[midPoint] Active Directory - Ignore attribute

[Laza, Javier]

I have to add that this happens because we have enable the cachingStrategy, as it seems the only way to have visibility of the Shadow Accounts activation status in the GUI. Meaning I want to go the user projections and have visibility of the status of all the accounts, like in the below picture

[cid:image002.png at 01D6C325.B6406C90]


The only way I found to accomplish this is activating the cachingStrategy


From: midPoint <midpoint-bounces at lists.evolveum.com> On Behalf Of Laza, Javier via midPoint
Sent: miércoles, 25 de noviembre de 2020 11:13
To: midPoint General Discussion <midpoint at lists.evolveum.com>
Cc: Laza, Javier <Javier.Laza at ingrammicro.com>
Subject: [midPoint] Active Directory - Ignore attribute

Hello,

I have an attribute in the AD that stores a binary as String (I cannot change this as it is managed by other department), so when I access to the Shadow Object and it tries to pull all the information of the user, I am getting this exception (size > 1024)

Batch entry 1 insert into m_object_ext_string  --  ERROR: value too long for type character varying(1024)

If I change the size of this column to 4096 (would be enough) then I get this other exception

ERROR: index row size 2848 exceeds maximum 2712 for index "m_object_ext_string_pkey"

So I am wondering, is there any way to tweak the AD connector to ignore certain attributes? I have tried the "attributes to synchronize" parameter, but does not work as synchronization happens after pulling the information from the resource to the Shadow Object

La información contenida en este mensaje es confidencial. En caso de que reciba este mensaje por error le rogamos lo comunique a la mayor brevedad al emisor y proceda a su eliminación definitiva, absteniéndose de copiar, almacenar o difundir su contenido. De acuerdo con lo establecido en la Ley Orgánica 15/1999, de Protección de Datos de Carácter Personal y en el Reglamento de Desarrollo 1720/2007, los datos personales que facilite a través de la dirección de correo indicada serán incorporados a un fichero titularidad de INGRAM MICRO, S.L.U., con domicilio en C/ Antonio Machado, 78-80 1ª y 2ª pl. Business Park ( 08840-Viladecans). Mediante el envío de sus datos, Ud. otorga su consentimiento expreso a INGRAM MICRO, S.L.U, para el tratamiento de sus datos, con la finalidad de atender a su consulta y/o mantener la relación profesional, comercial, y/o contractual que en su caso establezca con INGRAM MICRO, S.L.U. Puede ejercitar sus derechos de acceso, rectificación, cancelación y oposición notificándolo por escrito a la dirección del remitente, o a la siguiente dirección de correo nuevascuentas at ingrammicro.es<mailto:nuevascuentas at ingrammicro.es>. De acuerdo con la Ley 34/2002, de Servicios de la Sociedad de la Información y de Comercio Electrónico, Vd. podrá oponerse en cualquier momento al tratamiento de sus datos con fines promocionales notificándonoslo por escrito a la dirección de correo mencionada.
.................................................................................................................................................................................................................................................
The information contained in this message is confidential. If you receive this message by error please notify it as soon as possible to the sender and proceed to their final elimination by not copy, store or distribute its content. In accordance of what is stated in the Law 15/1999, of Data Personal Protection and Regulation Rule 1720/2007, the personal data provided through the email address you entered will be included in a file owned by INGRAM MICRO, SLU, located at C/ Antonio Machado, 78-80 1ª y 2ª pl. Business Park ( 08840-Viladecans). By submitting your data, you expressly give your consent to INGRAM MICRO, SLU, to the treatment of your data, in order to answer to your questions and / or keep the professional, commercial relationship  and / or contractual set with INGRAM MICRO, SLU You can exercise your rights of access, rectification, cancellation and opposition by giving written notification to the sender address or to  the following email:  nuevascuentas at ingrammicro.es<mailto:nuevascuentas at ingrammicro.es>. According to Law 34/2002, of the Information Society and Electronic Commerce, you may object at any time to your data treatment for promotional purposes by notifying us in writing to the email address above.
[Ingram_2818e5de]
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20201125/56dcc738/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.png
Type: image/png
Size: 45527 bytes
Desc: image002.png
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20201125/56dcc738/attachment-0001.png>