From ivan.noris at evolveum.com  Mon Jun  5 11:05:50 2017
From: ivan.noris at evolveum.com (Ivan Noris)
Date: Mon, 5 Jun 2017 11:05:50 +0200
Subject: [Midpoint-dev] Adding a "deferred task" to a user during live
 sync
In-Reply-To: <7025525.A5k9kLW5cA@our-laptop>
References: <7025525.A5k9kLW5cA@our-laptop>
Message-ID: <cfc07134-2261-53f4-1994-6446b54ddbc2@evolveum.com>

Hi Chris,

my only (untested) idea would be to use correlation expression condition.

I'm using something like this to match by employeeNumber attribute, but
not if the employeeNumber attribute in midPoint is empty:

...

                   <correlation>
                        <q:description>
                            Correlation expression is a search query.
                            Following search queury will look for users
that have "employeeNumber"
                            equal to the "enumber" attribute of the account.
                            The condition will ensure that "enumber" is not
                            empty, otherwise it would match any midPoint
user
                            with empty "employeeNumber" attribute, such
as "administrator".
                            The correlation rule by default looks for
users, so it will not match
                            any other object type.
                        </q:description>
                        <q:equal>
                            <q:path>c:employeeNumber</q:path>
                              <expression>
                                <path>$account/attributes/ri:enumber</path>
                              </expression>
                        </q:equal>
                        <condition>
                            <script>
                                <code>basic.getAttributeValue(shadow,
'enumber') != null</code>
                            </script>
                        </condition>
                    </correlation>
...

If you have an attribute on the account side which contains the change
date information (which is in the future) and you compare with current
date/time, perhaps it would work.

Best regards,
Ivan

On 05/28/2017 10:45 AM, Chris Woods wrote:
> Hi,
>
> we have a custom SAP HCM connector from our Oracle Waveset installation which 
> would like to test with midpoint. The connector uses a JMS queue to pick up 
> IDocs that are sent and transformed to XML by our SAP middleware. These XML 
> fragments also contain the date from which the change is valid.
>  
> I haven't yet found a way to conditionally tell midpoint to ignore the changes 
> (ok, I could maybe write a condition for each attribute) if the change is in 
> the future. In waveset I would set IAPI.cancel and attach a deferred task to 
> the user which would cause the user to be recomputed on that day. This was to 
> take care of employees rejoining / moving department etc.
>
> Is there a similar mechanism in midpoint that I've just overlooked? Can I 
> attach a task to the user during the sync?
>
> Many thanks in advance,
> Cheers, Chris.
> _______________________________________________
> midPoint-dev mailing list
> midPoint-dev at lists.evolveum.com
> http://lists.evolveum.com/mailman/listinfo/midpoint-dev

-- 
Ivan Noris
Senior Identity Engineer
evolveum.com


From vsowmya at udel.edu  Thu Jun  8 16:00:02 2017
From: vsowmya at udel.edu (Sowmya Venkateswaran)
Date: Thu, 8 Jun 2017 10:00:02 -0400
Subject: [Midpoint-dev] Reg DatabaseTable connector
Message-ID: <CAHupDEeDrcO=ZjeuitTe_+pPkL2V0YxctQ4Zn_asSXfW_6f1UA@mail.gmail.com>

Hello

The demo site of Midpoint has a sample DatabaseTable Connector called
Addressbook that does not have any synchronization tasks. So how does it
load the accounts to Midpoint?
I tried this with a table that we have and configuration very similar to
Addressbook. When I click on the Accounts tab(within Resource config), I
can see the data on the Resource, but not in Midpoint repository. Am I
missing something in the configuration?

-- Thanks
Sowmya Shankar
Applications Programmer
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.evolveum.com/pipermail/midpoint-dev/attachments/20170608/f6fe7d72/attachment.html>

From ivan.noris at evolveum.com  Thu Jun  8 16:24:06 2017
From: ivan.noris at evolveum.com (Ivan Noris)
Date: Thu, 8 Jun 2017 16:24:06 +0200
Subject: [Midpoint-dev] Reg DatabaseTable connector
In-Reply-To: <CAHupDEeDrcO=ZjeuitTe_+pPkL2V0YxctQ4Zn_asSXfW_6f1UA@mail.gmail.com>
References: <CAHupDEeDrcO=ZjeuitTe_+pPkL2V0YxctQ4Zn_asSXfW_6f1UA@mail.gmail.com>
Message-ID: <4a8f9ce9-64c2-c346-21a5-cbebc21f49b5@evolveum.com>

Hi,

it does not. Addressbook resource is target only, data (accounts) are
only created there by midPoint. When editing users in midPoint, the
Addressbook accounts are fetched on demand as referenced by unique
attribute value. But the data is only created by midPoint.

If you go to Resource/Accounts tab, you see the current accounts in the
Addressbook and their corresponding owners in midPoint. If the resource
has no synchronization settings, you cannot import the data from it to
midPoint.

The HR Feed and LDAP server contain also synchronization settings, so
they can be used for importing data to midPoint. But not Addressbook.
Please see our samples for DBTable with synchronization e.g.
https://github.com/Evolveum/midpoint/blob/master/samples/resources/databasetable/localhost-dbtable-advanced-sync.xml

Regards,
Ivan

On 06/08/2017 04:00 PM, Sowmya Venkateswaran wrote:
> Hello
>
> The demo site of Midpoint has a sample DatabaseTable Connector called
> Addressbook that does not have any synchronization tasks. So how does
> it load the accounts to Midpoint?
> I tried this with a table that we have and configuration very similar
> to Addressbook. When I click on the Accounts tab(within Resource
> config), I can see the data on the Resource, but not in Midpoint
> repository. Am I missing something in the configuration?
>
> -- Thanks
> Sowmya Shankar
> Applications Programmer
>
>
>
> _______________________________________________
> midPoint-dev mailing list
> midPoint-dev at lists.evolveum.com
> http://lists.evolveum.com/mailman/listinfo/midpoint-dev

-- 
Ivan Noris
Senior Identity Engineer
evolveum.com

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.evolveum.com/pipermail/midpoint-dev/attachments/20170608/550e1d79/attachment.html>

From vsowmya at udel.edu  Mon Jun 12 16:44:32 2017
From: vsowmya at udel.edu (Sowmya Venkateswaran)
Date: Mon, 12 Jun 2017 10:44:32 -0400
Subject: [Midpoint-dev] Reg repository config with Oracle DB
Message-ID: <CAHupDEd6ms+r_4bh-JOEVDOwC6dUVmGJ=WQFO9uaM2AT+jzTjQ@mail.gmail.com>

Hi

I am trying to connect midpoint to an Oracle database and followed the
instructions at
https://wiki.evolveum.com/display/midPoint/Oracle+11g and
https://wiki.evolveum.com/display/midPoint/Repository+Configuration
I also ran the SQL script to create the tables manually in my DB. However,
I am getting an error as below. Any help or feedback will be very helpful..

org.hibernate.exception.SQLGrammarException: could not execute batch
        at
org.hibernate.exception.internal.SQLStateConversionDelegate.convert(SQLStateConversionDelegate.java:123)
~[hibernate-core-4.3.11.Final.jar:4.3.11.Final]
        at
org.hibernate.exception.internal.StandardSQLExceptionConverter.convert(StandardSQLExceptionConverter.java:49)
~[hibernate-core-4.3.11.Final.jar:4.3.11.Final]
        at
org.hibernate.engine.jdbc.spi.SqlExceptionHelper.convert(SqlExceptionHelper.java:126)
~[hibernate-core-4.3.11.Final.jar:4.3.11.Final]
        at
org.hibernate.engine.jdbc.batch.internal.BatchingBatch.performExecution(BatchingBatch.java:136)
~[hibernate-core-4.3.11.Final.jar:4.3.11.Final]
        at
org.hibernate.engine.jdbc.batch.internal.BatchingBatch.doExecuteBatch(BatchingBatch.java:114)
~[hibernate-core-4.3.11.Final.jar:4.3.11.Final]
        at
org.hibernate.engine.jdbc.batch.internal.AbstractBatchImpl.execute(AbstractBatchImpl.java:163)
~[hibernate-core-4.3.11.Final.jar:4.3.11.Final]
        at
org.hibernate.engine.jdbc.internal.JdbcCoordinatorImpl.executeBatch(JdbcCoordinatorImpl.java:226)
~[hibernate-core-4.3.11.Final.jar:4.3.11.Final]
        at
org.hibernate.engine.jdbc.internal.StatementPreparerImpl.prepareStatement(StatementPreparerImpl.java:95)
~[hibernate-core-4.3.11.Final.jar:4.3.11.Final]
        at
org.hibernate.persister.entity.AbstractEntityPersister.insert(AbstractEntityPersister.java:3108)
~[hibernate-core-4.3.11.Final.jar:4.3.11.Final]
        at
org.hibernate.persister.entity.AbstractEntityPersister.insert(AbstractEntityPersister.java:3581)
~[hibernate-core-4.3.11.Final.jar:4.3.11.Final]
        at
org.hibernate.action.internal.EntityInsertAction.execute(EntityInsertAction.java:104)
~[hibernate-core-4.3.11.Final.jar:4.3.11.Final]
        at
org.hibernate.engine.spi.ActionQueue.executeActions(ActionQueue.java:465)
~[hibernate-core-4.3.11.Final.jar:4.3.11.Final]
        at
org.hibernate.engine.spi.ActionQueue.executeActions(ActionQueue.java:351)
~[hibernate-core-4.3.11.Final.jar:4.3.11.Final]
        at
org.hibernate.event.internal.AbstractFlushingEventListener.performExecutions(AbstractFlushingEventListener.java:350)
~[hibernate-core-4.3.11.Final.jar:4.3.11.Final]
        at
org.hibernate.event.internal.DefaultFlushEventListener.onFlush(DefaultFlushEventListener.java:56)
~[hibernate-core-4.3.11.Final.jar:4.3.11.Final]
        at org.hibernate.internal.SessionImpl.flush(SessionImpl.java:1258)
~[hibernate-core-4.3.11.Final.jar:4.3.11.Final]
        at
org.hibernate.internal.SessionImpl.managedFlush(SessionImpl.java:425)
~[hibernate-core-4.3.11.Final.jar:4.3.11.Final]
        at
org.hibernate.engine.transaction.internal.jdbc.JdbcTransaction.beforeTransactionCommit(JdbcTransaction.java:101)
~[hibernate-core-4.3.11.Final.jar:4.3.11.Final]
        at
org.hibernate.engine.transaction.spi.AbstractTransactionImpl.commit(AbstractTransactionImpl.java:177)
~[hibernate-core-4.3.11.Final.jar:4.3.11.Final]
        at
com.evolveum.midpoint.repo.sql.helpers.ObjectUpdater.addObjectAttempt(ObjectUpdater.java:135)
~[repo-sql-impl-3.5.jar:na]
        at
com.evolveum.midpoint.repo.sql.SqlRepositoryServiceImpl.addObject(SqlRepositoryServiceImpl.java:376)
[repo-sql-impl-3.5.jar:na]
        at
com.evolveum.midpoint.task.quartzimpl.cluster.NodeRegistrar.createNodeObject(NodeRegistrar.java:104)
[task-quartz-impl-3.5.jar:na]
        at
com.evolveum.midpoint.task.quartzimpl.cluster.ClusterManager.createNodeObject(ClusterManager.java:110)
[task-quartz-impl-3.5.jar:na]
        at
com.evolveum.midpoint.task.quartzimpl.Initializer.init(Initializer.java:90)
[task-quartz-impl-3.5.jar:na]
        at
com.evolveum.midpoint.task.quartzimpl.TaskManagerQuartzImpl.init(TaskManagerQuartzImpl.java:206)
[task-quartz-impl-3.5.jar:na]
........
Caused by: java.sql.BatchUpdateException: ORA-01950: no privileges on
tablespace 'USERS'

        at
oracle.jdbc.driver.OraclePreparedStatement.executeBatch(OraclePreparedStatement.java:10296)
~[oracle.jar:11.2.0.2.0]
        at
oracle.jdbc.driver.OracleStatementWrapper.executeBatch(OracleStatementWrapper.java:216)
~[oracle.jar:11.2.0.2.0]
        at
com.mchange.v2.c3p0.impl.NewProxyPreparedStatement.executeBatch(NewProxyPreparedStatement.java:1135)
~[c3p0-0.9.2.1.jar:0.9.2.1]
        at
org.hibernate.engine.jdbc.batch.internal.BatchingBatch.performExecution(BatchingBatch.java:127)
~[hibernate-core-4.3.11.Final.jar:4.3.11.Final]

-- Thanks
Sowmya Shankar
Applications Programmer
IT- Web Development
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.evolveum.com/pipermail/midpoint-dev/attachments/20170612/0516c39d/attachment.html>

From vsowmya at udel.edu  Mon Jun 12 17:37:22 2017
From: vsowmya at udel.edu (Sowmya Venkateswaran)
Date: Mon, 12 Jun 2017 11:37:22 -0400
Subject: [Midpoint-dev] Reg repository config with Oracle DB
In-Reply-To: <CAHYd5f+ZGypQ9p3JasGDW3Qt=z_aKfSJ8YyKp+TAVbG1AYqZiw@mail.gmail.com>
References: <CAHupDEd6ms+r_4bh-JOEVDOwC6dUVmGJ=WQFO9uaM2AT+jzTjQ@mail.gmail.com>
 <CAHYd5f+ZGypQ9p3JasGDW3Qt=z_aKfSJ8YyKp+TAVbG1AYqZiw@mail.gmail.com>
Message-ID: <CAHupDEc2R22Z3TYMgwSpMr-HZQxQ-nBV7U2FyTYWmq3Z3Hb6rA@mail.gmail.com>

Thanks for your response. I understood what you mentioned from the logs,
but what I do not understand is what privileges need to be assigned for the
user. From the wiki, I thought the midpoint user only had to have 'connect'
and 'resource' privileges. Is there a document that lists all privileges
for the DB midpoint user?

On Mon, Jun 12, 2017 at 10:46 AM, ANDRES PARDO <tinpardo at gmail.com> wrote:

> The user that you are using doesn't have privileges on USERS Tablespace.
>
>
>
>
> Caused by: java.sql.BatchUpdateException: ORA-01950: no privileges on
> tablespace 'USERS'
>
>
> Mauricio Pardo Agudelo
> Public Key PGP
>
> On Mon, Jun 12, 2017 at 9:44 AM, Sowmya Venkateswaran <vsowmya at udel.edu>
> wrote:
>
>> Hi
>>
>> I am trying to connect midpoint to an Oracle database and followed the
>> instructions at
>> https://wiki.evolveum.com/display/midPoint/Oracle+11g and
>> https://wiki.evolveum.com/display/midPoint/Repository+Configuration
>> I also ran the SQL script to create the tables manually in my DB.
>> However, I am getting an error as below. Any help or feedback will be very
>> helpful..
>>
>> org.hibernate.exception.SQLGrammarException: could not execute batch
>>         at org.hibernate.exception.internal.SQLStateConversionDelegate.
>> convert(SQLStateConversionDelegate.java:123)
>> ~[hibernate-core-4.3.11.Final.jar:4.3.11.Final]
>>         at org.hibernate.exception.internal.StandardSQLExceptionConvert
>> er.convert(StandardSQLExceptionConverter.java:49)
>> ~[hibernate-core-4.3.11.Final.jar:4.3.11.Final]
>>         at org.hibernate.engine.jdbc.spi.SqlExceptionHelper.convert(SqlExceptionHelper.java:126)
>> ~[hibernate-core-4.3.11.Final.jar:4.3.11.Final]
>>         at org.hibernate.engine.jdbc.batch.internal.BatchingBatch.perfo
>> rmExecution(BatchingBatch.java:136) ~[hibernate-core-4.3.11.Final.
>> jar:4.3.11.Final]
>>         at org.hibernate.engine.jdbc.batch.internal.BatchingBatch.doExe
>> cuteBatch(BatchingBatch.java:114) ~[hibernate-core-4.3.11.Final.
>> jar:4.3.11.Final]
>>         at org.hibernate.engine.jdbc.batch.internal.AbstractBatchImpl.
>> execute(AbstractBatchImpl.java:163) ~[hibernate-core-4.3.11.Final.
>> jar:4.3.11.Final]
>>         at org.hibernate.engine.jdbc.internal.JdbcCoordinatorImpl.execu
>> teBatch(JdbcCoordinatorImpl.java:226) ~[hibernate-core-4.3.11.Final.
>> jar:4.3.11.Final]
>>         at org.hibernate.engine.jdbc.internal.StatementPreparerImpl.pre
>> pareStatement(StatementPreparerImpl.java:95)
>> ~[hibernate-core-4.3.11.Final.jar:4.3.11.Final]
>>         at org.hibernate.persister.entity.AbstractEntityPersister.inser
>> t(AbstractEntityPersister.java:3108) ~[hibernate-core-4.3.11.Final.
>> jar:4.3.11.Final]
>>         at org.hibernate.persister.entity.AbstractEntityPersister.inser
>> t(AbstractEntityPersister.java:3581) ~[hibernate-core-4.3.11.Final.
>> jar:4.3.11.Final]
>>         at org.hibernate.action.internal.EntityInsertAction.execute(EntityInsertAction.java:104)
>> ~[hibernate-core-4.3.11.Final.jar:4.3.11.Final]
>>         at org.hibernate.engine.spi.ActionQueue.executeActions(ActionQueue.java:465)
>> ~[hibernate-core-4.3.11.Final.jar:4.3.11.Final]
>>         at org.hibernate.engine.spi.ActionQueue.executeActions(ActionQueue.java:351)
>> ~[hibernate-core-4.3.11.Final.jar:4.3.11.Final]
>>         at org.hibernate.event.internal.AbstractFlushingEventListener.p
>> erformExecutions(AbstractFlushingEventListener.java:350)
>> ~[hibernate-core-4.3.11.Final.jar:4.3.11.Final]
>>         at org.hibernate.event.internal.DefaultFlushEventListener.onFlu
>> sh(DefaultFlushEventListener.java:56) ~[hibernate-core-4.3.11.Final.
>> jar:4.3.11.Final]
>>         at org.hibernate.internal.SessionImpl.flush(SessionImpl.java:1258)
>> ~[hibernate-core-4.3.11.Final.jar:4.3.11.Final]
>>         at org.hibernate.internal.SessionImpl.managedFlush(SessionImpl.java:425)
>> ~[hibernate-core-4.3.11.Final.jar:4.3.11.Final]
>>         at org.hibernate.engine.transaction.internal.jdbc.JdbcTransacti
>> on.beforeTransactionCommit(JdbcTransaction.java:101)
>> ~[hibernate-core-4.3.11.Final.jar:4.3.11.Final]
>>         at org.hibernate.engine.transaction.spi.AbstractTransactionImpl
>> .commit(AbstractTransactionImpl.java:177) ~[hibernate-core-4.3.11.Final.
>> jar:4.3.11.Final]
>>         at com.evolveum.midpoint.repo.sql.helpers.ObjectUpdater.addObje
>> ctAttempt(ObjectUpdater.java:135) ~[repo-sql-impl-3.5.jar:na]
>>         at com.evolveum.midpoint.repo.sql.SqlRepositoryServiceImpl.addO
>> bject(SqlRepositoryServiceImpl.java:376) [repo-sql-impl-3.5.jar:na]
>>         at com.evolveum.midpoint.task.quartzimpl.cluster.NodeRegistrar.
>> createNodeObject(NodeRegistrar.java:104) [task-quartz-impl-3.5.jar:na]
>>         at com.evolveum.midpoint.task.quartzimpl.cluster.ClusterManager
>> .createNodeObject(ClusterManager.java:110) [task-quartz-impl-3.5.jar:na]
>>         at com.evolveum.midpoint.task.quartzimpl.Initializer.init(Initializer.java:90)
>> [task-quartz-impl-3.5.jar:na]
>>         at com.evolveum.midpoint.task.quartzimpl.TaskManagerQuartzImpl.
>> init(TaskManagerQuartzImpl.java:206) [task-quartz-impl-3.5.jar:na]
>> ........
>> Caused by: java.sql.BatchUpdateException: ORA-01950: no privileges on
>> tablespace 'USERS'
>>
>>         at oracle.jdbc.driver.OraclePreparedStatement.executeBatch(Orac
>> lePreparedStatement.java:10296) ~[oracle.jar:11.2.0.2.0]
>>         at oracle.jdbc.driver.OracleStatementWrapper.executeBatch(OracleStatementWrapper.java:216)
>> ~[oracle.jar:11.2.0.2.0]
>>         at com.mchange.v2.c3p0.impl.NewProxyPreparedStatement.executeBa
>> tch(NewProxyPreparedStatement.java:1135) ~[c3p0-0.9.2.1.jar:0.9.2.1]
>>         at org.hibernate.engine.jdbc.batch.internal.BatchingBatch.perfo
>> rmExecution(BatchingBatch.java:127) ~[hibernate-core-4.3.11.Final.
>> jar:4.3.11.Final]
>>
>> -- Thanks
>> Sowmya Shankar
>> Applications Programmer
>> IT- Web Development
>>
>>
>> _______________________________________________
>> midPoint-dev mailing list
>> midPoint-dev at lists.evolveum.com
>> http://lists.evolveum.com/mailman/listinfo/midpoint-dev
>>
>>
>


-- 
Sowmya Shankar
Applications Programmer
IT- Web Development
University of Delaware
(302)-831-4025
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.evolveum.com/pipermail/midpoint-dev/attachments/20170612/dc32247d/attachment-0001.html>