[midPoint] (no subject)

Fabian Noll-Dukiewicz fabian.noll-dukiewicz at veryfy.gmbh
Tue Dec 12 12:08:17 CET 2023 

Hi,

please try „fullName“ (N in upper case) instead of „fullname”. For attributes you can check the object type reference.

  *   https://www.evolveum.com/downloads/midpoint/4.1/midpoint-4.1-schemadoc/http---midpoint-evolveum-com-xml-ns-public-common-common-3/object/UserType.html

Kind regards,
Fabian

--
Fabian Noll-Dukiewicz
Spezialist Identity & Access Management | Geschäftsführer
Tel.: +49 152 244 63 211
Email: fabian.noll-dukiewicz at veryfy.gmbh
Web: https://veryfy.gmbh


Von: midPoint <midpoint-bounces at lists.evolveum.com> im Auftrag von Камардина Виктория via midPoint <midpoint at lists.evolveum.com>
Datum: Dienstag, 12. Dezember 2023 um 12:04
An: Davy Priem <davy.priem at vives.be>
Cc: Камардина Виктория <kamardina.v at esapro.ru>, midPoint General Discussion <midpoint at lists.evolveum.com>
Betreff: Re: [midPoint] (no subject)
Hi!

I changed the "name" field to "fullname" in the dn and in the Groovy script. Now many errors appear. This may be due to a space in the "fullname" field. I removed the space, but it is not removed.

[cid:xqFp at xICLGqPs.KoEQVSUj]
[cid:5Plk at ayxrZgmc.Qi1xsrOA]

[cid:pS6k at LvRUMluV.MT5L7b7u]
[cid:G2BO at ipdqRXtG.pzBlLreC]
Errors:
Groovy Evaluation Failed: No such property: fullname for class: instance-3}dn_in_resource_aabbcf1c-4987-4d74-bc88-bc332a861c6d(Active_Directory)(null (focus, user)=user:776a28f2-92ae-4359-8fe4-f2e335ecf40f(clon); resource=resource:aabbcf1c-4987-4d74-bc88-bc332a861c6d(Active Directory); configuration=systemConfiguration:00000000-0000-0000-0000-000000000001(SystemConfiguration); fullName=PPV(PolyString:clon clon); source=resource:aabbcf1c-4987-4d74-bc88-bc332a861c6d(Active Directory); iterationToken=; containingObject=resource:aabbcf1c-4987-4d74-bc88-bc332a861c6d(Active Directory); actor=user:00000000-0000-0000-0000-000000000002(administrator); assignmentPath=null; legal=true; iteration=0; assigned=true; projection (shadow, account)=shadow:null(null); thisObject=null; operation=add; ) in expression in mapping in outbound mapping for attribute {.../resource/instance-3}dn in resource:aabbcf1c-4987-4d74-bc88-bc332a861c6d(Active Directory)
Error
Groovy Evaluation Failed: No such property: fullname for class: instance-3}dn_in_resource_aabbcf1c-4987-4d74-bc88-bc332a861c6d(Active_Directory)(null (focus, user)=user:776a28f2-92ae-4359-8fe4-f2e335ecf40f(clon); resource=resource:aabbcf1c-4987-4d74-bc88-bc332a861c6d(Active Directory); configuration=systemConfiguration:00000000-0000-0000-0000-000000000001(SystemConfiguration); fullName=PPV(PolyString:clon clon); source=resource:aabbcf1c-4987-4d74-bc88-bc332a861c6d(Active Directory); iterationToken=; containingObject=resource:aabbcf1c-4987-4d74-bc88-bc332a861c6d(Active Directory); actor=user:00000000-0000-0000-0000-000000000002(administrator); assignmentPath=null; legal=true; iteration=0; assigned=true; projection (shadow, account)=shadow:null(null); thisObject=null; operation=add; ) in expression in mapping in outbound mapping for attribute {.../resource/instance-3}dn in resource:aabbcf1c-4987-4d74-bc88-bc332a861c6d(Active Directory)
[ SHOW ERROR STACK ]


[cid:image003.png at 01DA2C32.2734F560]<https://www.crosstech.su/>

Виктория Камардина

Ведущий аналитик

+7 (999) 636-22-56<tel:%20+79996362256>
________________________________
+7 (495) 741-88-64 | crosstech.su<https://www.crosstech.su/>


Понедельник, 11 декабря 2023, 15:14 +03:00 от Davy Priem <davy.priem at vives.be>:


Hi,



In your mapping you have ‘fullname’ as CN whereas you use ‘name’ in the DN.



Van: Камардина Виктория <kamardina.v at esapro.ru<file:////compose%3fTo=kamardina.v@esapro.ru>>
Verzonden: Monday, 11 December 2023 11:56
Aan: Davy Priem <davy.priem at vives.be<file:////compose%3fTo=davy.priem@vives.be>>
CC: ondar.r at esapro.ru; midPoint General Discussion <midpoint at lists.evolveum.com<file:////compose%3fTo=midpoint@lists.evolveum.com>>
Onderwerp: Re: [midPoint] (no subject)



I installed version 4.6 of docker, but the application says that version 4.9 is used…

[cid:image001.png at 01DA2C32.2734F560]



<attribute id="23">

                <ref>ri:dn</ref>

                <outbound>

                    <source>

                        <path>$focus/name</path>

                    </source>

                    <expression>

                        <script>

                            <language>http://midpoint.evolveum.com/xml/ns/public/expression/language#Groovy</language<http://midpoint.evolveum.com/xml/ns/public/expression/language#Groovy%3C/language>>

                            <code>

                               'CN='+ name +',CN=Users,DC=OPS,DC=local'

                            </code>

                        </script>

                    </expression>

                </outbound>

            </attribute>



[cid:image003.png at 01DA2C32.2734F560]<https://www.crosstech.su/>



Виктория Камардина



Ведущий аналитик



+7 (999) 636-22-56<tel:%20+79996362256>

________________________________

+7 (495) 741-88-64 | crosstech.su<https://www.crosstech.su/>





Понедельник, 11 декабря 2023, 13:40 +03:00 от Davy Priem <davy.priem at vives.be<file://///e.mail.ru/compose/%3fmailto=mailto%253adavy.priem@vives.be>>:


Hi,



Sorry, my error. Can you share your resource config (outgoing for DN)?



PS : Is there a specific reason why you use 4.9? Latest release is 4.8.



Van: Камардина Виктория <kamardina.v at esapro.ru>
Verzonden: Monday, 11 December 2023 11:21
Aan: Davy Priem <davy.priem at vives.be>
CC: ondar.r at esapro.ru<file://///e.mail.ru/compose/%3fmailto=mailto%253aondar.r@esapro.ru>; midPoint General Discussion <midpoint at lists.evolveum.com>
Onderwerp: Re: [midPoint] (no subject)



Thank you!

But I looked in the active directory when choosing dn. I can also create users from the Midpoint account in the Active directory itself. This means that the Midpoint user has sufficient rights.

[cid:image004.png at 01DA2C32.2734F560]

[cid:image003.png at 01DA2C32.2734F560]<https://www.crosstech.su/>



Виктория Камардина



Ведущий аналитик



+7 (999) 636-22-56<tel:%20+79996362256>

________________________________

+7 (495) 741-88-64 | crosstech.su<https://www.crosstech.su/>





Понедельник, 11 декабря 2023, 13:00 +03:00 от Davy Priem <davy.priem at vives.be<http://e.mail.ru/compose/?mailto=mailto%3adavy.priem@vives.be>>:


Hi,



I think you made an error : 'CN='+ name +',CN=Users,DC=OPS,DC=local' => CN=Users should be OU=Users



Best regards

Davy Priem





Van: midPoint <midpoint-bounces at lists.evolveum.com<file://///e.mail.ru/compose/%3fmailto=mailto%253amidpoint%252dbounces@lists.evolveum.com>> Namens ????????? ???????? via midPoint
Verzonden: Monday, 11 December 2023 10:55
Aan: midpoint at lists.evolveum.com<file://///e.mail.ru/compose/%3fmailto=mailto%253amidpoint@lists.evolveum.com>
CC: Камардина Виктория <kamardina.v at esapro.ru<file://///e.mail.ru/compose/%3fmailto=mailto%253akamardina.v@esapro.ru>>; ondar.r at esapro.ru<file://///e.mail.ru/compose/%3fmailto=mailto%253aondar.r@esapro.ru>
Onderwerp: [midPoint] (no subject)





Hello,



I can get a list of users from Active Directory. But I also need to add users to Active Directory.



Figure 1 shows the mapping for sending a user to Active Directory. My script for outbound mapping:

'CN='+ name +',CN=Users,DC=OPS,DC=local'



Picture 2 shows the process of adding a user to an Active Directory resource



When adding a user to an Active Directory resource, the following error occurs (Picture 3): Error adding LDAP entry CN=clon,CN=Users,DC=OPS,DC=local: validDNSyntax: 00002081: NameErr: DSID-03050EB3, problem 2003 (BAD_ATT_SYNTAX) . , data 0, best match:??'CN=clon,CN=Users,DC=OPS,DC=local'?? (34)



Tell me, please, how this can be solved?

Thanks


Midpoint version : 4.9

Java version: 17.0.8.1







[cid:image003.png at 01DA2C32.2734F560]<https://www.crosstech.su/>



Виктория Камардина



Ведущий аналитик



+7 (999) 636-22-56<tel:%20+79996362256>

________________________________

+7 (495) 741-88-64 | crosstech.su<https://www.crosstech.su/>















-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20231212/3ff78638/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 183667 bytes
Desc: image001.png
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20231212/3ff78638/attachment-0007.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image003.png
Type: image/png
Size: 5509 bytes
Desc: image003.png
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20231212/3ff78638/attachment-0008.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image004.png
Type: image/png
Size: 12528 bytes
Desc: image004.png
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20231212/3ff78638/attachment-0009.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image.png
Type: image/png
Size: 203736 bytes
Desc: image.png
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20231212/3ff78638/attachment-0010.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image.png
Type: image/png
Size: 25553 bytes
Desc: image.png
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20231212/3ff78638/attachment-0011.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image.png
Type: image/png
Size: 153032 bytes
Desc: image.png
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20231212/3ff78638/attachment-0012.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image.png
Type: image/png
Size: 118817 bytes
Desc: image.png
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20231212/3ff78638/attachment-0013.png>

More information about the midPoint mailing list