To add to the earlier email, passwordTimestamp claim already has a value
mapped, to nickName. I tried mapping givenName as the attribute, but I'm
still getting the above error from the user store. The wrapping error
message is as follows.


*org.wso2.carbon.identity.base.IdentityException: Error while persisting
identity user data in to user store*


*org.wso2.carbon.user.core.UserStoreException: One or more attributes you
are trying to add/update are not supported by underlying LDAP.*

*javax.naming.directory.NoSuchAttributeException: [LDAP: error code 16 -
NO_SUCH_ATTRIBUTE: failed for     Modify Request*
*        Object : 'uid=chamilad,ou=Users,dc=wso2,dc=org'*
*            Modification[0]*
*                Operation :  replace*
*                Modification*
*    http://wso2.org/claims/identity/passwordTimestamp
<http://wso2.org/claims/identity/passwordTimestamp>: 1417676868397*
*            Modification[1]*
*                Operation :  replace*
*                Modification*
*    initials: true*
*: ERR_04269 ATTRIBUTE_TYPE for OID
http://wso2.org/claims/identity/passwordtimestamp
<http://wso2.org/claims/identity/passwordtimestamp> does not exist!];
remaining name 'uid=chamilad'*


Regards,
Chamila de Alwis
Software Engineer | WSO2 | +94772207163
Blog: code.chamiladealwis.com



On Thu, Dec 4, 2014 at 12:35 PM, Chamila De Alwis <[email protected]> wrote:

> Hi,
>
> I was able to pinpoint the exact error message that comes from the service.
>
>
> *ERR_04269 ATTRIBUTE_TYPE for OID
> http://wso2.org/claims/identity/passwordtimestamp
> <http://wso2.org/claims/identity/passwordtimestamp> does not exist!];
> remaining name 'uid=chamilad'*
>
> What is the attribute to which I should map this claim? IS 4.5.0
> documentation mentions this claim[1], but it doesn't specify which
> attribute I should map in the case of the internal LDAP user store. IS
> 5.0.0 documentation doesn't have an entry for account confirmation that I
> can find.
>
> [1] -
> https://docs.wso2.com/display/IS450/Self+Sign+Up+and+Account+Confirmation
>
>
> Regards,
> Chamila de Alwis
> Software Engineer | WSO2 | +94772207163
> Blog: code.chamiladealwis.com
>
>
>
> On Thu, Dec 4, 2014 at 12:02 PM, Chamila De Alwis <[email protected]>
> wrote:
>
>> Hi,
>>
>> I forgot to mention that when the exception is thrown, the user is
>> already added to the userstore. The user is listed in the users list in the
>> Carbon console. But the email is not sent.
>>
>>
>> Regards,
>> Chamila de Alwis
>> Software Engineer | WSO2 | +94772207163
>> Blog: code.chamiladealwis.com
>>
>>
>>
>> On Thu, Dec 4, 2014 at 9:06 AM, Chamila De Alwis <[email protected]>
>> wrote:
>>
>>> Hi Danushka,
>>>
>>> I'm providing the admin user credentials using the Authenticator. What
>>> do I have to do additionally?
>>>
>>>
>>> Regards,
>>> Chamila de Alwis
>>> Software Engineer | WSO2 | +94772207163
>>> Blog: code.chamiladealwis.com
>>>
>>>
>>>
>>> On Thu, Dec 4, 2014 at 6:37 AM, Danushka Fernando <[email protected]>
>>> wrote:
>>>
>>>> Hi Chamila
>>>> This is an admin service. So you need some admin permissions to call
>>>> this service. Check the services.xml of the component.
>>>>
>>>> Thanks & Regards
>>>> Danushka Fernando
>>>> Software Engineer
>>>> WSO2 inc. http://wso2.com/
>>>> Mobile : +94716332729
>>>>
>>>> On Thu, Dec 4, 2014 at 12:21 AM, Chamila De Alwis <[email protected]>
>>>> wrote:
>>>>
>>>>> Hi,
>>>>>
>>>>> I'm trying to implement the above scenario using the Identity Server
>>>>> and a simple Java client. I've enabled the following in the
>>>>> identity-mgt.properties.
>>>>>
>>>>> Identity.Listener.Enable=true
>>>>> Notification.Sending.Enable=true
>>>>> Notification.Expire.Time=7200
>>>>> Notification.Sending.Internally.Managed=true
>>>>> UserAccount.Verification.Enable=false
>>>>> Authentication.Policy.Enable=true
>>>>> Authentication.Policy.Account.Lock.On.Creation=true
>>>>> Authentication.Policy.Account.Lock.Time=0
>>>>> Authentication.Policy.Account.Lock.On.Failure=false
>>>>> Authentication.Policy.Account.Lock.On.Failure.Max.Attempts=0
>>>>>
>>>>> I have the axis2.xml configured with the mailto transportSender as
>>>>> follows.
>>>>>
>>>>> <transportSender name="mailto"
>>>>>
>>>>> class="org.apache.axis2.transport.mail.MailTransportSender">
>>>>>        <parameter name="mail.smtp.from">[email protected]
>>>>> </parameter>
>>>>>        <parameter name="mail.smtp.user">chtest00001</parameter>
>>>>>        <parameter name="mail.smtp.password">mailpassword</parameter>
>>>>>        <parameter name="mail.smtp.host">smtp.gmail.com</parameter>
>>>>>        <parameter name="mail.smtp.port">587</parameter>
>>>>>        <parameter name="mail.smtp.starttls.enable">true</parameter>
>>>>>        <parameter name="mail.smtp.auth">true</parameter>
>>>>> </transportSender>
>>>>>
>>>>> I've attached the Java code that I'm using the register the user.
>>>>>
>>>>> When executing the service call, I get the following error message,
>>>>> which is not descriptive, and there is nothing in the Carbon console 
>>>>> except
>>>>> for the log entries related to user entry. This occurs in both IS 5.0.0 
>>>>> and
>>>>> IS 4.5.0.
>>>>>
>>>>> VerificationBean verificationBean = *stub.registerUser(userName,
>>>>> password, claims, null, null);*
>>>>>
>>>>> Result
>>>>> =====
>>>>>
>>>>> org.wso2.carbon.identity.mgt.stub.UserInformationRecoveryServiceIdentityMgtServiceExceptionException:
>>>>> UserInformationRecoveryServiceIdentityMgtServiceExceptionException
>>>>> at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native
>>>>> Method)
>>>>> at
>>>>> sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:57)
>>>>> at
>>>>> sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45)
>>>>> at java.lang.reflect.Constructor.newInstance(Constructor.java:526)
>>>>> at java.lang.Class.newInstance(Class.java:374)
>>>>> at
>>>>> org.wso2.carbon.identity.mgt.stub.UserInformationRecoveryServiceStub.registerUser(UserInformationRecoveryServiceStub.java:685)
>>>>> at org.chamilad.test.is.UserRegistration.main(UserRegistration.java:78)
>>>>>
>>>>>
>>>>> Carbon console
>>>>> ===========
>>>>>
>>>>> [2014-12-03 22:51:46,868]  WARN
>>>>> {org.wso2.carbon.server.admin.module.handler.AuthenticationHandler} -
>>>>>  Illegal access attempt at [2014-12-03 22:51:46,0868] from IP address
>>>>> 127.0.0.1 while trying to authenticate access to service
>>>>> UserInformationRecoveryService
>>>>> [2014-12-03 22:51:46,888] DEBUG
>>>>> {org.wso2.carbon.identity.mgt.IdentityMgtEventListener} -  Pre
>>>>> authenticator is called in IdentityMgtEventListener
>>>>> [2014-12-03 22:51:46,916] DEBUG
>>>>> {org.wso2.carbon.identity.mgt.IdentityMgtEventListener} -  Post
>>>>> authenticator is called in IdentityMgtEventListener
>>>>> [2014-12-03 22:51:46,918]  INFO
>>>>> {org.wso2.carbon.core.services.util.CarbonAuthenticationUtil} -
>>>>>  '[email protected] [-1234]' logged in at [2014-12-03
>>>>> 22:51:46,918+0530]
>>>>> [2014-12-03 22:51:46,919] DEBUG
>>>>> {org.wso2.carbon.identity.mgt.util.Utils} -  Domain is not defined
>>>>> implicitly. So it is Super Tenant domain.
>>>>> [2014-12-03 22:51:46,922] DEBUG
>>>>> {org.wso2.carbon.identity.mgt.IdentityMgtEventListener} -  Pre add user is
>>>>> called in IdentityMgtEventListener
>>>>> [2014-12-03 22:51:46,988] DEBUG
>>>>> {org.wso2.carbon.identity.mgt.IdentityMgtEventListener} -  Post add user 
>>>>> is
>>>>> called in IdentityMgtEventListener
>>>>>
>>>>> I tried debugging the server side code, but for both version 4.2.0 and
>>>>> 4.2.1 of org.wso2.carbon.identity.mgt, the debug pointers point to
>>>>> incorrect locations in the source. So I can't really pinpoint from where
>>>>> the IdentityMgtServiceException comes. However it is possible this might 
>>>>> be
>>>>> related to the user store, the default LDAP user store that ships with IS,
>>>>> since the error comes as a UserStoreException as far as I assume.
>>>>>
>>>>>
>>>>> Regards,
>>>>> Chamila de Alwis
>>>>> Software Engineer | WSO2 | +94772207163
>>>>> Blog: code.chamiladealwis.com
>>>>>
>>>>>
>>>>>
>>>>> _______________________________________________
>>>>> Dev mailing list
>>>>> [email protected]
>>>>> http://wso2.org/cgi-bin/mailman/listinfo/dev
>>>>>
>>>>>
>>>>
>>>
>>
>
_______________________________________________
Dev mailing list
[email protected]
http://wso2.org/cgi-bin/mailman/listinfo/dev

Reply via email to