[midPoint] Resolved - Re: how to ignore metarole when tolerant false for group sync?

[Alcides Carlos de Moraes Neto]

You can also use tolerantPattern and intolerantPattern to filter things on
the resource level

Em sex, 1 de mar de 2019 às 23:03, Jason Everling <jeverling at bshp.edu>
escreveu:

> I found you can use a condition on the inbound sync of the association,
> all is well now with tolerant  = false
>
>
>
> On Fri, Mar 1, 2019 at 9:50 AM Jason Everling <jeverling at bshp.edu> wrote:
>
>> I am finally getting around to midpoint enforcing ad groups and group
>> membership for users and roles but I have a a bug I guess I am trying to
>> work around.
>>
>> When modifying a group with tolerant false, it tries to remove the
>> metarole assignment because it is not a valid group in ad and of course the
>> assignment is 'strong' so it errors and stops. If I remove the strong from
>> the metarole assignment the metarole itself gets removed :(
>>
>>
>> JASON
>>
> _______________________________________________
> midPoint mailing list
> midPoint at lists.evolveum.com
> http://lists.evolveum.com/mailman/listinfo/midpoint
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20190308/49681327/attachment.htm>