Issue with compound fields (multivalues)

Products

• CA Identity Manager

Issue/Introduction

Creating a new DYN connector with a compound attribute generates an error while syncing with the account.

---------------------------------------------------
20221118:163636:TID=001a90:Modify    :C717:C706:F: FAILURE: Child Modify (eTDYNAccountName=MyAccount)
20221118:163636:TID=001a90:Modify    :C717:C706:F:     rc:  0x0013 (Constraint violation)
20221118:163636:TID=001a90:Modify    :C717:C706:F:     msg: :ETA_E_0008<MAC>, User Account 'MyAccount' on 'My DYN endpoint' modif
20221118:163636:TID=001a90:Modify    :C717:C706:F:+ication failed: Connector Server Modify failed: code 19 (CONSTRAINT_VIOLATION): f
20221118:163636:TID=001a90:Modify    :C717:C706:F:+ailed to modify entry: eTDYNAccountName=MyAccount,eTDYNAccountContainerName=Account
20221118:163636:TID=001a90:Modify    :C717:C706:F:+s,eTDYNDirectoryName=My DYN endpoint,eTNamespaceName=My DYN endpoint,dc
20221118:163636:TID=001a90:Modify    :C717:C706:F:+=im_ar,dc=etasa: JCS@myJCSmachine: validation failure: <errorMessages><header>
20221118:163636:TID=001a90:Modify    :C717:C706:F:+Error with eTDYNAccount[="IAM"."USERS_VIGENTES"] object named 'eTDYNAccountName=
20221118:163636:TID=001a90:Modify    :C717:C706:F:+MyAccount,eTDYNAccountContainerName=Accounts,eTDYNDirectoryName=My DYN endpoint
20221118:163636:TID=001a90:Modify    :C717:C706:F:+,eTNamespaceName=My DYN endpoint,dc=im_ar,dc=etasa':</header><messages><erro
20221118:163636:TID=001a90:Modify    :C717:C706:F:+rMessage>attribute eTDYN-str-multi-xx: Attempt to add value '{usr_ugr_id=USR_UGR_
20221118:163636:TID=001a90:Modify    :C717:C706:F:+ID: YYYY, usr_a_entidades_ent_id=USR_ID: 0, usr_identification_nu
20221118:163636:TID=001a90:Modify    :C717:C706:F:+mber=USR_IDENTIFICATION_NUMBER: 0, usr_ip_flag=USR_IP_FLAG: N, usr_tes_id=USR_TES
20221118:163636:TID=001a90:Modify    :C717:C706:F:+_ID: 0.0, usr_dba_access_control=USR_DBA_ACCESS_CONTROL: N}' to single-valued att
20221118:163636:TID=001a90:Modify    :C717:C706:F:+ribute which already has a value</errorMessage></messages></errorMessages> (ldaps
20221118:163636:TID=001a90:Modify    :C717:C706:F:+://myJCSmachine:20411)
20221118:163636:TID=001a90:Modify    :C706:E645:F: FAILURE: Child Modify (eTDYNAccountName=MyAccount)
---------------------------------------------------

Environment

Identity Manager 14.3

Cause

Configuration issue in the connector.

Resolution

- Set the "isMultivalued" check box under "Extended properties".
- Select "Replace" for "force modification mode".

- export the existing metadata of the endpoint into an XML file from the connector Xpress
- replace all "eTDYN-str-multi-xx" instances with "eTDYN-str-xx" and save it. This attribute refers to the compound attribute.

The problem is with the connector adding a new value to the existing one which is not allowed as expected(either has to REPLACE the old one with the new value or delete followed by adding the new value).
The Provisioning server can perform REPLACE operation if the attribute is single-valued. In this case, it is considered it multi-valued even though it's chosen as a single-valued attribute.

- now create a new endpoint type with the latest XML file and test.