PWM Error 5045

[jpuc...@netcraftsmen.com]

Hey Guys,

I'm looking for a little guidance here and I'm aware that the root cause of this issue is likely with my setup and not PWM itself.

I have been fighting with this for a while, and I need another avenue to pursue in my trouble shooting.


I am using Active Directory 2012, and CentOS with PWM Daily Build. (from last week)

This is the error I'm getting: http://i.imgur.com/4X9zxSQ.png

PWM 5045

An error occurred during the save of your response questions. Please contact your administrator. { 5045 ERROR_WRITING_RESPONSES (response storage only partially successful; attempts=1, successes=0, detail={"LDAP":"error saving responses via LDAP, error: 5045 ERROR_WRITING_RESPONSES (error writing user responses to ldap attribute 'pwmResponseSet': [LDAP: error code 16 - 00000057: LdapErr: DSID-0C090CB9, comment: Error in attribute conversion operation, data 0, v2580\u0000])"}) }


I have the pwmResponseSet Schema Attribute set right now with EVERYONE having full control (I know this a horrible policy this is just for testing): http://i.imgur.com/vcc9szC.png

Here are my attribute settings: http://i.imgur.com/j3v2gpi.png

OID Set as per documentation at 1.3.6.1.4.1.35015.1.2.2 and the CN=pwmResponseSet

I don't expect you guys to solve all my problems or help me troubleshoot Windows 2012, I get that is unrealistic... But if you could just point me in the right direction I would be much obliged!

Thanks Guys,
Joshua

[jpuc...@netcraftsmen.com]

I forgot to mention, this error occurs while setting Recovery Questions on any user, from the highest level admin to a standard user.

[Menno Pieters]

Hi,

My guess is that the type of the attribute is not correct. The OID is of less importance, as long as it is unique.

- Menno

On Tue, Jun 9, 2015 at 9:27 PM <jpuc...@netcraftsmen.com> wrote:

I forgot to mention, this error occurs while setting Recovery Questions on any user, from the highest level admin to a standard user.

--
You received this message because you are subscribed to the Google Groups "pwm-general" group.
To unsubscribe from this group and stop receiving emails from it, send an email to pwm-general...@googlegroups.com.
To post to this group, send email to pwm-g...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/pwm-general/2e5f1b19-b488-454d-bcb9-a43b4f25cde5%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[jpuc...@netcraftsmen.com]

Thanks Menno,

I will check that out. I did not know that the OID Was so insignificant. Let me Double check the type as you suggested.


Appreciate the help,
Joshua

[jpuc...@netcraftsmen.com]

Hi Menno,

I was trying to check the type as you suggested, but through my exploration I can't see an attribute that says type? Is there an alternative terminology for that?

Here is my ldp output of the Schema:

Dn: CN=pwmResponseSet,CN=Schema,CN=Configuration,DC=mydomain,DC=com
adminDisplayName: pwmResponseSet;
attributeID: 1.3.6.1.4.1.35015.1.2.2;
attributeSyntax: 2.5.5.10 = ( OCTET_STRING );
cn: pwmResponseSet;
distinguishedName: CN=pwmResponseSet,CN=Schema,CN=Configuration,DC=mydomain,DC=com;
dSCorePropagationData (5): 6/9/2015 11:57:56 AM Eastern Daylight Time; 6/9/2015 11:42:48 AM Eastern Daylight Time; 6/9/2015 11:42:46 AM Eastern Daylight Time; 6/9/2015 11:29:28 AM Eastern Daylight Time; 0x1 = ( NEW_SD ), 0x0 = ( ), 0x0 = ( ), 0x0 = ( );
instanceType: 0x4 = ( WRITE );
isDefunct: FALSE;
isSingleValued: FALSE;
lDAPDisplayName: pwmResponseSet;
msDS-IntId: -2008826642;
name: pwmResponseSet;
objectCategory: CN=Attribute-Schema,CN=Schema,CN=Configuration,DC=mydomain,DC=com;
objectClass (2): top; attributeSchema;
objectGUID: 9146d87e-cba2-4c30-bf88-266e7f954662;
oMSyntax: 4 = ( OCTET_STRING );
schemaIDGUID: 75bd8f30-7a63-4922-b697-0d95651ed509;
showInAdvancedViewOnly: TRUE;
uSNChanged: 98802;
uSNCreated: 94204;
whenChanged: 6/11/2015 1:50:47 PM Eastern Daylight Time;
whenCreated: 6/9/2015 11:19:20 AM Eastern Daylight Time;


Thank-you for your insight,

Joshua

[webkode]

Hi Joshua,

Once again you've added pwmResponseSet as an attribute, but it should be a class:

I see that you have added pwmResponseSet as an attribute while it should be added as a class.

Please compare:

objectClass (2): top; attributeSchema;

to:

objectClass: top
objectClass: classSchema




/P