[midPoint] Trouble configuring Zimbra as a resource

[Radovan Semancik]

Hi,

Just a note: Zimbra can be connected through LDAP using stock LDAP 
connector. That's what we do. However, Zimbra is using customized LDAP 
schema. Stock LDAP connector is only a partial solution. It may be 
acceptable for basic use cases, but it is not a complete solution. The 
real solution would be a development of LDAP-based Zibra connector. We 
can do that, but it needs funding (sponsoring).

-- 
Radovan Semancik
Software Architect
evolveum.com



On 04/19/2017 11:06 AM, Ivan Noris wrote:
>
> Hi Tommy,
>
> well this means that the zimbraAccount objectClass does not support 
> "uid" attribute in the schema. You cannot use attributes which are not 
> in schema in your schema handling.
>
> If zimbraAccount is standard LDAP objectclass, I would assume you need 
> to use "ri:dn". (But I have not used Zimbra for provisioning.) The new 
> LDAP connector uses native attribute names from the object classes, in 
> LDAP case it's ri:dn for Distinguished Name instead of icfs:name and 
> usually something like ri:entryUUID instead of icfs:uid. (The latter 
> may differ for different directory servers.)
>
> Regards,
>
> Ivan
>
>
> On 04/19/2017 09:17 AM, Tommy Montegu wrote:
>>
>> Hello,
>>
>> I got trouble to configure my zimbra server (where is hosted all my 
>> company email) as a resource in midPoint.
>>
>> I can connect my resource to midpoint, test connection is OK. You can 
>> find my resource configuration file attached.
>>
>> It’s with schema handling that i’ve got trouble. I’ve got this message :
>>
>> *Schema error while processing schemaHandling section of 
>> resource:48231e70-d81c-4cad-a6da-c84aed4fe4c5(Zimbra_AD): Definition 
>> of attribute uid not found in object class 
>> {http://midpoint.evolveum.com/xml/ns/public/resource/instance-3}zimbraAccount 
>> as defined in definition of 
>> resource:48231e70-d81c-4cad-a6da-c84aed4fe4c5(Zimbra_AD)* <javascript:;>
>>
>> Could someone help me configure my schema handling please ?
>>
>> I try to change the attribute uid by name, but I got the same result.
>>
>> I would be grateful if someone could help to configure my schema 
>> handling for configure my mail server as a resource.
>>
>> I hope to hearing from you soon.
>>
>> Best regards,
>>
>> *Tommy Montégu*Technicien Support, Exodata
>>
>> photo
>>
>> 	
>>
>> Standard :02 62 977 955 <callto:02%2062%20977%20955>
>>
>> Email : tommy.montegu at exodata.fr <mailto:tommy.montegu at exodata.fr>
>>
>> Website : www.exodata.fr 
>> <http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=http%3A%2F%2Fwww.exodata.fr%2F&si=5018836136886272&pi=57234252-d6e6-4462-cce5-05a8cd271064>
>>
>> Adresse : 4, rue Émile Hugot - 97490 Sainte-Clotilde
>>
>> http://images.wisestamp.com/facebook.png 
>> <http://facebook.com/exodata>http://images.wisestamp.com/twitter.png 
>> <http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=http%3A%2F%2Ftwitter.com%2Fexodatagroup&si=5018836136886272&pi=57234252-d6e6-4462-cce5-05a8cd271064>http://images.wisestamp.com/linkedin.png 
>> <http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=http%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fexodata&si=5018836136886272&pi=57234252-d6e6-4462-cce5-05a8cd271064>http://images.wisestamp.com/googleplus.png 
>> <http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=http%3A%2F%2Fplus.google.com%2Fb%2F112099146097934583192%2F112099146097934583192%2Fabout&si=5018836136886272&pi=57234252-d6e6-4462-cce5-05a8cd271064>http://images.wisestamp.com/slideshare.png 
>> <http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=http%3A%2F%2Fwww.slideshare.net%2Fexodata&si=5018836136886272&pi=57234252-d6e6-4462-cce5-05a8cd271064>http://images.wisestamp.com/googlemaps.png 
>> <http://t.signauxdeux.com/e1t/c/5/f18dQhb0SmZ58dDMPbW2n0x6l2B9nMJW7sM9dn7dK_MMdBzM2-04?t=http%3A%2F%2Fgoo.gl%2Fmaps%2F0RNBG&si=5018836136886272&pi=57234252-d6e6-4462-cce5-05a8cd271064>
>>
>>
>>
>> _______________________________________________
>> midPoint mailing list
>> midPoint at lists.evolveum.com
>> http://lists.evolveum.com/mailman/listinfo/midpoint
>
> -- 
> Ivan Noris
> Senior Identity Engineer
> evolveum.com
>
>
> _______________________________________________
> midPoint mailing list
> midPoint at lists.evolveum.com
> http://lists.evolveum.com/mailman/listinfo/midpoint

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20170420/a6ad9ba6/attachment.htm>