[midPoint] recompute on OU members

[Radovan Semancik]

Hi,

This may be a configuration issue or it may be a bug. Difficult to say. 
I would quite wonder is this is a bug as we have automated tests for 
these cases. But no testing is perfect and there is still a chance that 
something was missed. So first thing would be to make sure that your 
configuration is correct. Recently I have written down a guide that can 
help you diagnose the configuration issues and that can also provide 
more data in case that his is really a bug:

https://wiki.evolveum.com/display/midPoint/Troubleshooting+Mappings

-- 
Radovan Semancik
Software Architect
evolveum.com



On 09/14/2016 01:37 PM, Dick Muller wrote:
>
> Strangest thing is:
>
> When I configure the role on an OU some users aren’t projected to the 
> group in the AD domain.
>
> If the same user is directly added to the group as an assignment it 
> doesn’t work eighter.
>
> But if I unassign the role from the OU and assign the user directly to 
> that group it works.
>
> Very strange, especially because there are users in that OU that 
> inherit the role successfully.
>
> The user objects in the repository show that they inherit the role. I 
> looked at the shadow objects, the user objects, the role objects.
>
> I absolutely don’t understand why?
>
>
> <http://www.tahzoo.com> 	
> Dick Muller
> Senior Systems Engineer
>
> P: 	*0031 8 82682586* <tel:0031%208%2082682586> 	 | 	M: 
> *0031 6 46477690* <tel:0031%206%2046477690>
>
> E: 	*dick.muller at tahzoo.com* <mailto:dick.muller at tahzoo.com> 	 | 	W: 
> *www.tahzoo.com* <http://www.tahzoo.com>
>
> A: 	*Delftechpark 37I, 2628 XJ Delft, Netherlands* 
> <https://www.google.com/maps/place/Delftechpark+37,+2628+XJ+Delft,+Netherlands/@51.997531,4.3824845,17z/data=%213m1%214b1%214m5%213m4%211s0x47c5b589ec2c237b:0x22b6e5d15befb3d5%218m2%213d51.997531%214d4.3846732> 
>
>
>
> *From: *midPoint <midpoint-bounces at lists.evolveum.com> on behalf of 
> Dick Muller <dick.muller at tahzoo.com>
> *Reply-To: *midPoint General Discussion <midpoint at lists.evolveum.com>
> *Date: *Wednesday 14 September 2016 at 08:46
> *To: *midPoint General Discussion <midpoint at lists.evolveum.com>
> *Subject: *[midPoint] recompute on OU members
>
> Hi,
>
> I have 700 users devided over different OU’s for ease of administration.
>
> I now want to add all members of a OU in a new role and added the role 
> as an inducement to the OU.
>
> After that I did a recompute on all members in the OU.
>
> For some reason some users are added to the role and projected to our 
> AD environment successfully.
>
> But most of them are not.
>
> I enabled the projector logging and recomputed two users blokers that 
> was added successfully and mduiker that wasn’t added.
>
> You can find the two logs in this mail.
>
> In the mduiker file there are errors for the NLDFTDC01 (Hinttech) 
> resource, but I don’t mind because I only used that for provisioning.
>
> The projection I really need is to the Tahzoo EU1 envinroment.
>
> In the log I can see the evaluation and the assignment path for the 
> role jira-users and don’t see any errors on that.
>
> But still it isn’t projected to Tahzoo EU1 domain.
>
> Is there something I can do or that I didn’t see?
>
> Thanks in advance,
>
> DIck
>
> <http://www.tahzoo.com>
>
> 	
>
> *Dick Muller*
>
> *Senior Systems Engineer*
>
> *P: *
>
> 	
>
> *0031 8 82682586* <tel:0031%208%2082682586>
>
> 	
>
>  |
>
> 	
>
> *M: *
>
> 	
>
> *0031 6 46477690* <tel:0031%206%2046477690>
>
> *E: *
>
> 	
>
> *dick.muller at tahzoo.com* <mailto:dick.muller at tahzoo.com>
>
> 	
>
>  |
>
> 	
>
> *W: *
>
> 	
>
> *www.tahzoo.com* <http://www.tahzoo.com>
>
> *A: *
>
> 	
>
> *Delftechpark 37I, 2628 XJ Delft, Netherlands* 
> <https://www.google.com/maps/place/Delftechpark+37,+2628+XJ+Delft,+Netherlands/@51.997531,4.3824845,17z/data=%213m1%214b1%214m5%213m4%211s0x47c5b589ec2c237b:0x22b6e5d15befb3d5%218m2%213d51.997531%214d4.3846732>
>
>
>
> _______________________________________________
> midPoint mailing list
> midPoint at lists.evolveum.com
> http://lists.evolveum.com/mailman/listinfo/midpoint

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20160915/80a7c84b/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: image/png
Size: 1293 bytes
Desc: not available
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20160915/80a7c84b/attachment.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: image/png
Size: 1068 bytes
Desc: not available
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20160915/80a7c84b/attachment-0001.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: image/png
Size: 1294 bytes
Desc: not available
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20160915/80a7c84b/attachment-0002.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: image/png
Size: 1069 bytes
Desc: not available
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20160915/80a7c84b/attachment-0003.png>