<div dir="ltr">Ok I must have missed that one, I removed the condition and source with <div><br></div><div><div> <mapping></div><div> <span class="" style="white-space:pre"> </span><expression></div><div> <value></div><div><span class="" style="white-space:pre"> </span><targetRef oid="30000000-aaaa-bbbb-0000-12345678sr01" type="c:RoleType"/></div><div> </value> <span class="" style="white-space:pre"> </span></div><div> <span class="" style="white-space:pre"> </span></expression></div><div> <target></div><div> <path>assignment</path></div><div> </target></div><div> </mapping></div></div><div><br></div><div>I was hoping that it would work but It still does not add the account to AD though :( , still a lot of nulls in the logs, I attached the new logs again for a new user</div><div><br></div><div>Isabel Trevino, istrevino</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Fri, Feb 20, 2015 at 1:25 AM, Pavol Mederly <span dir="ltr"><<a href="mailto:mederly@evolveum.com" target="_blank">mederly@evolveum.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
<div>Hello Jason,<br>
<br>
after studying the logs I suspect that the problem is being caused
by chaining of mappings in the object template "User Template 3".
The related issue is <a href="https://jira.evolveum.com/browse/MID-2149" target="_blank">https://jira.evolveum.com/browse/MID-2149</a>.
(I know that you've eliminated the majority of chainings -> but
this one seems to be left there).<br>
<br>
See the red-colored parts below. <br>
<br>
<objectTemplate
xmlns=<a href="http://midpoint.evolveum.com/xml/ns/public/common/common-3" target="_blank">"http://midpoint.evolveum.com/xml/ns/public/common/common-3"</a><br>
oid="10000000-0000-0000-0000-000000000203"<br>
version="0"><br>
<name>User Template 3</name><br>
...<br>
<mapping><br>
<source><br>
<c:path
xmlns:c=<a href="http://midpoint.evolveum.com/xml/ns/public/common/common-3" target="_blank">"http://midpoint.evolveum.com/xml/ns/public/common/common-3"</a><br>
xmlns:bshp=<a href="http://www.bshp.edu/xml/ns/public/bshp" target="_blank">"http://www.bshp.edu/xml/ns/public/bshp"</a>>declare
namespace bshp='<a href="http://www.bshp.edu/xml/ns/public/bshp" target="_blank">http://www.bshp.edu/xml/ns/public/bshp</a>';
$c:user/c:extension/bshp:eduPersonAffiliation</c:path><br>
</source><br>
<expression><br>
<script><br>
<code>'student'</code><br>
</script><br>
</expression><br>
<<font color="#cc0000"><b>target</b></font>><br>
<c:path
xmlns:c=<a href="http://midpoint.evolveum.com/xml/ns/public/common/common-3" target="_blank">"http://midpoint.evolveum.com/xml/ns/public/common/common-3"</a><br>
xmlns:bshp=<a href="http://www.bshp.edu/xml/ns/public/bshp" target="_blank">"http://www.bshp.edu/xml/ns/public/bshp"</a>>declare
namespace bshp='<a href="http://www.bshp.edu/xml/ns/public/bshp" target="_blank">http://www.bshp.edu/xml/ns/public/bshp</a>'; <font color="#cc0000"><b>$c:user/c:extension/bshp:eduPersonAffiliation</b></font></c:path><br>
</target><br>
</mapping><br>
<br>
<font color="#cc0000"><b> -----></b><b><br>
</b></font><br>
<mapping><br>
<<font color="#cc0000"><b>source</b></font>><br>
<c:path
xmlns:c=<a href="http://midpoint.evolveum.com/xml/ns/public/common/common-3" target="_blank">"http://midpoint.evolveum.com/xml/ns/public/common/common-3"</a><br>
xmlns:bshp=<a href="http://www.bshp.edu/xml/ns/public/bshp" target="_blank">"http://www.bshp.edu/xml/ns/public/bshp"</a>>declare
namespace bshp='<a href="http://www.bshp.edu/xml/ns/public/bshp" target="_blank">http://www.bshp.edu/xml/ns/public/bshp</a>'; <b><font color="#cc0000">$c:user/c:extension/bshp:eduPersonAffiliation</font></b></c:path><br>
</source><br>
<expression><br>
<assignmentTargetSearch><br>
<targetType
xmlns:c=<a href="http://midpoint.evolveum.com/xml/ns/public/common/common-3" target="_blank">"http://midpoint.evolveum.com/xml/ns/public/common/common-3"</a>>c:RoleType</targetType><br>
<oid>30000000-aaaa-bbbb-0000-12345678sr01</oid><br>
</assignmentTargetSearch><br>
</expression><br>
<target><br>
<c:path
xmlns:c=<a href="http://midpoint.evolveum.com/xml/ns/public/common/common-3" target="_blank">"http://midpoint.evolveum.com/xml/ns/public/common/common-3"</a>>assignment</c:path><br>
</target><br>
</mapping><br>
</objectTemplate><br>
<br>
In the log you can see that this result of an empty assignment of
the role that should give access to the AD:<br>
<br>
2015-02-19 11:06:47,040 [] [midPointScheduler_Worker-10] TRACE
(com.evolveum.midpoint.model.common.mapping.Mapping): Mapping
trace:<br>
---[ MAPPING in
objectTemplate:10000000-0000-0000-0000-000000000203(User Template
3)]---------------------------<br>
Source:
{<a href="http://www.bshp.edu/xml/ns/public/bshp" target="_blank">http://www.bshp.edu/xml/ns/public/bshp</a>}eduPersonAffiliation: <font color="#cc0000"><b>old=null, delta=null, new=null</b></font><br>
Target: PCD:{.../common/common-3}assignment
{.../common/common-3}AssignmentType[0,-1],RAM<br>
Expression: assignmentExpression<br>
Condition: true -> true<br>
Result: <b><font color="#cc0000">[here should be an assignment
but there's nothing there because the input is 'null' (not the
'student' as one could expect) - this is because of chaining]</font></b><br>
<br>
Actually, in a later iteration (in the secondary phase of the
clockwork processing), the assignment is computed - but it is
actually too late (just before exiting the processing) - so it is
not executed. I mean this one:<br>
<br>
---[ MAPPING in
objectTemplate:10000000-0000-0000-0000-000000000203(User Template
3)]---------------------------<br>
Source:
{<a href="http://www.bshp.edu/xml/ns/public/bshp" target="_blank">http://www.bshp.edu/xml/ns/public/bshp</a>}eduPersonAffiliation: <font color="#006600"><b>old=null, delta=PropertyDelta(extension /
{<a href="http://www.bshp.edu/xml/ns/public/bshp" target="_blank">http://www.bshp.edu/xml/ns/public/bshp</a>}eduPersonAffiliation,
ADD),
new=PP({<a href="http://www.bshp.edu/xml/ns/public/bshp" target="_blank">http://www.bshp.edu/xml/ns/public/bshp</a>}eduPersonAffiliation):[PPV(String:student)]</b></font><br>
Target: PCD:{.../common/common-3}assignment
{.../common/common-3}AssignmentType[0,-1],RAM<br>
Expression: assignmentExpression<br>
Condition: true -> true<br>
Result: <font color="#006600"><b>added: id=null: 1 items </b></font><br>
<br>
So, my recommendation is to remove the chaining. <br>
<br>
Hope this helps. :-)<br>
Pavol<br>
<br>
On 19. 2. 2015 15:33, Jason Everling wrote:<br>
</div>
<blockquote type="cite">
<div dir="ltr">Here is the details,
<div><br>
</div>
<div>1 CSV Resource</div>
<div>1 AD Resource</div>
<div>1 Role with inducement for AD Account</div>
<div>1 Object Template for CSV which generates the Username and
assigns the role with the AD Incudement.</div>
<div><br>
</div>
<div>I will send the exports via private email</div>
<div><br>
</div>
<div>JASON</div>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Thu, Feb 19, 2015 at 6:01 AM, Pavol
Mederly <span dir="ltr"><<a href="mailto:mederly@evolveum.com" target="_blank">mederly@evolveum.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
<div>Hello Jason,<br>
<br>
I would like to test this one, but I'm not sure about
concrete configuration in which this occurs.<br>
<br>
Could you, please, describe the situation in more
details, including your specific configurations
(simplified if necessary), to allow us to reproduce this
bug?<br>
<br>
Thank you,<br>
Pavol<br>
<br>
On 17. 2. 2015 16:58, Jason Everling wrote:<br>
</div>
<blockquote type="cite">
<div dir="ltr">
<div>Reviving an old bug, this is happening again,
using 3.1 Release, all my other issues are gone.<br>
</div>
<div><br>
</div>
<div>I can manually click the user in midPoint and run
reconcile and it works or if I take the inducement
out of the Role and put it as a direct assignment in
the object template the account gets created
properly in AD. Again, this only happens when
generating the username</div>
<div><br>
</div>
<div>Is there a way to maybe run a reconcile after all
the processes complete, lets say after the user is
created and the object templates are processed? If
so then this would more than likely work, I just
think it is processing the inducement before the
user account in midpoint is full created will all
attributes.</div>
<div><br>
</div>
<div>JASON</div>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Fri, Dec 5, 2014 at 9:13
AM, Jason Everling <span dir="ltr"><<a href="mailto:jeverling@bshp.edu" target="_blank">jeverling@bshp.edu</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span>
<div dir="ltr">Ok thanks for the update!
<div><br>
</div>
<div>JASON</div>
</div>
</span>
<div>
<div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Fri, Dec 5, 2014
at 2:10 AM, Ivan Noris <span dir="ltr"><<a href="mailto:ivan.noris@evolveum.com" target="_blank">ivan.noris@evolveum.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
Jason,<br>
<br>
I've just tried the original iterator
(User in midPoint) problem and it
seems to be fixed in
git-v3.0.1devel-703-g8c40b63.<br>
<br>
I've tested with LiveSync CSV sample
from you, used user template either
referenced from the unmatched action
or global template. Username is
generated in midPoint:<br>
<br>
(username - fullname)<br>
cypecienka - Cyrus Pecienka<br>
cypecienka2 - Cyrusov Pecienka<br>
cypecienka3 - Cyril Pecienka <br>
cypecienka4 - Cyrhoza Pecienka<br>
<br>
Please retest it once after you
upgrade to 3.1 or the master snapshot.
Thank you.<br>
<br>
Regards,<br>
Ivan
<div>
<div><br>
<br>
<div>On 11/07/2014 04:23 PM, Jason
Everling wrote:<br>
</div>
<blockquote type="cite">
<div dir="ltr">Thanks, it is
working, like you said, will
be easier to manage in the
long run! Keep me posted on
the bug fix,
<div><br>
</div>
<div>For now, I am just
cleaning up objects and
playing with other
functions,</div>
<div><br>
</div>
<div>JASON</div>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On
Fri, Nov 7, 2014 at 2:56 AM,
Ivan Noris <span dir="ltr"><<a href="mailto:Ivan.Noris@evolveum.com" target="_blank">Ivan.Noris@evolveum.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div>
<div style="font-family:times new roman,new york,times,serif;font-size:12pt;color:#000000">
<div>Hi Jason,<br>
</div>
<div><br>
</div>
<div>yes you can use
switch in one
mapping instead of
having many mappings
- I'm using it very
often. It will be
more simple to
maintain.<br>
</div>
<div><br>
</div>
<div>Just be sure to
pass all required
attributes as
source. In your
case, organization
does not have to be
source attribute,
because you are not
referencing it in
the mapping
expression<br>
nor conditions.<br>
</div>
<div><br>
</div>
<div>You can further
simplify the switch
statement as:<br>
</div>
<div><br>
</div>
<div>switch (<strong>costCenter</strong>)
{</div>
<div>. . .<br>
</div>
<div><br>
</div>
<div>- no
basic.stringify() is
needed, because the
attribute type is
String and not
Polystring. Having
it there would not
do any harm though.<br>
</div>
<div>- you can address
the attribute as
"costCenter",
because it's
implicitly stored in
that "variable" as
it is declared as
source attribute<br>
</div>
<div><br>
</div>
<div>Hope this helps
you with designing
your mappings.<br>
</div>
<div><br>
</div>
<div>Regards,<br>
</div>
<div>Ivan<br>
</div>
<div><br>
</div>
<hr>
<blockquote style="border-left:2px solid #1010ff;margin-left:5px;padding-left:5px;color:#000;font-weight:normal;font-style:normal;text-decoration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt"><span><b>From:
</b>"Jason
Everling" <<a href="mailto:jeverling@bshp.edu" target="_blank">jeverling@bshp.edu</a>><br>
<b>To: </b>"midPoint
General
Discussion" <<a href="mailto:midpoint@lists.evolveum.com" target="_blank">midpoint@lists.evolveum.com</a>><br>
</span><b>Sent: </b>Thursday,
November 6, 2014
6:00:04 PM
<div>
<div><br>
<b>Subject: </b>Re:
[midPoint]
Account
Creation, Not
Being created in
AD<br>
<div><br>
</div>
<div dir="ltr">Oh
Ok thanks,
<div><br>
</div>
<div>Can you
look at this
and make sure
it is correct,
if you look at
the CSV User
template I had
sent I had a
condition for
each program,
I did some
more digging
on github and
found a sample
similar to
this,</div>
<div><br>
</div>
<div>Would the
below work
instead of all
the conditions
for mapping, </div>
<div><br>
</div>
<div>
<div><span style="white-space:pre-wrap">
</span><mapping></div>
<div><span style="white-space:pre-wrap">
</span><source></div>
<div><span style="white-space:pre-wrap">
</span><path>$user/costCenter</path></div>
<div><span style="white-space:pre-wrap">
</span></source></div>
<div><span style="white-space:pre-wrap">
</span><source></div>
<div><span style="white-space:pre-wrap">
</span><path>$user/organization</path></div>
<div><span style="white-space:pre-wrap">
</span></source></div>
<div> <span style="white-space:pre-wrap"> </span> <expression></div>
<div><span style="white-space:pre-wrap">
</span>
<script></div>
<div>
<code></div>
<div><span style="white-space:pre-wrap">
</span>tmpOU =
'OU=SHP
Students,DC=TEST,DC=LOCAL'</div>
<div><span style="white-space:pre-wrap">
</span>switch
(basic.stringify(user.getCostCenter()))
{</div>
<div><span style="white-space:pre-wrap">
</span>case
'ASGA':</div>
<div><span style="white-space:pre-wrap">
</span>tmpOU =
'OU=AAD,' +
tmpOU</div>
<div><span style="white-space:pre-wrap">
</span>break</div>
<div><span style="white-space:pre-wrap">
</span>case
'AAD':</div>
<div><span style="white-space:pre-wrap">
</span>tmpOU =
'OU=AAD,' +
tmpOU</div>
<div><span style="white-space:pre-wrap">
</span>break</div>
<div><span style="white-space:pre-wrap">
</span>case
'ASHIT':</div>
<div><span style="white-space:pre-wrap">
</span>tmpOU =
'OU=AAS HIT,'
+ tmpOU</div>
<div><span style="white-space:pre-wrap">
</span>break</div>
<div><span style="white-space:pre-wrap">
</span>case
'BSHM':</div>
<div><span style="white-space:pre-wrap">
</span>tmpOU =
'OU=BSHM,' +
tmpOU</div>
<div><span style="white-space:pre-wrap">
</span>break</div>
<div><span style="white-space:pre-wrap">
</span>case
'BSN':</div>
<div><span style="white-space:pre-wrap">
</span>tmpOU =
'OU=BSN,' +
tmpOU</div>
<div><span style="white-space:pre-wrap">
</span>break</div>
<div><span style="white-space:pre-wrap">
</span>case
'ASIM':</div>
<div><span style="white-space:pre-wrap">
</span>tmpOU =
'OU=DMIT,' +
tmpOU</div>
<div><span style="white-space:pre-wrap">
</span>break</div>
<div><span style="white-space:pre-wrap">
</span>case
'CT':</div>
<div><span style="white-space:pre-wrap">
</span>tmpOU =
'OU=DMIT,' +
tmpOU</div>
<div><span style="white-space:pre-wrap">
</span>break</div>
<div><span style="white-space:pre-wrap">
</span>case
'MRI':</div>
<div><span style="white-space:pre-wrap">
</span>tmpOU =
'OU=DMIT,' +
tmpOU</div>
<div><span style="white-space:pre-wrap">
</span>break</div>
<div><span style="white-space:pre-wrap">
</span>case
'RT':</div>
<div><span style="white-space:pre-wrap">
</span>tmpOU =
'OU=DMIT,' +
tmpOU</div>
<div><span style="white-space:pre-wrap">
</span>break</div>
<div><span style="white-space:pre-wrap">
</span>case
'VT':</div>
<div><span style="white-space:pre-wrap">
</span>tmpOU =
'OU=DMIT,' +
tmpOU</div>
<div><span style="white-space:pre-wrap">
</span>break</div>
<div><span style="white-space:pre-wrap">
</span>case
'SO':</div>
<div><span style="white-space:pre-wrap">
</span>tmpOU =
'OU=DMIT,' +
tmpOU</div>
<div><span style="white-space:pre-wrap">
</span>break</div>
<div><span style="white-space:pre-wrap">
</span>case
'PN':</div>
<div><span style="white-space:pre-wrap">
</span>tmpOU =
'OU=DPN,' +
tmpOU</div>
<div><span style="white-space:pre-wrap">
</span>break</div>
<div><span style="white-space:pre-wrap">
</span>case
'ND':</div>
<div><span style="white-space:pre-wrap">
</span>tmpOU =
'OU=DPN,' +
tmpOU</div>
<div><span style="white-space:pre-wrap">
</span>break</div>
<div><span style="white-space:pre-wrap">
</span>case
'ASGT':</div>
<div><span style="white-space:pre-wrap">
</span>tmpOU =
'OU=DST,' +
tmpOU</div>
<div><span style="white-space:pre-wrap">
</span>break</div>
<div><span style="white-space:pre-wrap">
</span>case
'ST':</div>
<div><span style="white-space:pre-wrap">
</span>tmpOU =
'OU=DST,' +
tmpOU</div>
<div><span style="white-space:pre-wrap">
</span>break</div>
<div><span style="white-space:pre-wrap">
</span>case
'VN':</div>
<div><span style="white-space:pre-wrap">
</span>tmpOU =
'OU=DVN,' +
tmpOU</div>
<div><span style="white-space:pre-wrap">
</span>break</div>
<div><span style="white-space:pre-wrap">
</span>case
'GEN':</div>
<div><span style="white-space:pre-wrap">
</span>tmpOU =
'OU=GENED,' +
tmpOU</div>
<div><span style="white-space:pre-wrap">
</span>break</div>
<div><span style="white-space:pre-wrap">
</span>case
'LVRN':</div>
<div><span style="white-space:pre-wrap">
</span>tmpOU =
'OU=LVRN,' +
tmpOU</div>
<div><span style="white-space:pre-wrap">
</span>break</div>
<div><span style="white-space:pre-wrap">
</span>case
'PO':</div>
<div><span style="white-space:pre-wrap">
</span>tmpOU =
'OU=PNP,' +
tmpOU</div>
<div><span style="white-space:pre-wrap">
</span>break</div>
<div><span style="white-space:pre-wrap">
</span>default:</div>
<div><span style="white-space:pre-wrap">
</span>tmpOU =
'OU=SHP
Students,DC=TEST,DC=LOCAL'</div>
<div><span style="white-space:pre-wrap">
</span>}</div>
<div><span style="white-space:pre-wrap">
</span>return
tmpOU</div>
<div>
</code></div>
<div>
</script></div>
<div> <span style="white-space:pre-wrap"> </span> </expression></div>
<div> <span style="white-space:pre-wrap"> </span><target></div>
<div> <span style="white-space:pre-wrap"> </span><path>organization</path></div>
<div> <span style="white-space:pre-wrap"> </span></target></div>
<div><span style="white-space:pre-wrap">
</span></mapping></div>
</div>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On
Thu, Nov 6,
2014 at 10:36
AM, Ivan Noris
<span dir="ltr"><<a href="mailto:ivan.noris@evolveum.com" target="_blank">ivan.noris@evolveum.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div> Hi
Jason,<br>
<br>
it seems
you've hit a
bug. I've
replicated it
on midPoint
master.<br>
<br>
The issue is
now being
investigated
by our
developers in
order to fix
it. I will
drop a message
to the list
when it's
resolved.<br>
<br>
Regards,<br>
Ivan
<div>
<div><br>
<br>
<div>On
11/05/2014
03:13 PM,
Jason Everling
wrote:<br>
</div>
<blockquote>
<div dir="ltr">So
the role that
gets assigned
is nothing
special, I
just created a
new role in
the GUI and
added the
inducement for
AD Resource.
Eventually I
will change
the
permissions on
the roles to
match what
they need to
be in
production.
<div><br>
</div>
<div>I
attached the
AD Resource
and AD User
Template,</div>
<div><br>
</div>
<div>JASON</div>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On
Wed, Nov 5,
2014 at 3:17
AM, Ivan Noris
<span dir="ltr"><<a href="mailto:Ivan.Noris@evolveum.com" target="_blank">Ivan.Noris@evolveum.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div>
<div style="font-family:times new roman,new york,times,serif;font-size:12pt;color:#000000">
<div>Hi Jason,<br>
</div>
<div><br>
</div>
<div>yes I
think it's
somehow
depending on
the fact that
you are
generating
username.<br>
</div>
<div><br>
</div>
<div>Can you
please share
details how AD
accounts are
constructed
from the
midpoint's
username? What
attributes are
depending on
user/name? DN?
sAMAccountName?
... ?<br>
</div>
<div>Also,
could you send
the role
definition? I
have some
conditional
roles that are
assigned to
user, but
don't do
anything if
the condition
is false.
Which
resembles your
situation...<br>
</div>
<div><br>
</div>
<div>BTW it's
really strange
for me so far.
I'd expect at
least some
exception...<br>
</div>
<div><br>
</div>
<div>Thanks,<br>
</div>
<div>regards,<br>
</div>
<div>Ivan<br>
</div>
<div><br>
</div>
<hr>
<blockquote style="border-left:2px solid #1010ff;margin-left:5px;padding-left:5px;color:#000;font-weight:normal;font-style:normal;text-decoration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt"><span><b>From:
</b>"Jason
Everling" <<a href="mailto:jeverling@bshp.edu" target="_blank">jeverling@bshp.edu</a>><br>
<b>To: </b>"midPoint
General
Discussion"
<<a href="mailto:midpoint@lists.evolveum.com" target="_blank">midpoint@lists.evolveum.com</a>><br>
</span><b>Sent:
</b>Tuesday,
November 4,
2014 5:19:31
PM<br>
<b>Subject: </b>Re:
[midPoint]
Account
Creation, Not
Being created
in AD
<div>
<div><br>
<div><br>
</div>
<div dir="ltr">So
yes, those are
from today but
instead of
digging
through to
yesterday I
just added a
new line to
the CSV feed,
so new
firstname,lastname,
employeeID so
that it would
create a new
account.
<div><br>
</div>
<div>I
actually added
3 new lines to
the CSV and
all 3 get
created in
Midpoint, Role
Assigned with
AD inducement,
and Org
Assigned, the
AD account
never gets
created though
until I modify
the account in
Midpoint.</div>
<div><br>
</div>
<div>That is
the only log
entry I get
when the CSV
feed is
updated and
new account is
created in
Midpoint,</div>
<div><br>
</div>
<div>Using
Midpoint 3.0</div>
<div><br>
</div>
<div>
<div>
<div>
<table>
<tbody>
<tr>
<td>Version</td>
<td>3.0</td>
</tr>
<tr>
<td>Git
describe</td>
<td>git-v3.0</td>
</tr>
</tbody>
</table>
<br>
</div>
<div>If I
remove the
username
generation and
add a username
attribute to
the CSV feed
it works as
expected, this
is just when
generating the
username, is
it maybe
because the
role is
getting
assigned
before
Midpoint has
time to
generate the
username and
such?</div>
<div><br>
</div>
<div>Jason</div>
</div>
</div>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On
Tue, Nov 4,
2014 at 9:57
AM, Ivan Noris
<span dir="ltr"><<a href="mailto:ivan.noris@evolveum.com" target="_blank">ivan.noris@evolveum.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div> Hi
Jason,<br>
<br>
just to be
sure: these
error messages
have timestamp
from today;
but you've
reported your
problem to the
list
yesterday.<br>
<br>
Could you
please:<br>
<br>
1) double
check that the
log is the
correct one /
or find the
(supposed)
error messages
in previously
rotated log
(stored in the
same directory
as idm.log,
but the name
derived from
the date..)<br>
2) replicate
the issue and
send current
idm.log
fragment<br>
<br>
The messages
referenced
here are ok =
we don't see
anything yet.<br>
<br>
Also please,
what version
of midPoint
are you
using..?<br>
<br>
Thanks,<br>
regards,<br>
Ivan
<div>
<div><br>
<br>
<div>On
11/04/2014
03:25 PM,
Jason Everling
wrote:<br>
</div>
<blockquote>
<div dir="ltr">I
added a new
line to the
CSV so it
could create a
new user, it
gets created
in Midpoint
and the role
and org
assigned, the
only item in
the log that
stands out is,
<div><br>
</div>
<div>2014-11-04
08:22:11,914
[PROVISIONING]
[midPointScheduler_Worker-2]
WARN
(com.evolveum.midpoint.provisioning.impl.ResourceObjectConverter):
The resource:
SonisWeb-Generate
(OID:af2bc95b-76e0-48e2-86d6-3d4f02d3fafa)
does not
provide
definition for
null value of
simulated
activation
attribute<br>
</div>
<div><br>
</div>
<div>There is
no other
errors besides
that,</div>
<div><br>
</div>
<div>
<div>2014-11-04
08:09:00,859
[REPOSITORY]
[midPointScheduler_Worker-6]
INFO
(org.hibernate.engine.jdbc.batch.internal.AbstractBatchImpl):
HHH000010: On
release of
batch it still
contained JDBC
statements</div>
<div>2014-11-04
08:09:29,824
[REPOSITORY]
[midPointScheduler_Worker-3]
INFO
(org.hibernate.engine.jdbc.batch.internal.AbstractBatchImpl):
HHH000010: On
release of
batch it still
contained JDBC
statements</div>
<div>2014-11-04
08:12:20,134
[REPOSITORY]
[midPointScheduler_Worker-3]
INFO
(org.hibernate.engine.jdbc.batch.internal.AbstractBatchImpl):
HHH000010: On
release of
batch it still
contained JDBC
statements</div>
<div>2014-11-04
08:12:20,247
[REPOSITORY]
[midPointScheduler_Worker-9]
INFO
(org.hibernate.engine.jdbc.batch.internal.AbstractBatchImpl):
HHH000010: On
release of
batch it still
contained JDBC
statements</div>
<div>2014-11-04
08:14:00,397
[REPOSITORY]
[midPointScheduler_Worker-9]
INFO
(org.hibernate.engine.jdbc.batch.internal.AbstractBatchImpl):
HHH000010: On
release of
batch it still
contained JDBC
statements</div>
<div>2014-11-04
08:22:00,465
[REPOSITORY]
[midPointScheduler_Worker-3]
INFO
(org.hibernate.engine.jdbc.batch.internal.AbstractBatchImpl):
HHH000010: On
release of
batch it still
contained JDBC
statements</div>
<div>2014-11-04
08:22:06,150
[REPOSITORY]
[midPointScheduler_Worker-2]
INFO
(org.hibernate.engine.jdbc.batch.internal.AbstractBatchImpl):
HHH000010: On
release of
batch it still
contained JDBC
statements</div>
<div>2014-11-04
08:22:06,271
[REPOSITORY]
[midPointScheduler_Worker-2]
INFO
(org.hibernate.engine.jdbc.batch.internal.AbstractBatchImpl):
HHH000010: On
release of
batch it still
contained JDBC
statements</div>
<div>2014-11-04
08:22:11,914
[PROVISIONING]
[midPointScheduler_Worker-2]
WARN
(com.evolveum.midpoint.provisioning.impl.ResourceObjectConverter):
The resource:
SonisWeb-Generate
(OID:af2bc95b-76e0-48e2-86d6-3d4f02d3fafa)
does not
provide
definition for
null value of
simulated
activation
attribute</div>
</div>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On
Tue, Nov 4,
2014 at 1:17
AM, Ivan Noris
<span dir="ltr"><<a href="mailto:Ivan.Noris@evolveum.com" target="_blank">Ivan.Noris@evolveum.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div>
<div style="font-family:times new roman,new york,times,serif;font-size:12pt;color:#000000">
<div>Jason,<br>
</div>
<div><br>
</div>
<div>could you
please check
error messages
from idm.log
from the time
of the
supposed
creation?<br>
</div>
<div><br>
</div>
<div>Thanks,<br>
</div>
<div>Ivan<br>
</div>
<div><br>
</div>
<hr>
<blockquote style="border-left:2px solid #1010ff;margin-left:5px;padding-left:5px;color:#000;font-weight:normal;font-style:normal;text-decoration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt"><b>From:
</b>"Jason
Everling" <<a href="mailto:jeverling@bshp.edu" target="_blank">jeverling@bshp.edu</a>><br>
<b>To: </b>"midPoint
General
Discussion"
<<a href="mailto:midpoint@lists.evolveum.com" target="_blank">midpoint@lists.evolveum.com</a>><br>
<b>Sent: </b>Monday,
November 3,
2014 11:50:06
PM<br>
<b>Subject: </b>[midPoint]
Account
Creation, Not
Being created
in AD
<div>
<div><br>
<div><br>
</div>
<div dir="ltr">So
my director
wanted to see
it fully
automated so
all I
basically had
to do was
modify the CSV
resource to
generate the
usernames and
email
addresses,
done, this
works.
<div><br>
</div>
<div>The
account gets
created in
Midpoint from
the CSV, gets
an Org
assigned and
gets a Role
assigned. The
role has an
inducement for
active
directory but
even though
the account
gets the role
assigned an
account in AD
does not get
created. Now
if I modify
the user in
midpoint, lets
say just
change a
letter in the
personal email
address field
the AD account
creation kicks
off.</div>
<div><br>
</div>
<div>I cannot
seem to figure
out why the AD
account does
not get
created even
though it gets
the role
assigned and
before I
changed it to
create the
usernames it
was creating
those accounts
in AD.</div>
<div><br>
</div>
<div>I
attached the
CSV Resource
and the CSV
Template that
is being used,</div>
<div><br>
</div>
<div>Thanks,</div>
<div>JASON</div>
<div><br>
</div>
<div><br>
</div>
</div>
<br>
<span style="font-size:small"><span style="font-size:small"><br>
</span></span>
<div><br>
</div>
</div>
</div>
<span style="font-size:small">CONFIDENTIALITY
NOTICE:<br>
This e-mail
together with
any
attachments is
proprietary
and
confidential;
intended for
only the
recipient(s)
named above
and may
contain
information
that is
privileged.
You should not
retain, copy
or use this
e-mail or any
attachments
for any
purpose, or
disclose all
or any part of
the contents
to any person.
Any views or
opinions
expressed in
this e-mail
are those of
the author and
do not
represent
those of the
Baptist School
of Health
Professions.
If you have
received this
e-mail in
error, or are
not the named
recipient(s),
you are hereby
notified that
any review,
dissemination,
distribution
or copying of
this
communication
is prohibited
by the sender
and to do so
might
constitute a
violation of
the Electronic
Communications
Privacy Act,
18 U.S.C.
section
2510-2521.
Please
immediately
notify the
sender and
delete this
e-mail and any
attachments
from your
computer. </span><br>
<div><br>
</div>
_______________________________________________<br>
midPoint
mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><span><span style="color:#888888"><br>
</span></span></blockquote>
<span><span style="color:#888888">
<div><br>
<br>
</div>
<div><br>
</div>
<div>-- <br>
</div>
<div><span></span> Ing.
Ivan Noris<br>
Senior
Identity
Management
Engineer<br>
<a href="http://evolveum.com" target="_blank">evolveum.com</a><br>
___________________________________________<br>
"Idem per idem
- semper idem
Vix."<span></span><br>
</div>
</span></span></div>
</div>
<br>
_______________________________________________<br>
midPoint
mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
<br>
</blockquote>
</div>
<br>
</div>
<br>
<span><br>
<br>
CONFIDENTIALITY
NOTICE:<br>
This e-mail
together with
any
attachments is
proprietary
and
confidential;
intended for
only the
recipient(s)
named above
and may
contain
information
that is
privileged.
You should not
retain, copy
or use this
e-mail or any
attachments
for any
purpose, or
disclose all
or any part of
the contents
to any person.
Any views or
opinions
expressed in
this e-mail
are those of
the author and
do not
represent
those of the
Baptist School
of Health
Professions.
If you have
received this
e-mail in
error, or are
not the named
recipient(s),
you are hereby
notified that
any review,
dissemination,
distribution
or copying of
this
communication
is prohibited
by the sender
and to do so
might
constitute a
violation of
the Electronic
Communications
Privacy Act,
18 U.S.C.
section
2510-2521.
Please
immediately
notify the
sender and
delete this
e-mail and any
attachments
from your
computer. </span><br>
<br>
<fieldset></fieldset>
<br>
<pre>_______________________________________________
midPoint mailing list
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
<pre>--
Ing. Ivan Noris
Senior Identity Management Engineer
<a href="http://evolveum.com" target="_blank">evolveum.com</a>
___________________________________________
"Idem per idem - semper idem Vix."
</pre>
</div>
</div>
</div>
<br>
_______________________________________________<br>
midPoint
mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
<br>
</blockquote>
</div>
<br>
</div>
<br>
<span style="font-size:small"><br>
<div><br>
</div>
CONFIDENTIALITY
NOTICE:<br>
This e-mail
together with
any
attachments is
proprietary
and
confidential;
intended for
only the
recipient(s)
named above
and may
contain
information
that is
privileged.
You should not
retain, copy
or use this
e-mail or any
attachments
for any
purpose, or
disclose all
or any part of
the contents
to any person.
Any views or
opinions
expressed in
this e-mail
are those of
the author and
do not
represent
those of the
Baptist School
of Health
Professions.
If you have
received this
e-mail in
error, or are
not the named
recipient(s),
you are hereby
notified that
any review,
dissemination,
distribution
or copying of
this
communication
is prohibited
by the sender
and to do so
might
constitute a
violation of
the Electronic
Communications
Privacy Act,
18 U.S.C.
section
2510-2521.
Please
immediately
notify the
sender and
delete this
e-mail and any
attachments
from your
computer. </span><br>
<div><br>
</div>
_______________________________________________<br>
midPoint
mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
</div>
</div>
</blockquote>
<div>
<div>
<div><br>
<br>
</div>
<div><br>
</div>
<div>-- <br>
</div>
<div><span></span> Ing.
Ivan Noris<br>
Senior
Identity
Management
Engineer<br>
<a href="http://evolveum.com" target="_blank">evolveum.com</a><br>
___________________________________________<br>
"Idem per idem
- semper idem
Vix."<span></span><br>
</div>
</div>
</div>
</div>
</div>
<br>
_______________________________________________<br>
midPoint
mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
<br>
</blockquote>
</div>
<br>
</div>
<br>
<span><br>
<br>
CONFIDENTIALITY
NOTICE:<br>
This e-mail
together with
any
attachments is
proprietary
and
confidential;
intended for
only the
recipient(s)
named above
and may
contain
information
that is
privileged.
You should not
retain, copy
or use this
e-mail or any
attachments
for any
purpose, or
disclose all
or any part of
the contents
to any person.
Any views or
opinions
expressed in
this e-mail
are those of
the author and
do not
represent
those of the
Baptist School
of Health
Professions.
If you have
received this
e-mail in
error, or are
not the named
recipient(s),
you are hereby
notified that
any review,
dissemination,
distribution
or copying of
this
communication
is prohibited
by the sender
and to do so
might
constitute a
violation of
the Electronic
Communications
Privacy Act,
18 U.S.C.
section
2510-2521.
Please
immediately
notify the
sender and
delete this
e-mail and any
attachments
from your
computer. </span><br>
<br>
<fieldset></fieldset>
<br>
<pre>_______________________________________________
midPoint mailing list
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
<pre>--
Ing. Ivan Noris
Senior Identity Management Engineer
<a href="http://evolveum.com" target="_blank">evolveum.com</a>
___________________________________________
"Idem per idem - semper idem Vix."
</pre>
</div>
</div>
</div>
<br>
_______________________________________________<br>
midPoint
mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
<br>
</blockquote>
</div>
<br>
</div>
<br>
<span style="font-size:small" size="2"><br>
<div><br>
</div>
CONFIDENTIALITY
NOTICE:<br>
This e-mail
together with
any
attachments is
proprietary
and
confidential;
intended for
only the
recipient(s)
named above
and may
contain
information
that is
privileged.
You should not
retain, copy
or use this
e-mail or any
attachments
for any
purpose, or
disclose all
or any part of
the contents
to any person.
Any views or
opinions
expressed in
this e-mail
are those of
the author and
do not
represent
those of the
Baptist School
of Health
Professions.
If you have
received this
e-mail in
error, or are
not the named
recipient(s),
you are hereby
notified that
any review,
dissemination,
distribution
or copying of
this
communication
is prohibited
by the sender
and to do so
might
constitute a
violation of
the Electronic
Communications
Privacy Act,
18 U.S.C.
section
2510-2521.
Please
immediately
notify the
sender and
delete this
e-mail and any
attachments
from your
computer. </span><br>
<div><br>
</div>
_______________________________________________<br>
midPoint mailing
list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
</div>
</div>
</blockquote>
<div>
<div>
<div><br>
<br>
</div>
<div><br>
</div>
<div>-- <br>
</div>
<div><span name="x"></span> Ing.
Ivan Noris<br>
Senior
Identity
Management
Engineer<br>
<a href="http://evolveum.com" target="_blank">evolveum.com</a><br>
___________________________________________<br>
"Idem
per idem -
semper idem
Vix."<span name="x"></span><br>
</div>
</div>
</div>
</div>
</div>
<br>
_______________________________________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
<br>
</blockquote>
</div>
<br>
</div>
<br>
<font><br>
<br>
CONFIDENTIALITY NOTICE:<br>
This e-mail together with any
attachments is proprietary and
confidential; intended for
only the recipient(s) named
above and may contain
information that is
privileged. You should not
retain, copy or use this
e-mail or any attachments for
any purpose, or disclose all
or any part of the contents to
any person. Any views or
opinions expressed in this
e-mail are those of the author
and do not represent those of
the Baptist School of Health
Professions. If you have
received this e-mail in error,
or are not the named
recipient(s), you are hereby
notified that any review,
dissemination, distribution or
copying of this communication
is prohibited by the sender
and to do so might constitute
a violation of the Electronic
Communications Privacy Act, 18
U.S.C. section 2510-2521.
Please immediately notify the
sender and delete this e-mail
and any attachments from your
computer. </font><br>
<br>
<fieldset></fieldset>
<br>
<pre>_______________________________________________
midPoint mailing list
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
</div>
</div>
<span><font color="#888888">
<pre cols="72">--
Ing. Ivan Noris
Senior Identity Management Engineer
<a href="http://evolveum.com" target="_blank">evolveum.com</a> <a href="http://evolveum.com/blog/" target="_blank">evolveum.com/blog/</a>
_____________________________________________
"Semper Id(e)M Vix."
</pre>
</font></span></div>
<br>
_______________________________________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
<br>
</blockquote>
</div>
<br>
</div>
</div>
</div>
</blockquote>
</div>
<br>
</div>
<br>
<font><br>
<br>
CONFIDENTIALITY NOTICE:<br>
This e-mail together with any attachments is
proprietary and confidential; intended for only the
recipient(s) named above and may contain information
that is privileged. You should not retain, copy or use
this e-mail or any attachments for any purpose, or
disclose all or any part of the contents to any
person. Any views or opinions expressed in this e-mail
are those of the author and do not represent those of
the Baptist School of Health Professions. If you have
received this e-mail in error, or are not the named
recipient(s), you are hereby notified that any review,
dissemination, distribution or copying of this
communication is prohibited by the sender and to do so
might constitute a violation of the Electronic
Communications Privacy Act, 18 U.S.C. section
2510-2521. Please immediately notify the sender and
delete this e-mail and any attachments from your
computer. </font><br>
<br>
<fieldset></fieldset>
<br>
<pre>_______________________________________________
midPoint mailing list
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
</div>
<br>
_______________________________________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
<br>
</blockquote>
</div>
<br>
</div>
<br>
<font><br>
<br>
CONFIDENTIALITY NOTICE:<br>
This e-mail together with any attachments is proprietary and
confidential; intended for only the recipient(s) named above and
may contain information that is privileged. You should not
retain, copy or use this e-mail or any attachments for any
purpose, or disclose all or any part of the contents to any
person. Any views or opinions expressed in this e-mail are those
of the author and do not represent those of the Baptist School
of Health Professions. If you have received this e-mail in
error, or are not the named recipient(s), you are hereby
notified that any review, dissemination, distribution or copying
of this communication is prohibited by the sender and to do so
might constitute a violation of the Electronic Communications
Privacy Act, 18 U.S.C. section 2510-2521. Please immediately
notify the sender and delete this e-mail and any attachments
from your computer. </font><br>
<br>
<fieldset></fieldset>
<br>
<pre>_______________________________________________
midPoint mailing list
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
</div>
<br>_______________________________________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
<br></blockquote></div><br></div>
<br>
<font size="2"><br><br>CONFIDENTIALITY NOTICE:<br>This e-mail together with any attachments is proprietary and confidential; intended for only the recipient(s) named above and may contain information that is privileged. You should not retain, copy or use this e-mail or any attachments for any purpose, or disclose all or any part of the contents to any person. Any views or opinions expressed in this e-mail are those of the author and do not represent those of the Baptist School of Health Professions. If you have received this e-mail in error, or are not the named recipient(s), you are hereby notified that any review, dissemination, distribution or copying of this communication is prohibited by the sender and to do so might constitute a violation of the Electronic Communications Privacy Act, 18 U.S.C. section 2510-2521. Please immediately notify the sender and delete this e-mail and any attachments from your computer. </font><br>