<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
Hi Anand,<br>
<br>
can you please be more precise about "value entered by user"?<br>
Do you mean that the host and/or(?) description attributes are
expected to be managed by the user who is editing the user in
midPoint, on the right side of User details in Accounts part? Are
these expected to be set always explicitly by the user? No
automation from midpoint user attributes?<br>
<br>
Thanks,<br>
I.<br>
<br>
<div class="moz-cite-prefix">On 01/22/2015 02:03 PM, Anand Kothekar
wrote:<br>
</div>
<blockquote
cite="mid:CAHUT-CQN2YjvCaixukfufX24b8gn_1XGgjoja3JWCAp7L7ZNMA@mail.gmail.com"
type="cite">
<div dir="ltr">Hi Ivan,
<div><br>
</div>
<div>Thanks for your inputs.</div>
<div><br>
</div>
<div>I tried it by adding this constraint in inducement itself
and it worked but I want to do this at resource level.</div>
<div><br>
</div>
<div>I tried adding the same in resource but the thing is I do
not have any outbound mapping defined for these attributes (as
I use the value entered by user ) now if I add only strength
property in outbound it gives me Error.</div>
<div><br>
</div>
<div>Can you help me with pointing to the right kind of mapping
I need to do.</div>
<div><br>
</div>
<div>Here is the host attribute snippet from my resource: </div>
<div>
<div> <attribute></div>
<div> <ref xmlns:ri="<a moz-do-not-send="true"
href="http://midpoint.evolveum.com/xml/ns/public/resource/instance-3">http://midpoint.evolveum.com/xml/ns/public/resource/instance-3</a>">ri:host</ref></div>
<div> <matchingRule xmlns:mr="<a
moz-do-not-send="true"
href="http://prism.evolveum.com/xml/ns/public/matching-rule-3">http://prism.evolveum.com/xml/ns/public/matching-rule-3</a>">mr:stringIgnoreCase</matchingRule></div>
<div> <outbound></div>
<div> <strength>strong</strength></div>
<div> </outbound></div>
<div> </attribute></div>
</div>
<div><br>
</div>
<div>I need to know how I can map value entered by user.</div>
<div><br>
</div>
<div><br>
</div>
<div><br>
</div>
<div>Thanks,<br>
</div>
<div>Anand Kothekar</div>
<div><br>
</div>
<img moz-do-not-send="true" class="mailtrack-img"
src="https://mailtrack.io/trace/mail/d135da3b35156e7fb91451c62304d863dcedb216.png"
height="0" width="0"></div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Thu, Jan 22, 2015 at 5:52 PM, Ivan
Noris <span dir="ltr"><<a moz-do-not-send="true"
href="mailto:ivan.noris@evolveum.com" target="_blank">ivan.noris@evolveum.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
<div text="#000000" bgcolor="#FFFFFF"> Hi Anand,<br>
<br>
can you please define the mappings for description and
host attributes as strong?<br>
<br>
Something like:<br>
<br>
<attribute><br>
<ref>ri:description</ref><br>
<outbound><br>
<b>
<strength>strong</strength></b><b><br>
</b>. . .<br>
</outbound><br>
</attribute><br>
Then run the reconciliation again please.<br>
<br>
If you already have this configured and it does not work,
please share the attribute mappings here.<br>
<br>
Regards,<br>
I.
<div>
<div class="h5"><br>
<br>
<div>On 01/20/2015 11:15 AM, Anand Kothekar wrote:<br>
</div>
</div>
</div>
<blockquote type="cite">
<div>
<div class="h5">
<div dir="ltr">Hi,
<div><br>
</div>
<div>I have been playing around with role
inducements and found some issue, need some
quick help as inducements are quite important
for our solution.</div>
<div><br>
</div>
<div><u>Issue:</u> Inducement updates are not
propagated properly to User after
reconciliation.</div>
<div><br>
</div>
<div><u>Details:</u> When user is a assigned a
role having a resource inducement, User gets
appropriate accounts and induced group
memberships. Now Changing some attributes in
role inducements are not propagated after
reconciling User.</div>
<div><br>
</div>
<div><u>Steps Followed:</u></div>
<div>- I added and ldap resource inducement in a
new Role<b>. </b>I provided some attributes
like LdapGroups, Host, and description.<br>
</div>
<div>- User is assigned to this Role. User gets
the ldap account, appropriate group
memberships and other attributes specified in
inducement (i.e. description ,host(multivalued
attribute from an Auxiliary object class)). So
all good till now.</div>
<div>- Now I updated the Resource inducement for
example changed the description, added few
groups, added few host.</div>
<div>- After inducement modification I reconciled
the User, and following are the results:</div>
<div>
<blockquote style="margin:0 0 0
40px;border:none;padding:0px">
<div>- Group membership is updated
appropriately.</div>
</blockquote>
<blockquote style="margin:0 0 0
40px;border:none;padding:0px">
<div>- Description is not updated</div>
</blockquote>
<blockquote style="margin:0 0 0
40px;border:none;padding:0px">
<div>- host attribute is not updated</div>
</blockquote>
</div>
<div><br>
</div>
<div>Can you guys please check and let me know if
I am doing something wrong or is it a problem
somewhere in my resource or some other issue
with midpoint system.</div>
<div><br>
</div>
<div>Regards</div>
<div>Anand Kothekar</div>
<img moz-do-not-send="true"
src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7"
height="0" width="0"></div>
<br>
<fieldset></fieldset>
<br>
</div>
</div>
<pre>_______________________________________________
midPoint-dev mailing list
<a moz-do-not-send="true" href="mailto:midPoint-dev@lists.evolveum.com" target="_blank">midPoint-dev@lists.evolveum.com</a>
<a moz-do-not-send="true" href="http://lists.evolveum.com/mailman/listinfo/midpoint-dev" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint-dev</a><span class="HOEnZb"><font color="#888888">
</font></span></pre>
<span class="HOEnZb"><font color="#888888"> </font></span></blockquote>
<span class="HOEnZb"><font color="#888888"> <br>
<pre cols="72">--
Ing. Ivan Noris
Senior Identity Management Engineer
<a moz-do-not-send="true" href="http://evolveum.com" target="_blank">evolveum.com</a> <a moz-do-not-send="true" href="http://evolveum.com/blog/" target="_blank">evolveum.com/blog/</a>
_____________________________________________
"Semper Id(e)M Vix."
</pre>
</font></span></div>
</blockquote>
</div>
<br>
</div>
</blockquote>
<br>
<pre class="moz-signature" cols="72">--
Ing. Ivan Noris
Senior Identity Management Engineer
evolveum.com evolveum.com/blog/
_____________________________________________
"Semper Id(e)M Vix."
</pre>
</body>
</html>