[midPoint] Cannot retrieve AD username in accountPasswordNotifier

[Ian Chen]

Hi List,

I tried to send user email notification when his/her Active Directory
account is created.
But it seems when send the notification email, at successful add AD
account, new account is not linked and the extension attribute is no
written. Please help!

I'm running 3.6.1. There is no issue retrieving other extension attributes.

        <handler>
            <accountPasswordNotifier>
                <name>new account user notification</name>
                <operation>add</operation>
                <status>success</status>
                <recipientExpression>
                    ...
                </recipientExpression>
                <subjectExpression>
                    ...
                </subjectExpression>
                <bodyExpression>
                    <script>
                        <code>
                            ...

                            log.info("Requestee = {}",
requestee.asPrismObject().debugDump());
                            adAccount =
basic.getExtensionPropertyValue(requestee, '
http://example.com/xml/ns/mySchema', 'adAccount');

                            ...
                        </code>
                    </script>
                </bodyExpression>
                <transport>mail</transport>
            </accountPasswordNotifier>

AD connector resource OID: 80000003-0000-0000-0000-000000000004
no AD recoure linked or adAccount extension in user:

2017-11-27 15:42:49,058 [PROVISIONING] [http-nio-8080-exec-9] INFO
(com.evolveum.midpoint.expression): Requestee = user:
(70055418-8923-4c1b-b1bf-eb3fea0cdcbd, v3, UserType)
    name: 10211263
    extension:
        oldEmployeeId: XXXXXX
        gender: F
        employeeId: 00000000000000
        lastNamePy: lastname
        firstNamePy: firstname
        managerName: manager
        managerId: YYYYYYYY
        buName: BU
        companyId: 11111
        companyName: OOOOOOOO
        departmentId: 111111111111
        departmentName: DDDDDDDD
        locationName: CITY
    parentOrgRef:
      oid=1a6283de-11af-4c2e-9e1f-5cc1507b9989(OrgType)[default]
      oid=4bf2e3fc-ee4f-4518-968d-f48fc1fa5064(OrgType)[default]
    metadata:
        requestTimestamp: 2017-11-27T14:36:01.254+08:00
        requestorRef:
oid=00000000-0000-0000-0000-000000000002(UserType)[default]
        createTimestamp: 2017-11-27T14:36:01.285+08:00
        creatorRef:
oid=00000000-0000-0000-0000-000000000002(UserType)[default]
        createChannel:

http://midpoint.evolveum.com/xml/ns/public/provisioning/channels-3#import
        modifyTimestamp: 2017-11-27T15:42:46.883+08:00
        modifierRef:
oid=00000000-0000-0000-0000-000000000002(UserType)[default]
        modifyChannel:
          http://midpoint.evolveum.com/xml/ns/public/gui/channels-3#user
        lastProvisioningTimestamp: 2017-11-27T15:42:46.883+08:00
    operationExecution:
      id=3
        timestamp: 2017-11-27T14:36:02.401+08:00
        operation:
          ObjectDeltaOperationType(ObjectDeltaType(null ADD: []): SUCCESS)
          ObjectDeltaOperationType(ObjectDeltaType(null MODIFY: []):
SUCCESS)
        status: SUCCESS
        initiatorRef:
oid=00000000-0000-0000-0000-000000000002(UserType)[default]
        channel:

http://midpoint.evolveum.com/xml/ns/public/provisioning/channels-3#import
    linkRef:
      oid=05f2f933-8317-4f74-9315-23cd81855dfb(ShadowType)[default]
    assignment:
      id=1
        metadata:
            requestTimestamp: 2017-11-27T14:36:01.254+08:00
            requestorRef:
oid=00000000-0000-0000-0000-000000000002(UserType)[default]
            createTimestamp: 2017-11-27T14:36:01.285+08:00
            creatorRef:
oid=00000000-0000-0000-0000-000000000002(UserType)[default]
            createChannel:

http://midpoint.evolveum.com/xml/ns/public/provisioning/channels-3#import
        targetRef:
oid=1a6283de-11af-4c2e-9e1f-5cc1507b9989(OrgType)[default]
        activation:
            effectiveStatus: ENABLED
      id=2
        metadata:
            requestTimestamp: 2017-11-27T14:36:01.254+08:00
            requestorRef:
oid=00000000-0000-0000-0000-000000000002(UserType)[default]
            createTimestamp: 2017-11-27T14:36:01.285+08:00
            creatorRef:
oid=00000000-0000-0000-0000-000000000002(UserType)[default]
            createChannel:

http://midpoint.evolveum.com/xml/ns/public/provisioning/channels-3#import
        targetRef:
oid=4bf2e3fc-ee4f-4518-968d-f48fc1fa5064(OrgType)[default]
        activation:
            effectiveStatus: ENABLED
      id=4
        metadata:
            requestTimestamp: 2017-11-27T15:42:46.804+08:00
            requestorRef:
oid=00000000-0000-0000-0000-000000000002(UserType)[default]
            createTimestamp: 2017-11-27T15:42:46.883+08:00
            creatorRef:
oid=00000000-0000-0000-0000-000000000002(UserType)[default]
            createChannel:
              http://midpoint.evolveum.com/xml/ns/public/gui/channels-3#user
        targetRef:
oid=80000004-0000-0000-0000-000000000002(RoleType)[default]
        activation:
            effectiveStatus: ENABLED
    activation:
        effectiveStatus: ENABLED
        enableTimestamp: 2017-11-27T14:36:01.254+08:00
    iteration: 0
    iterationToken:
    roleMembershipRef:
      oid=1a6283de-11af-4c2e-9e1f-5cc1507b9989(OrgType)[default]
      oid=4bf2e3fc-ee4f-4518-968d-f48fc1fa5064(OrgType)[default]
      oid=80000004-0000-0000-0000-000000000002(RoleType)[default]
      oid=00000000-0000-0000-0000-000000000008(RoleType)[default]
    fullName: firstname lastname
    givenName: firstname
    familyName: lastname
    title: TITLE
    emailAddress: EMAIL
    employeeNumber: 88888888

Regards,
Ian
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20171127/cbcf56f9/attachment.htm>