[midPoint] Filter in ConnectorRef for AD
Sylvaire kevin TIPA
sylvaire-kevin.tipa at mythalesgroup.io
Thu Jan 10 14:18:15 CET 2019
Ok I reply myself, like sometime, RTFM... :)
So it's work find if you import XML file (event if it's exist), but not if you change existing file in Repository objects.
Reference search filter execution
The search filter in the reference is executed only once: when the object is imported. Then a fixed OID is placed in the reference and such OID is used instead of the filter. This happens because of the performance but also as a consequence of midPoint architecture. All links between midPoint objects are based on OIDs, so they will remain valid if the objects are renamed or modified. This is usually what you want for most objects. But for the connectors there is an important consequence: if a connector is upgraded, new connector definition is created for the new connector version. This definition will have new OID. As the search filter in the reference is not executed for objects that are already stored in the repository the the connectorRef references in resource definitions need to be manually updated after connector upgrade.
Cordialement,
[cid:8e2f30c3-f5eb-4f4e-aefb-9d083f8a3b45]
Sylvaire-Kevin TIPA
Thales Services / OIC / DevOps Automatisation Infrastructures
......................................................................................................
THALES SERVICES SAS
44 Quai Charles de Gaulle
CS 20100
69463 Lyon Cedex 06
......................................................................................................
www.thalesgroup.com<http://www.thalesgroup.com/>
De : Sylvaire kevin TIPA
Envoyé : jeudi 10 janvier 2019 11:23
À : 'midPoint General Discussion' <midpoint at lists.evolveum.com>
Objet : Filter in ConnectorRef for AD
Hey guy,
I don't know if it's a bug but I cannot use filter in connectorRef for Active Directory resource .... It work well for CSV resource, but for pmy AD resource MP can"t get OID ...
I have try on connectorType, connectorVersion, name, displayName field but noting ...
Do you have any tips ?
Nota: In order of connector OID change when a new instance is create, I prefer to use filter for keep my xml file fully fonctional.
MP : 3.7.2
Sample :
<connectorRef type="c:ConnectorType">
<filter>
<q:and>
<q:equal>
<q:path>c:connectorType</q:path>
<matching>stringIgnoreCase</matching>
<q:value>com.evolveum.polygon.connector.ldap.ad.AdLdapConnector</q:value>
</q:equal>
<q:equal>
<q:path>connectorVersion</q:path>
<q:value>1.6</q:value>
</q:equal>
</q:and>
</filter>
</connectorRef>
Thx.
Cordialement,
[cid:8e2f30c3-f5eb-4f4e-aefb-9d083f8a3b45]
Sylvaire-Kevin TIPA
Thales Services / OIC / DevOps Automatisation Infrastructures
......................................................................................................
THALES SERVICES SAS
44 Quai Charles de Gaulle
CS 20100
69463 Lyon Cedex 06
......................................................................................................
www.thalesgroup.com<http://www.thalesgroup.com/>
This message contains confidential information and is intended only for the individual(s) addressed in the message. If you are not the named addressee, you should not disseminate, distribute, or copy this e-mail. If you are not the intended recipient, you are notified that disclosing, distributing, or copying this e-mail is strictly prohibited.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20190110/1249ec55/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 6112 bytes
Desc: image001.png
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20190110/1249ec55/attachment.png>
More information about the midPoint
mailing list