java:52) at org.jboss.seam.intercept.SeamInvocationContext.proceed(SeamInvocationContext.java:68) at org.jboss.seam.intercept.RootInterceptor.invoke(RootInterceptor.java:107) at org.jboss.seam.intercept.JavaBeanInterceptor.interceptInvocation(JavaBeanInterceptor.java:196) at org.jboss.seam.intercept.JavaBeanInterceptor.invoke(JavaBeanInterceptor.java:114) at org.gluu.oxtrust.ldap.cache.service.CacheRefreshTimer_$$_javassist_seam_34.process(CacheRefreshTimer_$$_javassist_seam_34.java) at sun.reflect.GeneratedMethodAccessor363.invoke(Unknown Source) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:606) at org.jboss.seam.util.Reflections.invoke(Reflections.java:22) at org.jboss.seam.util.Reflections.invokeAndWrap(Reflections.java:144) at org.jboss.seam.Component.callComponentMethod(Component.java:2313) at org.jboss.seam.core.Events.raiseEvent(Events.java:85) at org.jboss.seam.async.AsynchronousEvent$1.process(AsynchronousEvent.java:33) at org.jboss.seam.async.Asynchronous$ContextualAsynchronousRequest.run(Asynchronous.java:80) at org.jboss.seam.async.AsynchronousEvent.execute(AsynchronousEvent.java:27) at org.jboss.seam.async.ThreadPoolDispatcher$RunnableAsynchronous.run(ThreadPoolDispatcher.java:142) at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:471) at java.util.concurrent.FutureTask.runAndReset(FutureTask.java:304) at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.access$301(ScheduledThreadPoolExecutor.java:178) at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledThreadPoolExecutor.java:293) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615) at java.lang.Thread.run(Thread.java:745) Caused by: Connection exception (LDAP config error: schema violation contact LDAP admin.: Entry inum=@!F5EB.ED90.372C.905F!0001!1F88.EF99!0000!8158.03F0,ou=people,o=@!F5EB.ED90.372C.905F!0001!1F88.EF99,o=gluu violates the Directory Server schema configuration because it is missing attribute cn which is required by objectclass person) at org.gluu.site.ldap.OperationsFacade.addEntry(OperationsFacade.java:383) at org.gluu.site.ldap.persistence.LdapEntryManager.persist(LdapEntryManager.java:101) ... 59 more 2016-09-27 19:31:05,057 INFO [gluu.oxtrust.ldap.cache.service.CacheRefreshTimer] (pool-2-thread-2) Updated '0' entries 2016-09-27 19:31:05,057 INFO [gluu.oxtrust.ldap.cache.service.CacheRefreshTimer] (pool-2-thread-2) Failed to update '94,670' entries 2016-09-27 19:31:05,353 INFO [gluu.oxtrust.ldap.cache.service.CacheRefreshTimer] (pool-2-thread-2) Removed '0' persons from target server 2016-09-27 19:31:05,353 INFO [gluu.oxtrust.ldap.cache.service.CacheRefreshTimer] (pool-2-thread-2) There are '94,670' entries before updating inum list 2016-09-27 19:31:05,353 INFO [gluu.oxtrust.ldap.cache.service.CacheRefreshTimer] (pool-2-thread-2) There are '94,670' entries after removal '0' entries 2016-09-27 19:31:05,355 INFO [gluu.oxtrust.ldap.cache.service.CacheRefreshTimer] (pool-2-thread-2) There are '94,670' entries after adding '0' entries ```

By Gene Liverman user 27 Sep 2016 at 6:40 p.m. CDT

Gene Liverman gravatar
I am using this filter too by the way: Object class box is set to `person` Custom ldap filter: `(&(!(objectClass=computer))(mail=*)(givenName=*)(sn=*)(cn=*))`

By Aliaksandr Samuseu staff 27 Sep 2016 at 7:08 p.m. CDT

Aliaksandr Samuseu gravatar
Hi, Gene. Seems like, despite your best efforts, `cn` still isn't being assigned a value through mappings and/or CR script: ``` Caused by: Connection exception (LDAP config error: schema violation contact LDAP admin.: Entry inum=@!F5EB.ED90.372C.905F!0001!1F88.EF99!0000!8158.03F0,ou=people,o=@!F5EB.ED90.372C.905F!0001!1F88.EF99,o=gluu violates the Directory Server schema configuration because it is missing attribute cn which is required by objectclass person) ``` If you haven't set explicit mappings for `cn` and `sn` on CR's page, let's do that now and see whether this will help. Best regards, Alex.

By Gene Liverman user 27 Sep 2016 at 7:31 p.m. CDT

Gene Liverman gravatar
That was it, I had entries for sn but not cn. THANK YOU!

By Aliaksandr Samuseu staff 27 Sep 2016 at 7:33 p.m. CDT

Aliaksandr Samuseu gravatar
Sure, closing it then.