[midPoint] Consistency - Postponing the operations

Jésica Collado collado.jesica at gmail.com
Fri Jan 4 13:51:37 CET 2019


Jason,
I don't have any change by setting opportunistic true on both account and
entitlement.

Ivan,
Making the mapping strong I've got a better situation. I'm able to make the
request, approve it and resume the task when the resourse is up
succesfully. Also I'm able to find all tasks throught "List tasks" (on
server tasks) by filtering suspended workflow tasks and showing subtasks.

This is really useful and I guess I can keep consistency by this way.

One last question. Is there a way to resume this tasks automatically? (e.g.
Through a scheduled task)

Thank you
Jésica Collado



El jue., 3 ene. 2019 a las 17:19, Ivan Noris (<ivan.noris at evolveum.com>)
escribió:

> Hi,
>
> my first thought (but I'm still on holidays) is to make the mapping which
> populates the group membership (association) "strong" and see if that helps.
>
> Ivan
> On 3. 1. 2019 15:53, Jésica Collado wrote:
>
> Hello,
>
>
>
> I was reading this section in midpoint wiki
> https://wiki.evolveum.com/display/midPoint/Consistency+mechanism#Consistencymechanism-Postponingtheoperations
>
>
>
> In order to see how this feature work I did the following:
>
> -Configure an AD resource and test that work properly assigning groups and
> stuff
>
> -Assign some roles to a user that create an AD account and provide some
> groups
>
> -Turn down the resource. In Test connection I get: Connection failed:
> org.identityconnectors.framework.common.exceptions.ConnectionFailedException(Unable
> to connect to LDAP server 192.168.151.133:636 due to unknown reasons)
>
> -Request a new role that provide a new group in AD
>
> -Turn up the resource
>
> -Run a reconciliation task for the resource
>
>
>
> The role has been assigned but the new group has never provided.
>
>
>
> In reconciliation log I got: Processing unfinished operations done. Out of
> 0 objects, 0 were processed successfully and processing of 0 resulted in
> failure. Total time spent: 0 ms.
>
>
>
> In shadow object I got a partial_error
>
>    <operationExecution id="327">
>
>       <timestamp>2018-12-27T14:48:54.929Z</timestamp>
>
>       <operation>
>
>          <objectDelta>
>
>             <t:changeType>modify</t:changeType>
>
>             <t:objectType>c:ShadowType</t:objectType>
>
>          </objectDelta>
>
>          <executionResult>
>
>
> <operation>com.evolveum.midpoint.model.impl.lens.ChangeExecutor.executeDelta</operation>
>
>             <status>partial_error</status>
>
>             <token>1000000000000012695</token>
>
>          </executionResult>
>
>          <objectName>CN=Jorn Lande,OU=Mapple,DC=demoidm,DC=com</objectName>
>
>          <resourceOid>02c7a73e-d7dd-43dd-9ae1-80d40cadd05d</resourceOid>
>
>          <resourceName>Mapple AD</resourceName>
>
>       </operation>
>
>       <status>partial_error</status>
>
>       <initiatorRef oid="23b530a2-85c7-495a-8657-dfeb4019f731"
>
>                     relation="org:default"
>
>                     type="c:UserType"/>
>
>       <taskRef oid="a4abae28-fb89-4421-8e52-7960f39ed260"
>
>                relation="org:default"
>
>                type="c:TaskType"/>
>
>       <channel>
> http://midpoint.evolveum.com/xml/ns/public/gui/channels-3#user</channel>
>
>    </operationExecution>
>
>
>
> Am I doing something wrong?
>
>
> Thank you
>
> Jésica Collado
>
> _______________________________________________
> midPoint mailing listmidPoint at lists.evolveum.comhttp://lists.evolveum.com/mailman/listinfo/midpoint
>
> --
> Ivan Noris
> Senior Identity Engineerevolveum.com
>
> _______________________________________________
> midPoint mailing list
> midPoint at lists.evolveum.com
> http://lists.evolveum.com/mailman/listinfo/midpoint
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20190104/33494152/attachment.htm>


More information about the midPoint mailing list