[SYNCOPE-601] AD deleted object synchronization fails if a sync policy is specified on one or more attributes that can have no values on Syncope

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.1.8, 1.2.0
• Fix Version/s: 1.1.9, 1.2.1, 2.0.0-M1
• Assignee: Marco Di Sabatino Di Diodoro
• Reporter: Fabio Martelli
• Created: 06/Nov/14 10:06
• Updated: 16/Feb/15 08:07
• Resolved: 10/Nov/14 11:22

Description

During AD synchronization (via ConnID AD - JNDI - connector bundle) returned connector objects about deleted objects don't have any profile attribute specified (see https://connid.atlassian.net/browse/AD-36).
If a sync posicy is specified to perform a correlation among one or more internal profile attributes, the first user with no values about that attribute will match this correlation rule and maybe removed.

The query has to be changed in order to avoid this behavior (for delteted object and creted-updated):

1. if one or more connector object attributes related to the correlation rule don't exist avoid the query execution ... no match
2. if all the connector object attributes related to the correlation rule exist then perform the query as is