Reconcile Identity Attributes

1 view
Skip to first unread message

coocooche

unread,
Feb 3, 2010, 6:42:30 AM2/3/10
to Velo
Hello,
i'm working with version 1.4 and i'm testing Velo feeding from an
external jdbc resource ( simple MySQL db users table with “username”,
“password”,”name”, “surname”, etc.) .
When a reconcile, Velo successfully finds all users and creates new
accounts and users.
All accounts are ok, I mean all account's attributes are set
correctly. Velo doesn't do the same
with users. Velo is going to create users only with the username (the
same in the external resource) and nothing else(no name, no surname,
etc.).
I thought of two solution (correct me if I'm doing some mistakes or
trying out a bad logic. This is my first experience on IAM :) ) :

Solution (a): I have to enable every identity attributes on Velo from
LOCAL to RESOURCE_ATTRIBUTE and then I have to map attribute users
with attribute accounts to have users with all their attributes.
It works, but in this way the attributes that I map on user are
disable and then I can't use them for creating new users.

Solution (b): Reconciliation-->Users Reconciliation-->Reconcile
Identity Attributes and then “Reconcile Identity Attributes Now!”. I
think that this task is going to reconcile my attributes (users / new
accounts), isn't it?! Every attribute of the resource that I create is
Persist, Synch and at last (in the “Attribute Source”) the “Source
Type” is “IDENTITY_ATTRIBUTE” and the “Identity Attribute Mapping” is
the respective attribute that I want to map. This task give me
FATAL_ERROR.

Here are the interest log lines:
010-02-03 11:23:13,805 DEBUG [velo.ejb.impl.TaskBean] Task id '30', is
a generic type task, executing task.

2010-02-03 11:23:13,805 INFO [velo.entity.IdentityAttributesSyncTask]
Executing User Identity Attributes Reconcile process...

2010-02-03 11:23:13,805 INFO [velo.actions.Action] Action is executed
for action class name:
velo.reconcilidation.ReconcileIdentityAttributes

2010-02-03 11:23:13,805 DEBUG [velo.actions.Action] Action Validation
phase has -started- for class:
velo.reconcilidation.ReconcileIdentityAttributes

2010-02-03 11:23:13,805 DEBUG [velo.actions.Action] Action Validation
phase has successfully -ended- for class:
velo.reconcilidation.ReconcileIdentityAttributes

2010-02-03 11:23:13,805 DEBUG [velo.actions.Action] Action PRE phase
has -started- for class:
velo.reconcilidation.ReconcileIdentityAttributes

2010-02-03 11:23:13,805 DEBUG [velo.actions.Action] Action PRE phase
has -started- for class:
velo.reconcilidation.ReconcileIdentityAttributes

2010-02-03 11:23:13,805 DEBUG
[velo.reconcilidation.ReconcileIdentityAttributes] Loading Users and
Identity Attributes to synchronize, please wait...

2010-02-03 11:23:13,805 DEBUG [org.jboss.seam.Component] initializing
new instance of: identityAttributeManager

2010-02-03 11:23:13,809 DEBUG [org.jboss.seam.Component] done
initializing: identityAttributeManager

…....

2010-02-03 11:23:14,312 TRACE
[velo.reconcilidation.ReconcileIdentityAttributes] Cannot add resource
named 'risorsa_jdbc' to the resourceSources MAP since it already
exist!'


2010-02-03 11:23:14,312 TRACE
[velo.reconcilidation.ReconcileIdentityAttributes] Found '1' target
systems that are sources of IdentityAttributes to be synced, making
sure that there are valid ActiveData XMLs for all found target
systems!


2010-02-03 11:23:14,313 ERROR [velo.account.ActiveAccountsConstructor]
Could not constrcut ActiveAccounts by XML Active Data: Sync list
importer execution has occured, failed with message: Cannot import
sync list file, an IO exception has occured, failed with message: /usr/
local/velo/velo_ws/resources/risorsa_jdbc/sync_files/
risorsa_jdbc_sync.xml (No such file or directory)

2010-02-03 11:23:14,313 ERROR
[velo.reconcilidation.ReconcileIdentityAttributes] Failed to perofrm
Reconcile Identity Attributes due to: 'Could not constrcut
ActiveAccounts by XML Active Data: Sync list importer execution has
occured, failed with message: Cannot import sync list file, an IO
exception has occured, failed with message: /usr/local/velo/velo_ws/
resources/risorsa_jdbc/sync_files/risorsa_jdbc_sync.xml (No such file
or directory)')

2010-02-03 11:23:14,313 DEBUG
[velo.reconcilidation.ReconcileIdentityAttributes] END: Successfully
constructed ActiveAccounts per relevant Resource, process execution
time: 1 ms


Thank you,
Gentjan

coocooche

unread,
Feb 4, 2010, 6:19:10 AM2/4/10
to Velo
Well, going to "Reconciliation-->Users Reconciliation-->Reconcile
Identity Attributes and then pressing “Reconcile Identity Attributes
Now!”, i'd noticed that this reconcile my attributes (Identity
Attributes / Resource Attributes). First of all,when i have to create
Resource Attributes, i have to map every Resource Attribute with an
Identity Attribute. After pressing “Reconcile Identity Attributes
Now!” and then executing “Synchronize Identity Attributes” task, makes
the matches between Identity Attributes and Resource Attributes.
Well, about the FATAL_ERROR i resolved. The problem was that i made
“Resource Reconciliation” before doing first the Sinchronization of
the Identity Attributes.

But I already have the problem of the empty field of the users (such
as Fisrt Name, Last Name, etc.) after the reconciliation?! How to come
out?

Thanks,
Gentjan

Trouby

unread,
Feb 5, 2010, 9:56:47 AM2/5/10
to Velo
The first way you have done the mapping is the right way to go,
True, you will only be able to display the values and they will
currently be disabled,

Velo currently does not support auto attribute updates via the user
management interface,
Attribute update via the user consolidated attribute interface is
scheduled for Velo 2!


Don't use User REconciliation / Reconcile Identity attributes, those
were old ways to perform IAs synchronization, this is deprecated
feature.

Thanks!

coocooche

unread,
Feb 11, 2010, 12:50:58 PM2/11/10
to Velo
Thanks Asaf,
it's so clear to me now. I'm very excited to test out Velo 2.0, any
news about when it comes out?
Reply all
Reply to author
Forward
0 new messages