[lsc-users] sync Group - Too many entries returned with Cn as PivoAttribute

[danie...@iol.it]

Hi all,

    

    First of all compliments for the product.  It works very well in
    our environment.

    

    We have a question:

    in our directories exist some groups with identical "cn", but
    different ou.

    

    Does it exist a method to force syncing these groups without errors
    ? or ...

    is it possibile to use dn as pivot or in other manner for
    distinguishing groups with identical cn ?

    

    below we report:

    the task, example of our groups, and the error in output

    

    Thanks in advance,

    Dan

    

_____________________________________________________________________

    <task>

          <name>setgroup</name>

          <bean>org.lsc.beans.SimpleBean</bean>

      <asyncLdapSourceService>

            <name>group-source-service</name>

            <connection reference="src" />

            <baseDn>dc=ourdomain,dc=it</baseDn>

            <pivotAttributes>

              <string>cn</string>

            </pivotAttributes>

            <fetchedAttributes>

              <string>cn</string>

              <string>description</string>

              <string>uniqueMember</string>

            </fetchedAttributes>

           
<getAllFilter><![CDATA[(objectClass=groupOfUniqueNames)]]></getAllFilter>

           
<getOneFilter><![CDATA[(&amp;(objectClass=groupOfUniqueNames)(cn={cn}))]]></getOneFilter>

           
<cleanFilter><![CDATA[(&amp;(objectClass=groupOfUniqueNames)(cn={cn}))]]></cleanFilter>

            <serverType>OpenLDAP</serverType>

          </asyncLdapSourceService>

          <ldapDestinationService>

            <name>group-dst-service</name>

            <connection reference="dst" />

            <baseDn>dc=ourdomain,dc=it</baseDn>

            <pivotAttributes>

              <string>cn</string>

            </pivotAttributes>

            <fetchedAttributes>

              <string>cn</string>

              <string>description</string>

              <string>uniqueMember</string>

            </fetchedAttributes>

           
<getAllFilter><![CDATA[(objectClass=groupOfUniqueNames)]]></getAllFilter>

           
<getOneFilter><![CDATA[(&amp;(objectClass=groupOfUniqueNames)(cn={cn}))]]></getOneFilter>

          </ldapDestinationService>

     

    <propertiesBasedSyncOptions>

    <mainIdentifier>"cn=" +
    srcBean.getDatasetFirstValueById("cn")+
srcBean.getMainIdentifier().substring(srcBean.getMainIdentifier().indexOf(","),srcBean.getMainIdentifier().indexOf("dc="))+"dc=ourdomain,dc=it"</mainIdentifier>

            <defaultDelimiter>;</defaultDelimiter>

            <defaultPolicy>FORCE</defaultPolicy>

            <conditions>

              <create>true</create>

              <update>true</update>

              <delete>true</delete>

              <changeId>true</changeId>

            </conditions>

            <dataset>

              <name>objectclass</name>

              <policy>KEEP</policy>

              <createValues>

                <string>"groupOfUniqueNames"</string>

                <string>"top"</string>

              </createValues>

            </dataset>

      <dataset>

             <name>member</name>

             <policy>FORCE</policy>

             <forceValues>

               <string>

              <![CDATA[rjs:

                    var membersSrcDn =
    srcBean.getDatasetValuesById("uniqueMember");

                    var membersDstDn = [];

                    for  (var i=0; i<membersSrcDn.size(); i++) {

                            var memberSrcDn = membersSrcDn.get(i);

                            membersDstDn.push(destMemberDn);

                    }

                    membersDstDn

               ]]>

               </string>

             </forceValues>

          </dataset>

        </propertiesBasedSyncOptions>

     </task>

        

    

    

    

    

_____________________________________________________________________

    

    

    

    dn: cn=group123,ou=Sox,dc=ourdomain,dc=it

    objectClass: groupOfUniqueNames

    objectClass: top

    cn: group123

    description: 

    uniqueMember: uid=jack,dc=ourdomain,dc=it

    uniqueMember: uid=ann,dc=ourdomain,dc=it

dn: cn=group123,ou=Don,dc=ourdomain,dc=it
objectClass: groupOfUniqueNames
objectClass: top
cn: group123
description: 
uniqueMember: uid=jack,dc=ourdomain,dc=it
uniqueMember: uid=ann,dc=ourdomain,dc=ituniqueMember: 
uid=list,dc=ourdomain,dc=it

    

    

_____________________________________________________________________

    

    Jul 26 14:53:09 - ERROR - Error while synchronizing ID
    {cn=[group123]}: org.lsc.exception.LscServiceException:
    javax.naming.SizeLimitExceededException: Too many entries returned
    (base: "dc=ourdomain,dc=it", filter:
    "(&amp;(objectClass=groupOfUniqueNames)(cn=group123))")

    Jul 26 14:53:09 - ERROR - Too many entries returned (base:
    "dc=ourdomain,dc=it", filter:
    "(&amp;(objectClass=groupOfUniqueNames)(cn=group123))")

    Jul 26 14:53:09 - ERROR - Error while synchronizing ID
    {cn=[group123]}: org.lsc.exception.LscServiceException:
    javax.naming.SizeLimitExceededException: Too many entries returned
    (base: "dc=ourdomain,dc=it", filter:
    "(&amp;(objectClass=groupOfUniqueNames)(cn=group123))")

    Jul 26 14:53:10 - ERROR - All entries: 36, to modify entries: 0,
    successfully modified entries: 0, errors: 2

_______________________________________________________________
Ldap Synchronization Connector (LSC) - http://lsc-project.org

lsc-users mailing list
lsc-users@lists.lsc-project.org
http://lists.lsc-project.org/listinfo/lsc-users