Hi, I was able to overcome this by adding the following claim mapping.
DescriptionIdentity Password TimeStampClaim Uri http://wso2.org/claims/identity/passwordTimestampMapped Attribute (s) facsimileTelephoneNumber Now I'm getting an error when the email is being generated. Following is the related log entry. [2014-12-04 14:55:53,243] DEBUG {org.wso2.carbon.identity.mgt.mail.DefaultEmailSendingModule} - Sending user credentials configuration mail to [email protected] [2014-12-04 14:55:55,371] ERROR {org.wso2.carbon.identity.mgt.mail.DefaultEmailSendingModule} - Failed Sending EmailError generating mail message I'm looking in to this now. Following is the email template I've configured. <configuration type="accountConfirmation"> <targetEpr></targetEpr> <subject>WSO2 Carbon - Account Confirmation</subject> <body> Hi {first-name}, You have created an account with following user name User Name: {user-name} Please click the following link to unlock. If clicking the link doesn't seem to work, you can copy and paste the link into your browser's address window. https://localhost:8443/InfoRecoverySample/confirmReg?confirmation={confirmation-code}&userName={user-name} </body> <footer> Best Regards, WSO2 Identity Server Team http://www.wso2.com </footer> <redirectPath></redirectPath> </configuration> Regards, Chamila de Alwis Software Engineer | WSO2 | +94772207163 Blog: code.chamiladealwis.com On Thu, Dec 4, 2014 at 12:42 PM, Chamila De Alwis <[email protected]> wrote: > To add to the earlier email, passwordTimestamp claim already has a value > mapped, to nickName. I tried mapping givenName as the attribute, but I'm > still getting the above error from the user store. The wrapping error > message is as follows. > > > *org.wso2.carbon.identity.base.IdentityException: Error while persisting > identity user data in to user store* > > > *org.wso2.carbon.user.core.UserStoreException: One or more attributes you > are trying to add/update are not supported by underlying LDAP.* > > *javax.naming.directory.NoSuchAttributeException: [LDAP: error code 16 - > NO_SUCH_ATTRIBUTE: failed for Modify Request* > * Object : 'uid=chamilad,ou=Users,dc=wso2,dc=org'* > * Modification[0]* > * Operation : replace* > * Modification* > * http://wso2.org/claims/identity/passwordTimestamp > <http://wso2.org/claims/identity/passwordTimestamp>: 1417676868397* > * Modification[1]* > * Operation : replace* > * Modification* > * initials: true* > *: ERR_04269 ATTRIBUTE_TYPE for OID > http://wso2.org/claims/identity/passwordtimestamp > <http://wso2.org/claims/identity/passwordtimestamp> does not exist!]; > remaining name 'uid=chamilad'* > > > Regards, > Chamila de Alwis > Software Engineer | WSO2 | +94772207163 > Blog: code.chamiladealwis.com > > > > On Thu, Dec 4, 2014 at 12:35 PM, Chamila De Alwis <[email protected]> > wrote: > >> Hi, >> >> I was able to pinpoint the exact error message that comes from the >> service. >> >> >> *ERR_04269 ATTRIBUTE_TYPE for OID >> http://wso2.org/claims/identity/passwordtimestamp >> <http://wso2.org/claims/identity/passwordtimestamp> does not exist!]; >> remaining name 'uid=chamilad'* >> >> What is the attribute to which I should map this claim? IS 4.5.0 >> documentation mentions this claim[1], but it doesn't specify which >> attribute I should map in the case of the internal LDAP user store. IS >> 5.0.0 documentation doesn't have an entry for account confirmation that I >> can find. >> >> [1] - >> https://docs.wso2.com/display/IS450/Self+Sign+Up+and+Account+Confirmation >> >> >> Regards, >> Chamila de Alwis >> Software Engineer | WSO2 | +94772207163 >> Blog: code.chamiladealwis.com >> >> >> >> On Thu, Dec 4, 2014 at 12:02 PM, Chamila De Alwis <[email protected]> >> wrote: >> >>> Hi, >>> >>> I forgot to mention that when the exception is thrown, the user is >>> already added to the userstore. The user is listed in the users list in the >>> Carbon console. But the email is not sent. >>> >>> >>> Regards, >>> Chamila de Alwis >>> Software Engineer | WSO2 | +94772207163 >>> Blog: code.chamiladealwis.com >>> >>> >>> >>> On Thu, Dec 4, 2014 at 9:06 AM, Chamila De Alwis <[email protected]> >>> wrote: >>> >>>> Hi Danushka, >>>> >>>> I'm providing the admin user credentials using the Authenticator. What >>>> do I have to do additionally? >>>> >>>> >>>> Regards, >>>> Chamila de Alwis >>>> Software Engineer | WSO2 | +94772207163 >>>> Blog: code.chamiladealwis.com >>>> >>>> >>>> >>>> On Thu, Dec 4, 2014 at 6:37 AM, Danushka Fernando <[email protected]> >>>> wrote: >>>> >>>>> Hi Chamila >>>>> This is an admin service. So you need some admin permissions to call >>>>> this service. Check the services.xml of the component. >>>>> >>>>> Thanks & Regards >>>>> Danushka Fernando >>>>> Software Engineer >>>>> WSO2 inc. http://wso2.com/ >>>>> Mobile : +94716332729 >>>>> >>>>> On Thu, Dec 4, 2014 at 12:21 AM, Chamila De Alwis <[email protected]> >>>>> wrote: >>>>> >>>>>> Hi, >>>>>> >>>>>> I'm trying to implement the above scenario using the Identity Server >>>>>> and a simple Java client. I've enabled the following in the >>>>>> identity-mgt.properties. >>>>>> >>>>>> Identity.Listener.Enable=true >>>>>> Notification.Sending.Enable=true >>>>>> Notification.Expire.Time=7200 >>>>>> Notification.Sending.Internally.Managed=true >>>>>> UserAccount.Verification.Enable=false >>>>>> Authentication.Policy.Enable=true >>>>>> Authentication.Policy.Account.Lock.On.Creation=true >>>>>> Authentication.Policy.Account.Lock.Time=0 >>>>>> Authentication.Policy.Account.Lock.On.Failure=false >>>>>> Authentication.Policy.Account.Lock.On.Failure.Max.Attempts=0 >>>>>> >>>>>> I have the axis2.xml configured with the mailto transportSender as >>>>>> follows. >>>>>> >>>>>> <transportSender name="mailto" >>>>>> >>>>>> class="org.apache.axis2.transport.mail.MailTransportSender"> >>>>>> <parameter name="mail.smtp.from">[email protected] >>>>>> </parameter> >>>>>> <parameter name="mail.smtp.user">chtest00001</parameter> >>>>>> <parameter name="mail.smtp.password">mailpassword</parameter> >>>>>> <parameter name="mail.smtp.host">smtp.gmail.com</parameter> >>>>>> <parameter name="mail.smtp.port">587</parameter> >>>>>> <parameter name="mail.smtp.starttls.enable">true</parameter> >>>>>> <parameter name="mail.smtp.auth">true</parameter> >>>>>> </transportSender> >>>>>> >>>>>> I've attached the Java code that I'm using the register the user. >>>>>> >>>>>> When executing the service call, I get the following error message, >>>>>> which is not descriptive, and there is nothing in the Carbon console >>>>>> except >>>>>> for the log entries related to user entry. This occurs in both IS 5.0.0 >>>>>> and >>>>>> IS 4.5.0. >>>>>> >>>>>> VerificationBean verificationBean = *stub.registerUser(userName, >>>>>> password, claims, null, null);* >>>>>> >>>>>> Result >>>>>> ===== >>>>>> >>>>>> org.wso2.carbon.identity.mgt.stub.UserInformationRecoveryServiceIdentityMgtServiceExceptionException: >>>>>> UserInformationRecoveryServiceIdentityMgtServiceExceptionException >>>>>> at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native >>>>>> Method) >>>>>> at >>>>>> sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:57) >>>>>> at >>>>>> sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45) >>>>>> at java.lang.reflect.Constructor.newInstance(Constructor.java:526) >>>>>> at java.lang.Class.newInstance(Class.java:374) >>>>>> at >>>>>> org.wso2.carbon.identity.mgt.stub.UserInformationRecoveryServiceStub.registerUser(UserInformationRecoveryServiceStub.java:685) >>>>>> at >>>>>> org.chamilad.test.is.UserRegistration.main(UserRegistration.java:78) >>>>>> >>>>>> >>>>>> Carbon console >>>>>> =========== >>>>>> >>>>>> [2014-12-03 22:51:46,868] WARN >>>>>> {org.wso2.carbon.server.admin.module.handler.AuthenticationHandler} - >>>>>> Illegal access attempt at [2014-12-03 22:51:46,0868] from IP address >>>>>> 127.0.0.1 while trying to authenticate access to service >>>>>> UserInformationRecoveryService >>>>>> [2014-12-03 22:51:46,888] DEBUG >>>>>> {org.wso2.carbon.identity.mgt.IdentityMgtEventListener} - Pre >>>>>> authenticator is called in IdentityMgtEventListener >>>>>> [2014-12-03 22:51:46,916] DEBUG >>>>>> {org.wso2.carbon.identity.mgt.IdentityMgtEventListener} - Post >>>>>> authenticator is called in IdentityMgtEventListener >>>>>> [2014-12-03 22:51:46,918] INFO >>>>>> {org.wso2.carbon.core.services.util.CarbonAuthenticationUtil} - >>>>>> '[email protected] [-1234]' logged in at [2014-12-03 >>>>>> 22:51:46,918+0530] >>>>>> [2014-12-03 22:51:46,919] DEBUG >>>>>> {org.wso2.carbon.identity.mgt.util.Utils} - Domain is not defined >>>>>> implicitly. So it is Super Tenant domain. >>>>>> [2014-12-03 22:51:46,922] DEBUG >>>>>> {org.wso2.carbon.identity.mgt.IdentityMgtEventListener} - Pre add user >>>>>> is >>>>>> called in IdentityMgtEventListener >>>>>> [2014-12-03 22:51:46,988] DEBUG >>>>>> {org.wso2.carbon.identity.mgt.IdentityMgtEventListener} - Post add user >>>>>> is >>>>>> called in IdentityMgtEventListener >>>>>> >>>>>> I tried debugging the server side code, but for both version 4.2.0 >>>>>> and 4.2.1 of org.wso2.carbon.identity.mgt, the debug pointers point to >>>>>> incorrect locations in the source. So I can't really pinpoint from where >>>>>> the IdentityMgtServiceException comes. However it is possible this might >>>>>> be >>>>>> related to the user store, the default LDAP user store that ships with >>>>>> IS, >>>>>> since the error comes as a UserStoreException as far as I assume. >>>>>> >>>>>> >>>>>> Regards, >>>>>> Chamila de Alwis >>>>>> Software Engineer | WSO2 | +94772207163 >>>>>> Blog: code.chamiladealwis.com >>>>>> >>>>>> >>>>>> >>>>>> _______________________________________________ >>>>>> Dev mailing list >>>>>> [email protected] >>>>>> http://wso2.org/cgi-bin/mailman/listinfo/dev >>>>>> >>>>>> >>>>> >>>> >>> >> >
_______________________________________________ Dev mailing list [email protected] http://wso2.org/cgi-bin/mailman/listinfo/dev
