<div dir="ltr">Hi,<div><br></div><div><br></div><div>I want to raise a reconciliation task which will start synchronization. For that I have modified one of my resource (Open Ldap User) with, </div><div><br></div><div><div><synchronization></div><div> <objectSynchronization></div><div> <enabled>true</enabled></div><div> <correlation xmlns:q="<a href="http://prism.evolveum.com/xml/ns/public/query-3" target="_blank">http://prism.evolveum.com/xml/ns/public/query-3</a>"></div><div> <q:description>synchronization example.</q:description></div><div> <q:equal></div><div> <q:path>name</q:path></div><div> <expression></div><div> <c:path xmlns:c="<a href="http://midpoint.evolveum.com/xml/ns/public/common/common-3" target="_blank">http://midpoint.evolveum.com/xml/ns/public/common/common-3</a>"</div><div> xmlns:ri="<a href="http://midpoint.evolveum.com/xml/ns/public/resource/instance-3" target="_blank">http://midpoint.evolveum.com/xml/ns/public/resource/instance-3</a>">declare namespace ri='<a href="http://midpoint.evolveum.com/xml/ns/public/resource/instance-3" target="_blank">http://midpoint.evolveum.com/xml/ns/public/resource/instance-3</a>'; $account/attributes/ri:uid</c:path></div><div> </expression></div><div> </q:equal></div><div> </correlation></div><div> <reaction></div><div> <situation>linked</situation></div><div> <synchronize>true</synchronize></div><div> </reaction></div><div> <reaction></div><div> <situation>deleted</situation></div><div> <synchronize>true</synchronize></div><div> <action></div><div> <handlerUri><a href="http://midpoint.evolveum.com/xml/ns/public/model/action-3#unlink" target="_blank">http://midpoint.evolveum.com/xml/ns/public/model/action-3#unlink</a></handlerUri></div><div> </action></div><div> </reaction></div><div> <reaction></div><div> <situation>unlinked</situation></div><div> <synchronize>true</synchronize></div><div> <action></div><div> <handlerUri><a href="http://midpoint.evolveum.com/xml/ns/public/model/action-3#link" target="_blank">http://midpoint.evolveum.com/xml/ns/public/model/action-3#link</a></handlerUri></div><div> </action></div><div> </reaction> </div><div> </objectSynchronization></div><div> </synchronization></div></div><div><br></div><div><br></div><div>then I selected resource--> open Ldap User -->" import accounts" which raised a task but failed.</div><div><br></div><div><span style="color:rgb(51,51,51);font-family:'Helvetica Neue',Helvetica,Arial,sans-serif;font-size:14px;line-height:18.1818180084229px;background-color:rgb(249,249,249)">Failed to import: com.evolveum.midpoint.util.exception.SchemaException: No name in new object null as produced by template null in iteration 0, we cannot process an object without a name: Failed to import: com.evolveum.midpoint.util.exception.SchemaException: No name in new object null as produced by template null in iteration 0, we cannot process an object without a name</span></div><div><span style="color:rgb(51,51,51);font-family:'Helvetica Neue',Helvetica,Arial,sans-serif;font-size:14px;line-height:18.1818180084229px;background-color:rgb(249,249,249)"><br></span></div><div><span style="color:rgb(51,51,51);font-family:'Helvetica Neue',Helvetica,Arial,sans-serif;font-size:14px;line-height:18.1818180084229px;background-color:rgb(249,249,249)"><br></span></div><div>can you please tell me that where I mistaken or am I following wrong approach.<br></div><div><br></div><div>Thanks,</div><div>Anand</div><img width="0" height="0" class="mailtrack-img" src="https://mailtrack.io/trace/mail/67428d06ca1c012e463417779a75cf32d35cd1cb.png"></div><div class="gmail_extra"><br><div class="gmail_quote">On Tue, Feb 17, 2015 at 2:42 PM, Ivan Noris <span dir="ltr"><<a href="mailto:ivan.noris@evolveum.com" target="_blank">ivan.noris@evolveum.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
Hi Anand,<br>
<br>
correlation/confirmation expression tell midPoint, how to check if
the account in the resource has an owner in midPoint.<br>
<br>
Based on result, synchronization situation is determined (UNMATCHED,
UNLINKED, LINKED etc.) and corresponding action (link, delete, ...)
can be executed.<br>
<br>
These settings are per resource e.g. LDAP resource) and per object
type. In minimum configuration, for default account (kind=account,
intent=default). Different configuration can be specified for
different account types or other objects (e.g. groups).<br>
<br>
The configuration WHEN the synchronization should be performed
differs. It can be:<br>
- opportunistic sync: no tasks; midPoint can detect inconsistencies
while provisioning (i.e. trying to create an account in LDAP, but
the account is already there)<br>
- livesync: livesync task running; midPoint can detect
inconsistencies in real time (if the resource supports it; i.e.
OpenDJ or Oracle DSEE have changelog plugin which can be used).
Livesync task detects CHANGES in the resource accounts.<br>
- reconciliation: reconciliation task running; midPoint can detect
inconsistencies in scheduled times. Reconciliation task processes
ALL resource objects, not only changes.<br>
<br>
All or our resource samples with "-sync" in the filename should be
configured for livesync synchronization and they should also include
the task.<br>
<br>
Regards,<br>
I.<div><div class="h5"><br>
<br>
<div>On 02/17/2015 07:50 AM, Anand Kothekar
wrote:<br>
</div>
</div></div><blockquote type="cite"><div><div class="h5">
<div dir="ltr">Hi,
<div><br>
</div>
<div>I was working on Synchronization where I have a requirement
to keep data in resource and midpoint repository synchronized.</div>
<div><br>
</div>
<div>like If any account exists on ldap then it should be linked
with the user matching with the uid of user in midpoint.</div>
<div><br>
</div>
<div>I have gone through the concept of correlation and
confirmation expression but I am not clear with the proper
approach to follow.</div>
<div><br>
</div>
<div>please le me know how to achieve this and also mention any
sample example for it.<br>
</div>
<div><br>
</div>
<div><br>
</div>
<div><br>
</div>
<div>Thanks,</div>
<div>Anand</div>
<img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" height="0" width="0"></div>
<br>
<fieldset></fieldset>
<br>
</div></div><pre>_______________________________________________
midPoint mailing list
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><span class="HOEnZb"><font color="#888888">
</font></span></pre><span class="HOEnZb"><font color="#888888">
</font></span></blockquote><span class="HOEnZb"><font color="#888888">
<br>
<pre cols="72">--
Ing. Ivan Noris
Senior Identity Management Engineer & IDM Architect
<a href="http://evolveum.com" target="_blank">evolveum.com</a> <a href="http://evolveum.com/blog/" target="_blank">evolveum.com/blog/</a>
___________________________________________________
"Semper Id(e)M Vix."
</pre>
</font></span></div>
<br>_______________________________________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
<br></blockquote></div><br></div>