<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">Jason,<br>
<br>
there are two different kinds of condition here:<br>
<br>
1) condition that is directly under the <<span class="pl-ent">objectSynchronization>
element<br>
2) condition that is under <</span>correlation> element
(which itself is under <<span class="pl-ent">objectSynchronization>
element)<br>
<br>
You think about the case #1. That condition controls whether the
synchronization policy should be applied to a given resource
object (midPoint shadow).<br>
And yes, there something like getAttributeValue(...) ==
'replicated' makes sense.<br>
<br>
But in the sample you refer to, there is the case #2. The
condition relates to <correlation> element, and does
exactly it says it does:<br>
<br>
<i>Following search query will look for users that have
"employeeNumber" equal to the "enumber" attribute of the
account. </i><i><b>The condition will ensure that "enumber"
is not empty, otherwise it would match any midPoint user
with empty "employeeNumber" attribute, such as
"administrator". </b></i><br>
</span>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<br>
(The condition itself refers to <i>ri:employeeNumber</i>
attribute instead of <i>ri:enumber</i>, that's a little mistake
there, but it's perhaps not important for our discussion.)<br>
<br>
So, again. The condition referred to in the sample does not apply
to the whole synchronization policy. It can be seen as a part of
the correlation expression. Therefore, if a an account without
employeeNumber attribute would exist, the correlation rule would
not be applied, so the corresponding owner user will not be found.
But that means that "unmatched" part of the policy would apply! <br>
<br>
Hope this sheds some light to the problem. :)<br>
<br>
Best regards,<br>
Pavol<br>
<br>
On 29. 11. 2014 17:21, Jason Everling wrote:<br>
</div>
<blockquote
cite="mid:CAFkZXY4j0Y5kKBCcCqVN6qcK9NpnQxR_JWAsWW9A+ghvkhEqcw@mail.gmail.com"
type="cite">
<div dir="ltr">Is what I was asking, in the wiki it says you can
add a condition to the synchronization policy, under <a
moz-do-not-send="true"
href="https://wiki.evolveum.com/display/midPoint/Synchronization+Configuration">https://wiki.evolveum.com/display/midPoint/Synchronization+Configuration</a>
<div><br>
</div>
<ul style="margin:10px 0px
0px;color:rgb(51,51,51);font-family:Arial,sans-serif;font-size:14px;line-height:20px">
<li class=""><strong>condition</strong> is an expression which
has to evaluate to true for the policy to be used. It can be
used for a very fine-grain selection of applicable policies.</li>
</ul>
<div><font color="#333333" face="Arial, sans-serif"><span
style="font-size:14px;line-height:20px"><br>
</span></font></div>
<div><font color="#333333" face="Arial, sans-serif"><span
style="font-size:14px;line-height:20px">I found a sample,
kind of here, <a moz-do-not-send="true"
href="https://github.com/Evolveum/midpoint/blob/a6c023945dbea34db69a8ff17c9a61b7184c42cc/testing/consistency-mechanism/src/test/resources/request/resource-modify-synchronization.xml">https://github.com/Evolveum/midpoint/blob/a6c023945dbea34db69a8ff17c9a61b7184c42cc/testing/consistency-mechanism/src/test/resources/request/resource-modify-synchronization.xml</a></span></font></div>
<div><font color="#333333" face="Arial, sans-serif"><span
style="font-size:14px;line-height:20px"><br>
</span></font></div>
<div><font color="#333333" face="Arial, sans-serif"><span
style="font-size:14px;line-height:20px">I am just a little
confused on the condition statement, I was thinking it
would look something like,</span></font></div>
<div><font color="#333333" face="Arial, sans-serif"><span
style="font-size:14px;line-height:20px"><br>
</span></font></div>
<div><font color="#333333" face="Arial, sans-serif"><span
style="font-size:14px;line-height:20px">
<div style=""><condition></div>
<div style=""> <script></div>
<div style=""> <code></div>
<div style=""> declare default namespace "<a
moz-do-not-send="true"
href="http://midpoint.evolveum.com/xml/ns/public/common/common-3">http://midpoint.evolveum.com/xml/ns/public/common/common-3</a>";</div>
<div style=""> basic.getAttributeValue(account, '<a
moz-do-not-send="true"
href="http://midpoint.evolveum.com/xml/ns/public/common/common-3">http://midpoint.evolveum.com/xml/ns/public/common/common-3</a>',
'info') = replicated</div>
<div style=""> </code></div>
<div style=""> </script></div>
<div style=""></condition></div>
</span></font></div>
<div><br>
</div>
<div><br>
</div>
<div>JASON</div>
<div><font color="#333333" face="Arial, sans-serif"><span
style="font-size:14px;line-height:20px"><br>
</span></font></div>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Sat, Nov 29, 2014 at 2:47 AM, Pavol
Mederly <span dir="ltr"><<a moz-do-not-send="true"
href="mailto:mederly@evolveum.com" target="_blank">mederly@evolveum.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
<div>Hello Jason,<br>
<br>
although I don't understand what you would like to
achieve, a quick answer though:<br>
<br>
If you would apply a condition to a mapping (incoming or
outgoing, it does not matter), you can use
<condition> subelement directly under
<incoming> or <outgoing> one.<br>
However, take this only as a quick hint. I haven't done
that, nor I'm sure it's implemented. Please try it.<br>
<br>
Best regards,<br>
Pavol
<div>
<div class="h5"><br>
<br>
On 28. 11. 2014 22:46, Jason Everling wrote:<br>
</div>
</div>
</div>
<blockquote type="cite">
<div>
<div class="h5">
<div dir="ltr">So I have the roleType syncing to the
AD attribute, info, the info or roleType. I want
any group that contains this roleType or info
attribute sync'd, any other s will not be sync'd.
<div><br>
</div>
<div>I know how to do this in objectTemplate but
how in the resource so that it only syncs those
groups and not all groups.</div>
<div><br>
</div>
<div>Where do I put in the condition statement in
the resource definition? I searched through what
I could in the samples but couldn't find
anything like this.</div>
<div><br>
</div>
<div>JASON</div>
</div>
<br>
</div>
</div>
<font><br>
<br>
CONFIDENTIALITY NOTICE:<br>
This e-mail together with any attachments is
proprietary and confidential; intended for only the
recipient(s) named above and may contain information
that is privileged. You should not retain, copy or use
this e-mail or any attachments for any purpose, or
disclose all or any part of the contents to any
person. Any views or opinions expressed in this e-mail
are those of the author and do not represent those of
the Baptist School of Health Professions. If you have
received this e-mail in error, or are not the named
recipient(s), you are hereby notified that any review,
dissemination, distribution or copying of this
communication is prohibited by the sender and to do so
might constitute a violation of the Electronic
Communications Privacy Act, 18 U.S.C. section
2510-2521. Please immediately notify the sender and
delete this e-mail and any attachments from your
computer. </font><br>
<br>
<fieldset></fieldset>
<br>
<pre>_______________________________________________
midPoint mailing list
<a moz-do-not-send="true" href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a>
<a moz-do-not-send="true" href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
</div>
<br>
_______________________________________________<br>
midPoint mailing list<br>
<a moz-do-not-send="true"
href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a><br>
<a moz-do-not-send="true"
href="http://lists.evolveum.com/mailman/listinfo/midpoint"
target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
<br>
</blockquote>
</div>
<br>
</div>
<br>
<font size="2"><br>
<br>
CONFIDENTIALITY NOTICE:<br>
This e-mail together with any attachments is proprietary and
confidential; intended for only the recipient(s) named above and
may contain information that is privileged. You should not
retain, copy or use this e-mail or any attachments for any
purpose, or disclose all or any part of the contents to any
person. Any views or opinions expressed in this e-mail are those
of the author and do not represent those of the Baptist School
of Health Professions. If you have received this e-mail in
error, or are not the named recipient(s), you are hereby
notified that any review, dissemination, distribution or copying
of this communication is prohibited by the sender and to do so
might constitute a violation of the Electronic Communications
Privacy Act, 18 U.S.C. section 2510-2521. Please immediately
notify the sender and delete this e-mail and any attachments
from your computer. </font><br>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
midPoint mailing list
<a class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>
<a class="moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
</body>
</html>