[Midpoint-dev] Inducement updates are not propagated to User after reconciliation

[Ivan Noris]

Hi Anand,

can you please define the mappings for description and host attributes
as strong?

Something like:

                <attribute>
                    <ref>ri:description</ref>
                    <outbound>
*                        <strength>strong</strength>**
*. . .
                    </outbound>
                </attribute>
Then run the reconciliation again please.

If you already have this configured and it does not work, please share
the attribute mappings here.

Regards,
I.

On 01/20/2015 11:15 AM, Anand Kothekar wrote:
> Hi,
>
> I have been playing around with role inducements and found some issue,
> need some quick help as inducements are quite important for our solution.
>
> _Issue:_ Inducement updates are not propagated properly to User after
> reconciliation.
>
> _Details:_ When user is a assigned a role having a resource
> inducement, User gets appropriate accounts and induced group
> memberships. Now Changing some attributes in role inducements are not
> propagated after reconciling User.
>
> _Steps Followed:_
> - I added and ldap resource inducement in a new Role*. *I provided
> some attributes like LdapGroups, Host, and description.
> - User is  assigned to this Role. User gets the ldap account,
> appropriate group memberships and other attributes specified in
> inducement (i.e. description ,host(multivalued attribute from an
> Auxiliary object class)). So all good till now.
> - Now I updated the Resource inducement for example changed the
> description, added few groups, added few host.
> - After inducement modification I reconciled the User, and following
> are the results:
>
>     - Group membership is updated appropriately.
>
>     - Description is not updated
>
>     - host attribute is not updated
>
>
> Can you guys please check and let me know if I am doing something
> wrong or is it a problem somewhere in my resource or some other issue
> with midpoint system.
>
> Regards
> Anand Kothekar
>
>
> _______________________________________________
> midPoint-dev mailing list
> midPoint-dev at lists.evolveum.com
> http://lists.evolveum.com/mailman/listinfo/midpoint-dev

-- 
  Ing. Ivan Noris
  Senior Identity Management Engineer
  evolveum.com     evolveum.com/blog/
  _____________________________________________
  "Semper Id(e)M Vix."

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.evolveum.com/pipermail/midpoint-dev/attachments/20150122/121a6fc9/attachment.html>