Uploaded image for project: 'OpenAM'
  1. OpenAM
  2. OPENAM-15002

Upgrade fails when processing ../ldif/opendj/opendj_update_aci_kba_attempts.ldif

    Details

    • Type: Bug
    • Status: Open
    • Priority: Major
    • Resolution: Unresolved
    • Affects Version/s: None
    • Fix Version/s: None
    • Component/s: upgrade
    • Labels:
    • Target Version/s:

      Description

      Bug description

      Upgrade AM 7.0.0 to 7.0.0 (yes I know this is not supported) results in an upgrade error:

      ERROR: An error occurred while processing /WEB-INF/template/ldif/opendj/opendj_update_aci_kba_attempts.ldif

      org.forgerock.opendj.ldap.ConstraintViolationException: No Such Attribute: Entry dc=openam,dc=forgerock,dc=org cannot be modified because an attempt was made to remove one or more values from attribute aci but this attribute is not present in the entry

      How to reproduce the issue

      1. Install a 7.0.0 snapshot
      2. upgrade to a later snapshot
      Expected behaviour
      Upgrade works
      
      Current behaviour
      Upgrade fails
      

      Work around

      Edit the directory entry for DN: dc=openam,dc=forgerock,dc=org

      such that the second aci includes "kbaInfoAttempts" like this

      (targetattr = "objectclass || inetuserstatus || iplanet-am-user-login-status || iplanet-am-user-account-life || iplanet-am-session-quota-limit || iplanet-am-user-alias-list || iplanet-am-session-max-session-time || iplanet-am-session-max-idle-time || iplanet-am-session-get-valid-sessions || iplanet-am-session-destroy-sessions || iplanet-am-user-admin-start-dn || iplanet-am-auth-post-login-process-class || ds-pwp-account-disabled || sun-fm-saml2-nameid-info || sun-fm-saml2-nameid-infokey || sunAMAuthInvalidAttemptsData || memberof || member || kbaInfoAttempts")(version 3.0; acl "OpenAM User self modification denied for these attributes"; deny (write) userdn ="ldap:///self";)
      

        Attachments

          Activity

            People

            • Assignee:
              Unassigned
              Reporter:
              FatBloke Andy Hall
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated: