[midPoint] Reconciliation of a range of users
Andrea Picconi
andrea.picconi at innovery.net
Thu Feb 17 08:48:47 CET 2022
Hi Richard,
thank you, really helpfull!
I found also a recompute task inside the /doc folder (thx @Pavol Mederly<mailto:mederly at evolveum.com>) of midpoint, here an example:
<task
xmlns=http://midpoint.evolveum.com/xml/ns/public/common/common-3
xmlns:mext=http://midpoint.evolveum.com/xml/ns/public/model/extension-3
xmlns:q=http://prism.evolveum.com/xml/ns/public/query-3
xmlns:xsi=http://www.w3.org/2001/XMLSchema-instance
xmlns:xsd=http://www.w3.org/2001/XMLSchema>
<name>User Recompute (users surname BAIO)</name>
<extension>
<mext:objectQuery>
<q:filter>
<q:equal>
<q:path>familyName</q:path>
<q:value>BAIO</q:value>
</q:equal>
</q:filter>
</mext:objectQuery>
</extension>
<ownerRef oid="00000000-0000-0000-0000-000000000002"/>
<executionStatus>suspended</executionStatus>
<handlerUri>http://midpoint.evolveum.com/xml/ns/public/model/synchronization/task/recompute/handler-3</handlerUri<http://midpoint.evolveum.com/xml/ns/public/model/synchronization/task/recompute/handler-3%3c/handlerUri>>
<recurrence>single</recurrence>
<binding>tight</binding>
</task>
Thank you again,
Andrea
From: midPoint <midpoint-bounces at lists.evolveum.com> On Behalf Of Richard Frovarp via midPoint
Sent: Wednesday, February 16, 2022 9:28 PM
To: midPoint General Discussion <midpoint at lists.evolveum.com>
Cc: Richard Frovarp <richard.frovarp at ndsu.edu>
Subject: Re: [midPoint] Reconciliation of a range of users
Here's an example of recomputing based on org membership with the "name" value ending in 0, which gets me 10% of my users as name is close enough to a number (it has leading zeros) and is evenly distributed across all digits in the last number. This is put into a bulk task to run. Pretty sure I don't have any typos here. This is from some of my older examples.
<s:search xmlns="http://midpoint.evolveum.com/xml/ns/public/common/common-3"<http://midpoint.evolveum.com/xml/ns/public/common/common-3>
xmlns:s="http://midpoint.evolveum.com/xml/ns/public/model/scripting-3"<http://midpoint.evolveum.com/xml/ns/public/model/scripting-3>
xmlns:c="http://midpoint.evolveum.com/xml/ns/public/common/common-3"<http://midpoint.evolveum.com/xml/ns/public/common/common-3>
xmlns:q="http://prism.evolveum.com/xml/ns/public/query-3"<http://prism.evolveum.com/xml/ns/public/query-3>>
<s:type>c:UserType</s:type>
<s:searchFilter>
<q:and>
<q:ref>
<q:path>assignment/targetRef</q:path>
<q:value>
<oid>8893b32f-b168-4a68-9835-83f4ef4b06cd</oid>
<type>OrgType</type>
</q:value>
</q:ref>
<q:substring>
<q:matching>polyStringOrig</q:matching>
<q:path>name</q:path>
<q:value>0</q:value>
<q:anchorEnd>true</q:anchorEnd>
</q:substring>
</q:and>
</s:searchFilter>
<s:action>
<s:type>recompute</s:type>
</s:action>
</s:search>
On 2/16/22 03:12, Pavol Mederly via midPoint wrote:
Hello Andrea,
then you may open 4.1 source tree and look for mext:objectQuery in task*.xml files. :-)
Maybe someone from community will supply a specific example.
Best regards,
--
Pavol Mederly
Software developer
evolveum.com
On 16/02/2022 10:09, Andrea Picconi via midPoint wrote:
Hi Pavol,
thank you for your quickly response.
You are right, recomputation, but now we can work only on the 4.1.
An example of the query that can i use inside the TASK?
Thank you again,
Andrea
From: midPoint <midpoint-bounces at lists.evolveum.com><mailto:midpoint-bounces at lists.evolveum.com> On Behalf Of Pavol Mederly via midPoint
Sent: Wednesday, February 16, 2022 9:48 AM
To: midpoint at lists.evolveum.com<mailto:midpoint at lists.evolveum.com>
Cc: Pavol Mederly <mederly at evolveum.com><mailto:mederly at evolveum.com>
Subject: Re: [midPoint] Reconciliation of a range of users
Hello,
you probably mean recomputation, not reconciliation, right? Reconciliation deals primarily with accounts, not users.
For 4.4 and above, just search through midPoint source tree, looking at task*.xml objects with <objects> with <query> elements.
Regards,
--
Pavol Mederly
Software developer
evolveum.com
On 16/02/2022 09:31, Andrea Picconi via midPoint wrote:
Hi all,
do you have an example of a riconciliation TASK where you only take a range of users, based on an extended attribute (or normal)?
I have a resource with over 200,000 users, but I have to check only a part of it using a date present on an extended attribute as a filter.
Any idea?
Thank you in advance,
Andrea
[cid:image001.jpg at 01D823DA.5F5A5D70]
Andrea Picconi
IAM Engineer
MAIL: ANDREA.PICCONI at INNOVERY.NET<mailto:ANDREA.PICCONI at INNOVERY.NET>
PHONE: +39 06 51963439 (ext. 196)
MOBILE: -
WWW.INNOVERY.NET<http://WWW.INNOVERY.NET>
STRADA QUATTRO SNC, PAL A6
CENTRO DIREZIONALE MILANOFIORI | 20057 ASSAGO (MI)
[cid:image002.jpg at 01D823DA.5F5A5D70]
_______________________________________________
midPoint mailing list
midPoint at lists.evolveum.com<mailto:midPoint at lists.evolveum.com>
https://lists.evolveum.com/mailman/listinfo/midpoint
_______________________________________________
midPoint mailing list
midPoint at lists.evolveum.com<mailto:midPoint at lists.evolveum.com>
https://lists.evolveum.com/mailman/listinfo/midpoint
_______________________________________________
midPoint mailing list
midPoint at lists.evolveum.com<mailto:midPoint at lists.evolveum.com>
https://lists.evolveum.com/mailman/listinfo/midpoint
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20220217/5726b7f0/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.jpg
Type: image/jpeg
Size: 2583 bytes
Desc: image001.jpg
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20220217/5726b7f0/attachment-0002.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.jpg
Type: image/jpeg
Size: 1986 bytes
Desc: image002.jpg
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20220217/5726b7f0/attachment-0003.jpg>
More information about the midPoint
mailing list