[midPoint] Problem with auxiliaryObjectClass definition in LDAP Connector on midPoint 4.6

Pedro Marques pmbm at fct.unl.pt
Thu Nov 24 17:10:39 CET 2022


Hi,

>From my experience, you can use the same config in version 4.6

<*auxiliaryObjectClassMappings*>
    <*tolerant*>true</*tolerant*>
</*auxiliaryObjectClassMappings*>

In my case I do it using the option "Edit Raw" on the resource.It seems to
have the same behaviour  that exists in the previous versions of midpoint.
I also don't found the relation of this option with  gui wizard
----
            <auxiliaryObjectClassMappings>
                <tolerant>true</tolerant>
            </auxiliaryObjectClassMappings>
            <delineation>
                <objectClass>ri:inetOrgPerson</objectClass>
                <auxiliaryObjectClass>ri:qmailUser</auxiliaryObjectClass>
           </delineation>
----

Hope it helps.

Best regards


Patrik Sidler via midPoint <midpoint at lists.evolveum.com> escreveu no dia
quinta, 24/11/2022 à(s) 14:09:

> Hi All,
>
>
>
> I am having a problem, configuring the auxiliaryObjectClass on my LDAP
> Connector (Version 3.5) running on midPoint 4.6.
>
>
>
>
>
> The configuration midPoint 4.4.3 (LDAP Connector) worked perfect:
>
>
>
> <*objectClass*>ri:inetOrgPerson</*objectClass*>
> <*auxiliaryObjectClass*>ri:ipaObject</*auxiliaryObjectClass*>
> <*auxiliaryObjectClass*>ri:iamUser</*auxiliaryObjectClass*>
> <*auxiliaryObjectClass*>ri:inetUser</*auxiliaryObjectClass*>
> <*auxiliaryObjectClass*>ri:ipaSshUser</*auxiliaryObjectClass*>
> <*auxiliaryObjectClass*>ri:krbTicketPolicyAux</*auxiliaryObjectClass*>
> <*auxiliaryObjectClass*>ri:krbPrincipalAux</*auxiliaryObjectClass*>
> <*auxiliaryObjectClass*>ri:aspectraUser</*auxiliaryObjectClass*>
> <*auxiliaryObjectClass*>ri:posixAccount</*auxiliaryObjectClass*>
> <*auxiliaryObjectClass*>ri:ipaNTUserAttrs</*auxiliaryObjectClass*>
> <*auxiliaryObjectClassMappings*>
>     <*tolerant*>true</*tolerant*>
> </*auxiliaryObjectClassMappings*>
>
>
>
>
>
> With midPoint 4.6 and LDAP Connector 3.5, the configuration looks the
> following:
>
> <*objectType **id**="4"*>
>     <*kind*>account</*kind*>
>     <*intent*>ldapAccount</*intent*>
>     <*displayName*>LDAP Account</*displayName*>
>     <*default*>true</*default*>
>     <*delineation*>
>         <*objectClass*>ri:inetOrgPerson</*objectClass*>
>         <*auxiliaryObjectClass*>ri:ipaObject</*auxiliaryObjectClass*>
>         <*auxiliaryObjectClass*>ri:iamUser</*auxiliaryObjectClass*>
>         <*auxiliaryObjectClass*>ri:inetUser</*auxiliaryObjectClass*>
>         <*auxiliaryObjectClass*>ri:ipaSshUser</*auxiliaryObjectClass*>
>         <*auxiliaryObjectClass*>ri:krbTicketPolicyAux</*auxiliaryObjectClass*>
>         <*auxiliaryObjectClass*>ri:krbPrincipalAux</*auxiliaryObjectClass*>
>         <*auxiliaryObjectClass*>ri:aspectraUser</*auxiliaryObjectClass*>
>         <*auxiliaryObjectClass*>ri:posixAccount</*auxiliaryObjectClass*>
>         <*auxiliaryObjectClass*>ri:ipaNTUserAttrs</*auxiliaryObjectClass*>
>     </*delineation*>
>
>
>
> But I am not able to set the auxiliaryObjectClassMappings to tolerant. I
> also found no description/example to do this with the new Wizard thing…
>
>
>
> Anyone an Idea how to solve this problem?
>
>
>
> Thank you in advance for your help.
>
>
>
> Best regards
>
> Patrik
>
>
> _______________________________________________
> midPoint mailing list
> midPoint at lists.evolveum.com
> https://lists.evolveum.com/mailman/listinfo/midpoint
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20221124/8c713564/attachment-0001.htm>


More information about the midPoint mailing list