[midPoint] Object Sync condition - check user's existence
Ana Pereyra
apereyra at identicum.com
Thu Oct 27 21:35:27 CEST 2016
Thanks Gustav.
I tried it like this:
*String ns =
'http://midpoint.evolveum.com/xml/ns/public/resource/instance-3
<http://midpoint.evolveum.com/xml/ns/public/resource/instance-3>';*
*customAttributeQName = new QName(ns, "myCustomAttribute");*
*userInMPQuery = QueryBuilder.queryFor(UserType.class,
midpoint.getPrismContext()).item(UserType.F_EXTENSION,
customAttributeQName).eq(shadowUid).build()*
Still doesn't work. It gives me the following error:
ERROR
(com.evolveum.midpoint.model.common.expression.script.ScriptExpression):
Expression error: com.evolveum.midpoint.util.exception.SchemaException:
Item path of 'extension/myCustomAttribute' in class
com.evolveum.midpoint.xml.ns._public.common.common_3.UserType does not
point to a valid ItemDefinition (new) condition in object synchronization
User
Any ideas? Thanks for the support.
Regards
2016-10-27 16:18 GMT-03:00 Pálos Gustáv <gustav.palos at evolveum.com>:
> try this:
>
> String ns = 'http://mydomain.com/mynamespace';
>
> customAttributeQName = new QName(ns, "custom_attribute");
>
> userInMPQuery = QueryBuilder.queryFor(UserType.class,
> midpoint.getPrismContext()).item(UserType.F_EXTENSION,
> customAttributeQName).eq(shadowUid).build()
>
> Regards,
>
> Gustav
>
> 2016-10-27 20:45 GMT+02:00 Ana Pereyra <apereyra at identicum.com>:
>
>> Hi Gustav, thank you for your help.
>>
>> What I'm trying to do is reference the path for the query, something like
>> this:
>>
>> *userInMPQuery = QueryBuilder.queryFor(UserType.class,
>> midpoint.getPrismContext())*
>> * .item( qname_path_custom_attribute ).eq(shadowUid)*
>> * .build()*
>>
>> But I can't find a solution that works. Any help? Thanks in advance.
>>
>> Regards
>>
>> 2016-10-27 15:13 GMT-03:00 Pálos Gustáv <gustav.palos at evolveum.com>:
>>
>>> Hi
>>>
>>> support 3.4 is a support for 3.4.1 official release now and is the same
>>> as 3.4.2-snapshot if I have the right information.
>>> but this will be also stable and we also use it in production for
>>> customers with paid support.
>>> Next official release will be only 3.5 at the end of the year.
>>>
>>> In notification I'm using for user extension/managerId this formular:
>>> managerId = basic.getExtensionPropertyValue(requestee, '
>>> http://mydomain.com/mynamespace', 'managerId')
>>>
>>> Best regards,
>>>
>>> Gustav
>>>
>>>
>>> 2016-10-27 19:57 GMT+02:00 Ana Pereyra <apereyra at identicum.com>:
>>>
>>>> Hi Gustav,
>>>>
>>>> I realized I was trying with the wrong version of midpoint. I upgraded
>>>> to the 3.4.2-SNAPSHOT version and it worked.
>>>>
>>>> Is there any way to apply this patch to the 3.4.1 version or should we
>>>> wait for the 3.4.2 version?
>>>>
>>>> On the other hand, we still have an issue. We need to check user's
>>>> existence by searching by a custom midpoint attribute.
>>>>
>>>> We ran some tests based on this thread https://lists.evolveum.com/pip
>>>> ermail/midpoint/2015-May/000976.html, but we had no luck trying to
>>>> build a QName based on an item path. Can you help us with that?
>>>>
>>>> Thank you very much for your help.
>>>>
>>>> Regards,
>>>>
>>>>
>>>> 2016-10-26 17:25 GMT-03:00 Ana Pereyra <apereyra at identicum.com>:
>>>>
>>>>> Gustav,
>>>>>
>>>>> Thanks for the support. I updated MidPoint to 3.4.1 version and
>>>>> unfortunately I'm getting the same error as before:
>>>>>
>>>>> 2016-10-26 17:22:01,419 [] [http-bio-8080-exec-3] ERROR
>>>>> (com.evolveum.midpoint.expression): Trying to find a user with name =
>>>>> testUser
>>>>> 2016-10-26 17:22:01,525 [] [http-bio-8080-exec-3] ERROR
>>>>> (com.evolveum.midpoint.expression): Query debug: Filter:
>>>>> EQUAL:
>>>>> PATH: name
>>>>> DEF: PPD:{.../common/common-3}name {http://prism.evolveum.com/xml
>>>>> /ns/public/types-3}PolyStringType[0,1],RAM
>>>>> VALUE:
>>>>> testUser
>>>>> Paging: null
>>>>> 2016-10-26 17:22:01,553 [] [http-bio-8080-exec-3] ERROR
>>>>> (com.evolveum.midpoint.model.common.expression.script.ScriptExpression):
>>>>> Expression error: java.lang.IllegalArgumentException: Operation
>>>>> result must not be null. (new) condition in object synchronization User
>>>>> com.evolveum.midpoint.util.exception.ExpressionEvaluationException:
>>>>> java.lang.IllegalArgumentException: Operation result must not be
>>>>> null. (new) condition in object synchronization User
>>>>> at com.evolveum.midpoint.model.co
>>>>> mmon.expression.script.jsr223.Jsr223ScriptEvaluator.evaluate
>>>>> (Jsr223ScriptEvaluator.java:119) ~[model-common-3.4.1.jar:na]
>>>>> at com.evolveum.midpoint.model.co
>>>>> mmon.expression.script.ScriptExpression.evaluate(ScriptExpression.java:96)
>>>>> ~[model-common-3.4.1.jar:na]
>>>>> at com.evolveum.midpoint.model.co
>>>>> mmon.expression.script.ScriptExpressionEvaluator.transformSi
>>>>> ngleValue(ScriptExpressionEvaluator.java:60)
>>>>> [model-common-3.4.1.jar:na]
>>>>> at com.evolveum.midpoint.model.co
>>>>> mmon.expression.evaluator.AbstractValueTransformationExpress
>>>>> ionEvaluator.evaluateScriptExpression(AbstractValueTransform
>>>>> ationExpressionEvaluator.java:256) [model-common-3.4.1.jar:na]
>>>>>
>>>>> Any other suggestions? Thank you very much for your help.
>>>>>
>>>>> Regards
>>>>>
>>>>>
>>>>> 2016-10-25 0:38 GMT-03:00 Pálos Gustáv <gustav.palos at evolveum.com>:
>>>>>
>>>>>> Hi Ana,
>>>>>>
>>>>>> can you try the same with 3.4-support? It was fixed here:
>>>>>> https://github.com/Evolveum/midpoint/commit/785332175372e9f4
>>>>>> 45271c724cba9c239b9605f9
>>>>>>
>>>>>> Best regards,
>>>>>>
>>>>>> Gustav
>>>>>>
>>>>>> 2016-10-24 22:55 GMT+02:00 Ana Pereyra <apereyra at identicum.com>:
>>>>>>
>>>>>>> Hi Gustav, I'm using 3.4 version.
>>>>>>>
>>>>>>> 2016-10-24 17:53 GMT-03:00 Pálos Gustáv <gustav.palos at evolveum.com>:
>>>>>>>
>>>>>>>> Hi Ana,
>>>>>>>>
>>>>>>>> what MP version do you use?
>>>>>>>>
>>>>>>>> Gustav
>>>>>>>>
>>>>>>>> 2016-10-24 22:23 GMT+02:00 Ana Pereyra <apereyra at identicum.com>:
>>>>>>>>
>>>>>>>>> Hi Gustav, thank you very much for your answer.
>>>>>>>>>
>>>>>>>>> I tried your solution and added this code to my
>>>>>>>>> objectSynchronization/condition node:
>>>>>>>>>
>>>>>>>>> * shadowUid = basic.getIdentifierValue(shadow);*
>>>>>>>>> * userInMPQuery =
>>>>>>>>> QueryBuilder.queryFor(UserType.class, midpoint.getPrismContext())*
>>>>>>>>> * .item(UserType.F_NAME).eq(shadowUid)*
>>>>>>>>> * .build();*
>>>>>>>>> * userInMP =
>>>>>>>>> midpoint.searchObjects(UserType.class, userInMPQuery);*
>>>>>>>>> * isInMP = userInMP?.size()>0 ? true : false;*
>>>>>>>>>
>>>>>>>>> I'm getting the following error:
>>>>>>>>>
>>>>>>>>> *Caused by: java.lang.IllegalArgumentException: Operation result
>>>>>>>>> must not be null.*
>>>>>>>>> * at
>>>>>>>>> org.apache.commons.lang.Validate.notNull(Validate.java:192)
>>>>>>>>> ~[commons-lang-2.6.jar:2.6]*
>>>>>>>>> * at com.evolveum.midpoint.model.im
>>>>>>>>> <http://com.evolveum.midpoint.model.im>pl.controller.ModelController.searchObjects(ModelController.java:743)
>>>>>>>>> [model-impl-3.4.jar:na]*
>>>>>>>>> * at com.evolveum.midpoint.model.im
>>>>>>>>> <http://com.evolveum.midpoint.model.im>pl.expr.MidpointFunctionsImpl.searchObjects(MidpointFunctionsImpl.java:912)
>>>>>>>>> ~[model-impl-3.4.jar:na]*
>>>>>>>>> * at
>>>>>>>>> com.evolveum.midpoint.model.api.expr.MidpointFunctions$searchObjects.call(Unknown
>>>>>>>>> Source) ~[na:na]*
>>>>>>>>> * at org.codehaus.groovy.runtime.ca
>>>>>>>>> <http://org.codehaus.groovy.runtime.ca>llsite.CallSiteArray.defaultCall(CallSiteArray.java:45)
>>>>>>>>> ~[groovy-all-2.4.0.jar:2.4.0]*
>>>>>>>>> * at org.codehaus.groovy.runtime.ca
>>>>>>>>> <http://org.codehaus.groovy.runtime.ca>llsite.AbstractCallSite.call(AbstractCallSite.java:108)
>>>>>>>>> ~[groovy-all-2.4.0.jar:2.4.0]*
>>>>>>>>> * at org.codehaus.groovy.runtime.ca
>>>>>>>>> <http://org.codehaus.groovy.runtime.ca>llsite.AbstractCallSite.call(AbstractCallSite.java:128)
>>>>>>>>> ~[groovy-all-2.4.0.jar:2.4.0]*
>>>>>>>>> * at Script33.run(Script33.groovy:19) ~[na:na]*
>>>>>>>>> * at
>>>>>>>>> org.codehaus.groovy.jsr223.GroovyScriptEngineImpl.eval(GroovyScriptEngineImpl.java:344)
>>>>>>>>> ~[groovy-all-2.4.0.jar:2.4.0]*
>>>>>>>>> * ... 108 common frames omitted*
>>>>>>>>>
>>>>>>>>> And this is the query that's allocated in '*userInMPQuery'*:
>>>>>>>>>
>>>>>>>>> 2016-10-24 17:07:59,075 [] [http-bio-8080-exec-3] ERROR
>>>>>>>>> (com.evolveum.midpoint.expression): Query debug: Filter:
>>>>>>>>> EQUAL:
>>>>>>>>> PATH: name
>>>>>>>>> DEF: PPD:{.../common/common-3}name {
>>>>>>>>> http://prism.evolveum.com/xml/ns/public/types-3}PolyStringT
>>>>>>>>> ype[0,1],RAM
>>>>>>>>> VALUE:
>>>>>>>>> userName
>>>>>>>>> Paging: null
>>>>>>>>>
>>>>>>>>> Any ideas what this could be? I couldn't find a reason for this
>>>>>>>>> behaviour. Thanks in advance.
>>>>>>>>>
>>>>>>>>> Regards
>>>>>>>>>
>>>>>>>>>
>>>>>>>>> 2016-10-24 14:32 GMT-03:00 Pálos Gustáv <gustav.palos at evolveum.com
>>>>>>>>> >:
>>>>>>>>>
>>>>>>>>>> Hi Ana,
>>>>>>>>>>
>>>>>>>>>> I'm using for similar use case this condition in
>>>>>>>>>> objectSynchronization:
>>>>>>>>>>
>>>>>>>>>> <condition>
>>>>>>>>>> <script>
>>>>>>>>>> <code>
>>>>>>>>>> import com.evolveum.midpoint.xml.ns._
>>>>>>>>>> public.common.common_3.UserType;
>>>>>>>>>> import com.evolveum.midpoint.prism.qu
>>>>>>>>>> ery.builder.QueryBuilder;
>>>>>>>>>> import com.evolveum.midpoint.prism.path.ItemPath;
>>>>>>>>>>
>>>>>>>>>> STATUSS = basic.getAttributeValue(shadow,
>>>>>>>>>> 'STATUSS')
>>>>>>>>>>
>>>>>>>>>> toImport = STATUSS == '01'
>>>>>>>>>>
>>>>>>>>>> // find user in MP, if exists syncronize it also
>>>>>>>>>>
>>>>>>>>>> log.info('shadow {}',
>>>>>>>>>> shadow.asPrismObject().debugDump())
>>>>>>>>>> activation = shadow.getActivation()
>>>>>>>>>> shadowUid = basic.getIdentifierValue(shado
>>>>>>>>>> w);
>>>>>>>>>> userInMPQuery = QueryBuilder.queryFor(UserType.class,
>>>>>>>>>> midpoint.getPrismContext()).item(UserType.F_EMPLOYEE_NUMBER)
>>>>>>>>>> .eq(shadowUid).and().item(UserType.F_EMPLOYEE_TYPE).eq("pavs
>>>>>>>>>> ").build()
>>>>>>>>>> userInMP = midpoint.searchObjects(UserType,
>>>>>>>>>> userInMPQuery);
>>>>>>>>>> isInMP = userInMP?.size()>0 ? true : false;
>>>>>>>>>> log.info('isInMP: '+isInMP);
>>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>> toImport = isInMP || toImport;
>>>>>>>>>>
>>>>>>>>>> return toImport;
>>>>>>>>>> </code>
>>>>>>>>>> </script>
>>>>>>>>>> </condition>
>>>>>>>>>>
>>>>>>>>>> In my case I need to have status=='01' (enabled), or already
>>>>>>>>>> imported (variable isInMP)
>>>>>>>>>>
>>>>>>>>>> Gustav
>>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>> 2016-10-24 19:21 GMT+02:00 Ana Pereyra <apereyra at identicum.com>:
>>>>>>>>>>
>>>>>>>>>>> Hi everybody.
>>>>>>>>>>>
>>>>>>>>>>> I have the following issue: I need to import users from two
>>>>>>>>>>> different database table resources. The problem is that I don't want to
>>>>>>>>>>> create in mipoint every user in the tables, I will create a user in
>>>>>>>>>>> midpoint only if the database field value that sets the validTo date
>>>>>>>>>>> attribute is lower than the current date.
>>>>>>>>>>>
>>>>>>>>>>> But that's for the creation only, if the user already exists in
>>>>>>>>>>> midpoint, I want to link the account to that user, no matter if the validTo
>>>>>>>>>>> date is lower than the current date or not (because maybe I have to update
>>>>>>>>>>> the validTo date to disable the user).
>>>>>>>>>>>
>>>>>>>>>>> I think I'll need some way to check if the user already exists
>>>>>>>>>>> in the synchronization/objectSynchronization/condition. Can
>>>>>>>>>>> anyone help me with this? Is this possible?
>>>>>>>>>>> Thank you very much.
>>>>>>>>>>>
>>>>>>>>>>> Regards
>>>>>>>>>>>
>>>>>>>>>>> --
>>>>>>>>>>> *Ana Pereyra*
>>>>>>>>>>> Identicum S.A.
>>>>>>>>>>>
>>>>>>>>>>> *Jorge Newbery 3226, ArgentinaTel: +54 (11) **4552.3050*
>>>>>>>>>>> *apereyra at identicum.com <apereyra at identicum.com>*
>>>>>>>>>>> www.identicum.com
>>>>>>>>>>>
>>>>>>>>>>> _______________________________________________
>>>>>>>>>>> midPoint mailing list
>>>>>>>>>>> midPoint at lists.evolveum.com
>>>>>>>>>>> http://lists.evolveum.com/mailman/listinfo/midpoint
>>>>>>>>>>>
>>>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>> --
>>>>>>>>>> Gustáv Pálos
>>>>>>>>>> Identity Engineer
>>>>>>>>>> evolveum.com
>>>>>>>>>>
>>>>>>>>>> _______________________________________________
>>>>>>>>>> midPoint mailing list
>>>>>>>>>> midPoint at lists.evolveum.com
>>>>>>>>>> http://lists.evolveum.com/mailman/listinfo/midpoint
>>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>
>>>>>>>>>
>>>>>>>>> --
>>>>>>>>> *Ana Pereyra*
>>>>>>>>> Identicum S.A.
>>>>>>>>>
>>>>>>>>> *Jorge Newbery 3226, ArgentinaTel: +54 (11) **4552.3050*
>>>>>>>>> *apereyra at identicum.com <apereyra at identicum.com>*
>>>>>>>>> www.identicum.com
>>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>> --
>>>>>>>> Gustáv Pálos
>>>>>>>> Identity Engineer
>>>>>>>> evolveum.com
>>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>> --
>>>>>>> *Ana Pereyra*
>>>>>>> Identicum S.A.
>>>>>>>
>>>>>>> *Jorge Newbery 3226, ArgentinaTel: +54 (11) **4552.3050*
>>>>>>> *apereyra at identicum.com <apereyra at identicum.com>*
>>>>>>> www.identicum.com
>>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>> --
>>>>>> Gustáv Pálos
>>>>>> Identity Engineer
>>>>>> evolveum.com
>>>>>>
>>>>>
>>>>>
>>>>>
>>>>> --
>>>>> *Ana Pereyra*
>>>>> Identicum S.A.
>>>>>
>>>>> *Jorge Newbery 3226, ArgentinaTel: +54 (11) **4552.3050*
>>>>> *apereyra at identicum.com <apereyra at identicum.com>*
>>>>> www.identicum.com
>>>>>
>>>>
>>>>
>>>>
>>>> --
>>>> *Ana Pereyra*
>>>> Identicum S.A.
>>>>
>>>> *Jorge Newbery 3226, ArgentinaTel: +54 (11) **4552.3050*
>>>> *apereyra at identicum.com <apereyra at identicum.com>*
>>>> www.identicum.com
>>>>
>>>
>>>
>>>
>>> --
>>> Gustáv Pálos
>>> Identity Engineer
>>> evolveum.com
>>>
>>
>>
>>
>> --
>> *Ana Pereyra*
>> Identicum S.A.
>>
>> *Jorge Newbery 3226, ArgentinaTel: +54 (11) **4552.3050*
>> *apereyra at identicum.com <apereyra at identicum.com>*
>> www.identicum.com
>>
>
>
>
> --
> Gustáv Pálos
> Identity Engineer
> evolveum.com
>
--
*Ana Pereyra*
Identicum S.A.
*Jorge Newbery 3226, ArgentinaTel: +54 (11) **4552.3050*
*apereyra at identicum.com <apereyra at identicum.com>*
www.identicum.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20161027/8837e112/attachment.htm>
More information about the midPoint
mailing list