[midPoint] Shadow Object update issue

Ivan Noris ivan.noris at evolveum.com
Mon Sep 5 16:57:30 CEST 2016


Hi Martin,

could you please share one of the roles which you assign for AD? Or at
least mappings to show how you compute associations
(associationTargetSearch)?

Thanks,
Ivan

On 09/05/2016 04:43 PM, Martin Herbert wrote:
>
> Hi Guys,
>
>  
>
> We’ve successfully implemented Midpoint in to our production
> environment with multiple Active Directory domains.  However, when
> user accounts are updated for any piece of information (password,
> assignment or otherwise) midpoint automatically appears to update all
> shadow object associations on the AD environment.
>
>  
>
> This is causing us a fair amount of issues, as a number of our users
> have in excess of 30 assignments with various AD groups and any level
> of change takes a number of minutes.  Even a password change takes a
> long time to complete.  Is there a way to stop this update of all
> assignments/projections with every change and just handle that during
> a re-synchronise task say at the end of each day?
>
>  
>
> Thanks
>
>
> <http://www.tahzoo.com> 	
> Martin Herbert
> Hosting Manager / Head of IT & Hosting Services
>
> M:  	*+44 7862 993 003* <tel:+44%207862%20993%20003>
>
> E:  	*martinh at tahzoo.com* <mailto:martinh at tahzoo.com> 	 |  	W: 
> *www.tahzoo.com* <http://www.tahzoo.com>
>
> A:  	*399 Silbury Blvd, Milton Keynes, MK9 2AH, *
> <https://www.google.com/maps/place/399+Silbury+Blvd,+Milton+Keynes+MK9+2AH,+UK/@52.0414531,-0.7670066,17z/data=%213m1%214b1%214m5%213m4%211s0x4877aa98b50bb921:0xef39de0bd21f30c6%218m2%213d52.0414531%214d-0.7648179>
>
>
>
>
>
> _______________________________________________
> midPoint mailing list
> midPoint at lists.evolveum.com
> http://lists.evolveum.com/mailman/listinfo/midpoint

-- 
Ivan Noris
Senior Identity Engineer
evolveum.com

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20160905/5e1051f3/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: image/png
Size: 1293 bytes
Desc: not available
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20160905/5e1051f3/attachment.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: image/png
Size: 1068 bytes
Desc: not available
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20160905/5e1051f3/attachment-0001.png>


More information about the midPoint mailing list