[midPoint] LDAP Import - No Sync Policy?

Pavol Mederly mederly at evolveum.com
Sat Aug 27 00:17:48 CEST 2016


Matt,

this is really strange. I've imported your configuration (adapted to a 
CSV resource) and it works.

Please, could you make sure the script in <condition> section really 
starts and check the result it produces?

If that would not help, there is a brute force approach:

 1. Set logging to TRACE for both Model and Provisioning (don't forget
    to remove Projector & Clockwork logging entries, as they are part of
    Model and are set to INFO by default).
 2. Prepare to invoke one-time import
 3. Clear the log
 4. Invoke the import
 5. Post the log to the gist

I'll be awake for next ~ 20 minutes to be able to help you, if 
necessary. Or on Monday then...

Pavol Mederly
Software developer
evolveum.com

On 26.08.2016 23:59, Mencel, Matt wrote:
> Thanks Pavol,
>
> I enabled trace logging and added the segment for my user account to 
> that gist.  The trace says there's no matching policy.
>
> Matt
>
> On Fri, Aug 26, 2016 at 3:45 PM, Pavol Mederly <mederly at evolveum.com 
> <mailto:mederly at evolveum.com>> wrote:
>
>     Matt,
>
>     on first look I don't see anything suspicious.
>
>     You could try the following:
>
>      1. enable TRACE logging for
>         com.evolveum.midpoint.model.impl.sync.SynchronizationServiceImpl
>         (or whole com.evolveum.midpoint.model.impl.sync if you like)
>      2. manually import one account (from Resource -> Account -> From
>         resource view)
>
>     and then have a look into the log; the reason should be there.
>
>     Regards,
>
>     Pavol Mederly
>     Software developer
>     evolveum.com <http://evolveum.com>
>
>     On 26.08.2016 22:33, Mencel, Matt wrote:
>>     So I've got the LDAP import running. I see all the shadow objects
>>     appear in Midpoint. It should be matching on about 80 accounts
>>     based on my confirmation rule and actually create the account
>>     object in Midpoint.  When the import runs though it always says
>>     "no sync policy" for every object.  I think I should see the 80
>>     or so unmatched and then have them appear as users in Midpoint.
>>
>>     I've tried to make my resource as generic as possible for now
>>     until I get a working config. Can anyone see what I might be
>>     doing wrong?
>>
>>     https://gist.github.com/MattMencel/f7f9ad65a791d15c9dc820d747dc6197
>>     <https://gist.github.com/MattMencel/f7f9ad65a791d15c9dc820d747dc6197>
>>
>>     Thanks,
>>     Matt
>>
>>
>>     _______________________________________________
>>     midPoint mailing list
>>     midPoint at lists.evolveum.com <mailto:midPoint at lists.evolveum.com>
>>     http://lists.evolveum.com/mailman/listinfo/midpoint
>>     <http://lists.evolveum.com/mailman/listinfo/midpoint>
>     _______________________________________________ midPoint mailing
>     list midPoint at lists.evolveum.com
>     <mailto:midPoint at lists.evolveum.com>
>     http://lists.evolveum.com/mailman/listinfo/midpoint
>     <http://lists.evolveum.com/mailman/listinfo/midpoint> 
>
> _______________________________________________
> midPoint mailing list
> midPoint at lists.evolveum.com
> http://lists.evolveum.com/mailman/listinfo/midpoint
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20160827/d4def462/attachment.htm>


More information about the midPoint mailing list