[midPoint] Synchronizating roles between a database table and midPoint

Mercedes Oncina Deltell moncina at um.es
Thu Feb 10 14:14:51 CET 2022


I have configured it as you wrote and I can see the entitlements from de 
resource in midPoint, but when I try to import them, I get the now 
familiar error:

Message
    Could not import account shadow:b18c3e63-f2c5-461c-b6c0-27b91e0aa2bb(01)

Error
    No object class found for the shadow

My configuration is:

    /*    <schemaHandling>*
             <objectType id="16">
    *            <kind>entitlement</kind>**
    **            <intent>default</intent>**
    **            <default>true</default>**
    **<objectClass>ri:AccountObjectClass</objectClass>*
                 <attribute id="17">
                     <ref>icfs:uid</ref>
                     <tolerant>true</tolerant>
                     <inbound id="19">
    <authoritative>true</authoritative>
                         <exclusive>false</exclusive>
                         <strength>normal</strength>
                         <target>
                             <path>name</path>
                         </target>
                     </inbound>
                 </attribute>
                 <attribute id="18">
                     <ref>ri:TREL_DESCRIPCION</ref>
                     <tolerant>true</tolerant>
    <exclusiveStrong>false</exclusiveStrong>
                     <inbound id="20">
    <authoritative>true</authoritative>
                         <exclusive>false</exclusive>
                         <strength>normal</strength>
                         <target>
                             <path>displayName</path>
                         </target>
                     </inbound>
                 </attribute>
             </objectType>
         </schemaHandling>
    *  <synchronization>*
             <objectSynchronization>
                 <name>SynchroRoles</name>
    *<objectClass>AccountObjectClass</objectClass>**
    **            <kind>entitlement</kind>**
    **            <intent>default</intent>**
    **<focusType>c:RoleType</focusType>**
    **            <enabled>true</enabled>*
    *            <correlation>*
                     <q:equal xmlns="">
                         <q:path>name</q:path>
                         <expression xmlns="">
    <path>$focus/attributes/trel_codigo</path>
                         </expression>
                     </q:equal>
    <q:description>CheckUIDwithCODIGO</q:description>
                 </correlation>
                 <reconcile>false</reconcile>
                 <reaction>
                     <situation>deleted</situation>
                     <synchronize>true</synchronize>
                     <action>
    <handlerUri>http://midpoint.evolveum.com/xml/ns/public/model/action-3#unlink</handlerUri>
                     </action>
                 </reaction>
                 <reaction>
                     <situation>linked</situation>
                     <synchronize>true</synchronize>
                     <reconcile>false</reconcile>
                 </reaction>
                 <reaction>
                     <situation>unlinked</situation>
                     <synchronize>true</synchronize>
                     <action>
    <handlerUri>http://midpoint.evolveum.com/xml/ns/public/model/action-3#link</handlerUri>
                     </action>
                 </reaction>
                 <reaction>
                     <situation>unmatched</situation>
                     <synchronize>true</synchronize>
                     <reconcile>false</reconcile>
                     <action>
    <handlerUri>http://midpoint.evolveum.com/xml/ns/public/model/action-3#addFocus</handlerUri>
                     </action>
                 </reaction>
             </objectSynchronization>
         </synchronization>/

The Oracle table is:

    /CREATE TABLE TIPO_RELACIONES
    (
       TREL_CODIGO         VARCHAR2(2 BYTE),
       TREL_DESCRIPCION    VARCHAR2(60 BYTE),
       TREL_UNIVERSITARIO  VARCHAR2(1 BYTE),
       TREL_PRIORIDAD      NUMBER(2),
       TREL_DURACION       DATE,
       TREL_MESES          NUMBER(4),
       TREL_TIPO_DURACION  VARCHAR2(1 BYTE),
       TREL_VIGENTE        VARCHAR2(1 BYTE),
       TREL_RESPONSABLE    VARCHAR2(8 BYTE),
       TREL_TIPO_EMAIL     VARCHAR2(1 BYTE),
       TREL_EXTERNO        VARCHAR2(1 BYTE)
    )/

I only want it for importing and synchronizing data into midPoint (inbound).


El 10/02/2022 a las 12:00, midpoint-request at lists.evolveum.com escribió:
> <schemaHandling> <objectType> <objectClass>ri:AccountObjectClass</objectClass> <default>true</default> <kind>*entitlement*</kind> <intent>default</intent> ...
> <synchronization> <objectSynchronization> <objectClass>AccountObjectClass</objectClass> <kind>*entitlement*</kind> <intent>default</intent> <focusType>RoleType</focusType> <enabled>true</enabled>
>
> ...

-- 
Mercedes Oncina Deltell
Servicio de Infraestructuras TICS
ATICA - Universidad de Murcia
Telf: +34 868881983
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20220210/51943c85/attachment.htm>


More information about the midPoint mailing list