Announcing the Saviynt Knowledge Exchange unifying the Saviynt forums, documentation, training,
and more in a single search tool across platforms. Read the announcement here.

LDAP Connector Account import failing

user228
New Contributor II
New Contributor II

Accounts were once migrated in the system and there are already in Saviynt. Still, when I tried to migrate the access I faced that error on the screenshot, without any logs.. I tried to change the mapping but now no account, and neither access can be updated...

Because we needed to map the Entitlements, and now they are also not really mapped

pic1.png

I see no error but it is not mapped and always failing...

pic2.png

6 REPLIES 6

rushikeshvartak
All-Star
All-Star

Could you kindly provide a detailed snapshot of the information extracted from the logs, encompassing errors and other pertinent functionality details encountered during the execution of this process? Your assistance in furnishing this information would greatly aid in the analysis and resolution of any issues .


Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.

Raghu
Honored Contributor
Honored Contributor

@user228  Look like Duplicate endpoint account it will come , similar issue we faced long back.

Check log and any GroupMapping Import json can you check ? or share

 


Thanks,
Raghu
If this reply answered your question, Please Accept As Solution and hit Kudos.

user228
New Contributor II
New Contributor II

hi @Raghu and @rushikeshvartak  thank you for the reply!

What do you mean with duplicate endpoint account?

There is an ACCOUNT_ATTRIBUTE mapping:

[ACCOUNTID::uid#String,
name::uid#String,
DISPLAYNAME::displayName#String,
CUSTOMPROPERTY1::employeeNumber#String,
CUSTOMPROPERTY2::givenName#String,
CUSTOMPROPERTY3::sn#String,
CUSTOMPROPERTY4::mobile#String,
CUSTOMPROPERTY5::mail#String,
CUSTOMPROPERTY6::employeeType#String,
CUSTOMPROPERTY7::initials#String,
CUSTOMPROPERTY8::manager#String,
CUSTOMPROPERTY9::orclGUID#String,
CUSTOMPROPERTY10::ou#String,
customproperty16::telephoneNumber#String,
CUSTOMPROPERTY32::activeEntry#Number,
CREATED_ON::whenCreated#date,
RECONCILATION_FIELD::CUSTOMPROPERTY9]

 

and here group mapping:

{
"entitlementTypeName":"isMemberOf",
"groupAccountMappingAttributeName":"member",
"importGroupHierarchy":"true",
"performGroupAccountLinking":"true",
"groupObjectClass":"(objectclass=groupOfNames)",
"mapping":"memberHash:member_char,entitlement_value:cn_char,displayname:cn_char,customproperty2:orclGUID_char,customproperty4:description_char,RECONCILATION_FIELD:customproperty2"
}

by SEARCHFILTER and INCREMENTAL_CONFIG we do not have anything and for OBJECTFILTER we have (objectClass=*)

 

may that can be the problem...

 

user228
New Contributor II
New Contributor II

in the logs it says:

024-05-08T14:26:01+02:00-ecm-worker-services.AdImportService-quartzScheduler_Worker-2-zxb9s-ERROR-Exception while executing accounts batch:

2024-05-08T14:26:01+02:00-ecm-worker--null-zxb9s--java.sql.BatchUpdateException: Duplicate entry '8-456-123' for key 'ENDPOINTKEY' com.mysql.cj.util.Util.handleNewInstance(Util.java:192) com.mysql.cj.util.Util.getInstance(Util.java:167) com.mysql.cj.util.Util.getInstance(Util.java:174) com.mysql.cj.jdbc.exceptions.SQLError.createBatchUpdateException(SQLError.java:224) com.mysql.cj.jdbc.StatementImpl.executeBatchInternal(StatementImpl.java:893) com.mysql.cj.jdbc.StatementImpl.executeBatch(StatementImpl.java:796) com.saviynt.ecm.services.AdImportService$_mapDataToDbAccounts_closure21_closure96_closure97.doCall(AdImportService.groovy:1858) com.saviynt.ecm.services.AdImportService$_mapDataToDbAccounts_closure21_closure96.doCall(AdImportService.groovy:1709) com.saviynt.ecm.services.AdImportService$_mapDataToDbAccounts_closure21.doCall(AdImportService.groovy:1708) com.saviynt.ecm.services.AdImportService.mapDataToDbAccounts(AdImportService.groovy:1705) com.saviynt.ecm.services.AdImportService.getLdapResultAndExecute(AdImportService.groovy:4431) com.saviynt.ecm.services.AdImportService.doImportInternal(AdImportService.groovy:932) at com.saviynt.ecm.services.AdImportService.doImport(AdImportService.groovy:188) com.saviynt.ecm.integration.ExternalConnectionCallService.invokeExternalMethod(ExternalConnectionCallService.groovy:195) at SapImportJob.execute(SapImportJob.groovy:109) org.quartz.core.JobRunShell.run(JobRunShell.java:199) org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:546)Caused by: java.sql.SQLIntegrityConstraintViolationException: Duplicate entry '8-456-123' for key 'ENDPOINTKEY' com.mysql.cj.jdbc.exceptions.SQLError.createSQLException(SQLError.java:117) com.mysql.cj.jdbc.exceptions.SQLError.createSQLException(SQLError.java:97) com.mysql.cj.jdbc.exceptions.SQLExceptionsMapping.translateException(SQLExceptionsMapping.java:122) com.mysql.cj.jdbc.StatementImpl.executeUpdateInternal(StatementImpl.java:1335) com.mysql.cj.jdbc.StatementImpl.executeBatchInternal(StatementImpl.java:859) ... 12 more

It seem you already have account with 456 name in endpointkey 8


Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.

Raghu
Honored Contributor
Honored Contributor

@user228  Duplicate account  means now you will get in logs say right

ava.sql.BatchUpdateException: Duplicate entry '8-456-123' for

endpointkey=8 and account will like '%456'

Need to suspend above account  like '%456' then issue will resolve.


Thanks,
Raghu
If this reply answered your question, Please Accept As Solution and hit Kudos.