<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Hello Ivan,<br>
<br>
thank you for the answer, and above all for explaining the discovery
mechanism.<br>
<br>
Regarding the "deleted" column on the table, that was the approach
we used to apply in other projects; this time we are still not
really sure about the customer needs (e.g. if users will be removed
from HR or if they will be flagged as deleted), so we were exploring
midPoint features to see if "deletion after synchronization" was
feasible.<br>
<br>
Best regards,<br>
<br>
<div class="moz-signature"><span style="color:rgb(17,52,80)"
class="">Giovanni Rosavini <<a
href="mailto:g.rosavini@nsr.it" target="_blank" class="">g.rosavini@nsr.it</a></span><span
style="color:rgb(17,52,80)" class="">></span>
<br style="color:rgb(17,52,80)" class="">
<br style="color:rgb(17,52,80)" class="">
<span class="">
<font class="" color="#015494"><b class="">nova systems roma /
nsr</b></font>
</span>
<div
style="font-variant:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"
class="">
<span style="color:rgb(17,52,80)" class="">
<font class="" face="Lucida Sans" size="2"><br class="">
</font>
</span>
</div>
<div
style="font-variant:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"
class="">
<span style="color:rgb(17,52,80)" class="">
<font class="" face="Lucida Sans" size="2">via della foce
micina, 74</font>
</span>
</div>
<div
style="font-variant:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"
class="">
<font class="" face="Lucida Sans" size="2">
<span style="color:rgb(17,52,80)" class="">00054 Fiumicino
(RM) - Italia</span>
<br style="color:rgb(17,52,80)" class="">
<span style="color:rgb(17,52,80)" class="">t. <a
href="tel:%2B39%2006%206504%207521" value="+390665047521"
target="3D"_blank"" class="">+39 06 6504 7521</a></span>
</font>
</div>
<div
style="font-variant:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"
class="">
<font class="" face="Lucida Sans" size="2">
<span style="color:rgb(17,52,80)" class="">f. <a
href="tel:%2B39%2006%206504%207519" value="+390665047519"
target="_blank" class="">+39 06 6504 7519</a></span>
<br style="color:rgb(17,52,80)" class="">
<span style="color:rgb(17,52,80)" class=""><br class="">
</span>
</font>
</div>
<div
style="font-variant:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"
class="">
<font class="" face="Lucida Sans" size="2">
<span style="color:rgb(17,52,80)" class="">web:<span class=""> </span><a
href="http://www.nsr.it/" target="_blank" class="">http://www.nsr.it</a></span></font></div>
</div>
<div class="moz-cite-prefix">Il 06/07/2015 11:51, Ivan Noris ha
scritto:<br>
</div>
<blockquote cite="mid:559A4FB9.3000808@evolveum.com" type="cite">
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
Hi Giovanni,<br>
<br>
thanks. As it seems, Pavol has just pointed out the real issue -
the inability to detect deletes in DBTable connector - as the
connector is watching for modifications and delete means the
record just dissapears.<br>
<br>
This also explains why the discovery has been when editing the
user... during fetching account, it was detected as deleted
(situation DELETED), so the synchronization has been started and
the (just edited) user was deleted causing the error.<br>
<br>
If you add some column for marking "deleted" accounts in DBTable,
you could synchronize these to midPoint as disabled and the user
and all corresponding accounts would be disabled (but not
deleted).<br>
<br>
The other way is reconciliation as Pavol has recommended, to
detect the deleted accounts and react.<br>
<br>
In most deployments (regardless of the input feed being database
table, CSV export or other data) customers usually have flags to
distinguish former employees, or flags regarding the maternity
leave etc. on which you can react by disabling the User and all
his/her accounts.<br>
<br>
But off course, having the accounts deleted from DB table is OK
too, but the connector will not detect them using LiveSync, but
Reconciliation will work.<br>
<br>
Regards,<br>
Ivan<br>
<br>
<div class="moz-cite-prefix">On 07/06/2015 11:13 AM, Giovanni
Rosavini wrote:<br>
</div>
<blockquote cite="mid:559A46BF.60205@nsr.it" type="cite">
<meta content="text/html; charset=utf-8"
http-equiv="Content-Type">
Hello Ivan,<br>
<br>
here is the task. It was mostly a copy of the one available in
"samples/resources/opendj/opendj-localhost-resource-sync-advanced.xml".<br>
<br>
Thanks,<br>
<div class="moz-signature"><span style="color:rgb(17,52,80)"
class="">Giovanni Rosavini <<a moz-do-not-send="true"
href="mailto:g.rosavini@nsr.it" target="_blank" class="">g.rosavini@nsr.it</a></span><span
style="color:rgb(17,52,80)" class="">></span> <br
style="color:rgb(17,52,80)" class="">
<br style="color:rgb(17,52,80)" class="">
<span class=""> <font class="" color="#015494"><b class="">nova
systems roma / nsr</b></font> </span>
<div
style="font-variant:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"
class=""> <span style="color:rgb(17,52,80)" class=""> <font
class="" face="Lucida Sans" size="2"><br class="">
</font> </span> </div>
<div
style="font-variant:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"
class=""> <span style="color:rgb(17,52,80)" class=""> <font
class="" face="Lucida Sans" size="2">via della foce
micina, 74</font> </span> </div>
<div
style="font-variant:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"
class=""> <font class="" face="Lucida Sans" size="2"> <span
style="color:rgb(17,52,80)" class="">00054 Fiumicino
(RM) - Italia</span> <br style="color:rgb(17,52,80)"
class="">
<span style="color:rgb(17,52,80)" class="">t. <a
moz-do-not-send="true"
href="tel:%2B39%2006%206504%207521"
value="+390665047521" target="3D"_blank""
class="">+39 06 6504 7521</a></span> </font> </div>
<div
style="font-variant:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"
class=""> <font class="" face="Lucida Sans" size="2"> <span
style="color:rgb(17,52,80)" class="">f. <a
moz-do-not-send="true"
href="tel:%2B39%2006%206504%207519"
value="+390665047519" target="_blank" class="">+39 06
6504 7519</a></span> <br style="color:rgb(17,52,80)"
class="">
<span style="color:rgb(17,52,80)" class=""><br class="">
</span> </font> </div>
<div
style="font-variant:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"
class=""> <font class="" face="Lucida Sans" size="2"> <span
style="color:rgb(17,52,80)" class="">web:<span class=""> </span><a
moz-do-not-send="true" href="http://www.nsr.it/"
target="_blank" class="">http://www.nsr.it</a></span></font></div>
</div>
<div class="moz-cite-prefix">Il 06/07/2015 10:58, Ivan Noris ha
scritto:<br>
</div>
<blockquote cite="mid:559A4325.8020702@evolveum.com" type="cite">
<meta content="text/html; charset=utf-8"
http-equiv="Content-Type">
Hi Giovanni,<br>
<br>
quick and stupid question: is Livesync task running? How
often?<br>
<br>
Thanks,<br>
Ivan<br>
<br>
<div class="moz-cite-prefix">On 07/06/2015 10:55 AM, Giovanni
Rosavini wrote:<br>
</div>
<blockquote cite="mid:559A4283.5000907@nsr.it" type="cite">
<meta content="text/html; charset=utf-8"
http-equiv="Content-Type">
Hello Pavol,<br>
<br>
I'm sorry, I accidentally disabled some of the loggers while
testing another scenario. Now I have changed my settings
enabling the logging for Model (attached is my System
Configuration).<br>
Here is the test I made:<br>
<ul>
<li>at 10:32 I deleted my user from HR;</li>
<li>at 10:33 I listed the users in the GUI: the
to-be-deleted user was still there;</li>
<li>at 10:34 I tried to access the user details from the
GUI, receiving the "user not found" error.</li>
</ul>
<p>I previously forgot to mention that I am using Midpoint
version 3.1.1.<br>
</p>
Thank you for your help<br>
<br>
Best regards,<br>
<br>
<div class="moz-signature"><span style="color:rgb(17,52,80)"
class="">Giovanni Rosavini <<a moz-do-not-send="true"
href="mailto:g.rosavini@nsr.it" target="_blank"
class="">g.rosavini@nsr.it</a></span><span
style="color:rgb(17,52,80)" class="">></span> <br
style="color:rgb(17,52,80)" class="">
<br style="color:rgb(17,52,80)" class="">
<span class=""> <font class="" color="#015494"><b
class="">nova systems roma / nsr</b></font> </span>
<div
style="font-variant:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"
class=""> <span style="color:rgb(17,52,80)" class=""> <font
class="" face="Lucida Sans" size="2"><br class="">
</font> </span> </div>
<div
style="font-variant:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"
class=""> <span style="color:rgb(17,52,80)" class=""> <font
class="" face="Lucida Sans" size="2">via della foce
micina, 74</font> </span> </div>
<div
style="font-variant:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"
class=""> <font class="" face="Lucida Sans" size="2"> <span
style="color:rgb(17,52,80)" class="">00054 Fiumicino
(RM) - Italia</span> <br
style="color:rgb(17,52,80)" class="">
<span style="color:rgb(17,52,80)" class="">t. <a
moz-do-not-send="true"
href="tel:%2B39%2006%206504%207521"
value="+390665047521"
target="3D"_blank"" class="">+39 06 6504
7521</a></span> </font> </div>
<div
style="font-variant:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"
class=""> <font class="" face="Lucida Sans" size="2"> <span
style="color:rgb(17,52,80)" class="">f. <a
moz-do-not-send="true"
href="tel:%2B39%2006%206504%207519"
value="+390665047519" target="_blank" class="">+39
06 6504 7519</a></span> <br
style="color:rgb(17,52,80)" class="">
<span style="color:rgb(17,52,80)" class=""><br
class="">
</span> </font> </div>
<div
style="font-variant:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"
class=""> <font class="" face="Lucida Sans" size="2"> <span
style="color:rgb(17,52,80)" class="">web:<span
class=""> </span><a moz-do-not-send="true"
href="http://www.nsr.it/" target="_blank" class="">http://www.nsr.it</a></span></font></div>
</div>
<div class="moz-cite-prefix">Il 06/07/2015 09:29, Pavol
Mederly ha scritto:<br>
</div>
<blockquote cite="mid:559A2E4F.3010001@evolveum.com"
type="cite">
<meta content="text/html; charset=utf-8"
http-equiv="Content-Type">
<div class="moz-cite-prefix">Hello Giovanni,<br>
<br>
I've looked at your resource configuration and your log,
but so far I don't see the cause of the behavior you
observe.<br>
<br>
However, we could perhaps help you more if you could
send us complete log files. First of all, I think the
current log describes only the "discovery" part of the
process (and shows that midPoint correctly decided to
delete the user). What would be more useful is the log
covering the situation when you delete the row in DB,
execute the LiveSync cycle and observe that no reaction
is performed. Also, currently there seems to be only
logs from the Projector. Could you enable the TRACE
logging for the whole Model component?<br>
<br>
Best regards,<br>
Pavol<br>
<br>
On 3. 7. 2015 17:40, Giovanni Rosavini wrote:<br>
</div>
<blockquote cite="mid:5596ACD2.4000302@nsr.it" type="cite">
<meta http-equiv="content-type" content="text/html;
charset=utf-8">
Hi,<br>
<br>
I have a problem with synchronization against a DB
read-only resource (my "HR" resource).<br>
When a new row is inserted in HR, Midpoint reacts and
correctly creates the relative user (inbound mappings
evaluations and object template application are OK), but
when a row is deleted no reaction is performed; also,
when I try to access the user in the GUI, discovery
occurs and I receive the error message: "<span
class="message-info"><span>Object of type 'UserType'
with oid 'ffa976d3-1700-476f-a6ba-a1d8c7f0875e' was
not found</span></span>".<br>
In the attachments you can find the relevant log lines
and the resource configuration.<br>
<br>
Can you please help us?<br>
<br>
Thanks in advance.<br>
<br>
<div class="moz-signature">-- <br>
<span style="color:rgb(17,52,80)" class="">Giovanni
Rosavini <<a moz-do-not-send="true"
href="mailto:g.rosavini@nsr.it" target="_blank"
class="">g.rosavini@nsr.it</a></span><span
style="color:rgb(17,52,80)" class="">></span> <br
style="color:rgb(17,52,80)" class="">
<br style="color:rgb(17,52,80)" class="">
<span class=""> <font class="" color="#015494"><b
class="">nova systems roma / nsr</b></font> </span>
<div
style="font-variant:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"
class=""> <span style="color:rgb(17,52,80)"
class=""> <font class="" face="Lucida Sans"
size="2"><br class="">
</font> </span> </div>
<div
style="font-variant:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"
class=""> <span style="color:rgb(17,52,80)"
class=""> <font class="" face="Lucida Sans"
size="2">via della foce micina, 74</font> </span>
</div>
<div
style="font-variant:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"
class=""> <font class="" face="Lucida Sans"
size="2"> <span style="color:rgb(17,52,80)"
class="">00054 Fiumicino (RM) - Italia</span> <br
style="color:rgb(17,52,80)" class="">
<span style="color:rgb(17,52,80)" class="">t. <a
moz-do-not-send="true"
href="tel:%2B39%2006%206504%207521"
value="+390665047521"
target="3D"_blank"" class="">+39 06
6504 7521</a></span> </font> </div>
<div
style="font-variant:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"
class=""> <font class="" face="Lucida Sans"
size="2"> <span style="color:rgb(17,52,80)"
class="">f. <a moz-do-not-send="true"
href="tel:%2B39%2006%206504%207519"
value="+390665047519" target="_blank" class="">+39
06 6504 7519</a></span> <br
style="color:rgb(17,52,80)" class="">
<span style="color:rgb(17,52,80)" class=""><br
class="">
</span> </font> </div>
<div
style="font-variant:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"
class=""> <font class="" face="Lucida Sans"
size="2"> <span style="color:rgb(17,52,80)"
class="">web:<span class=""> </span><a
moz-do-not-send="true"
href="http://www.nsr.it/" target="_blank"
class="">http://www.nsr.it</a></span></font></div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
midPoint mailing list
<a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>
<a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
midPoint mailing list
<a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>
<a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
midPoint mailing list
<a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>
<a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
<pre class="moz-signature" cols="72">--
Ing. Ivan Noris
Senior Identity Management Engineer & IDM Architect
evolveum.com evolveum.com/blog/
___________________________________________________
"Semper Id(e)M Vix."
</pre>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
midPoint mailing list
<a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>
<a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
midPoint mailing list
<a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>
<a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
<pre class="moz-signature" cols="72">--
Ing. Ivan Noris
Senior Identity Management Engineer & IDM Architect
evolveum.com evolveum.com/blog/
___________________________________________________
"Semper Id(e)M Vix."
</pre>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
midPoint mailing list
<a class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>
<a class="moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
</body>
</html>