<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Hi Giovanni,<br>
<br>
<div class="moz-cite-prefix">On 07/06/2015 01:29 PM, Giovanni
Rosavini wrote:<br>
</div>
<blockquote cite="mid:559A66AF.2000103@nsr.it" type="cite">
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
Hello Ivan,<br>
<br>
thank you for the answer, and above all for explaining the
discovery mechanism.<br>
<br>
Regarding the "deleted" column on the table, that was the approach
we used to apply in other projects; this time we are still not
really sure about the customer needs (e.g. if users will be
removed from HR or if they will be flagged as deleted), so we were
exploring midPoint features to see if "deletion after
synchronization" was feasible.<br>
<br>
</blockquote>
<br>
OK, understood. This is the (obvious) feature of the DB Table / CSV
connectors. For example with OpenDJ changelog mechanism you can
react to the events applied to OpenDJ objects, including delete.<br>
<br>
Regards,<br>
Ivan<br>
<br>
<blockquote cite="mid:559A66AF.2000103@nsr.it" type="cite">
<div class="moz-cite-prefix">Il 06/07/2015 11:51, Ivan Noris ha
scritto:<br>
</div>
<blockquote cite="mid:559A4FB9.3000808@evolveum.com" type="cite">
<meta content="text/html; charset=utf-8"
http-equiv="Content-Type">
Hi Giovanni,<br>
<br>
thanks. As it seems, Pavol has just pointed out the real issue -
the inability to detect deletes in DBTable connector - as the
connector is watching for modifications and delete means the
record just dissapears.<br>
<br>
This also explains why the discovery has been when editing the
user... during fetching account, it was detected as deleted
(situation DELETED), so the synchronization has been started and
the (just edited) user was deleted causing the error.<br>
<br>
If you add some column for marking "deleted" accounts in
DBTable, you could synchronize these to midPoint as disabled and
the user and all corresponding accounts would be disabled (but
not deleted).<br>
<br>
The other way is reconciliation as Pavol has recommended, to
detect the deleted accounts and react.<br>
<br>
In most deployments (regardless of the input feed being database
table, CSV export or other data) customers usually have flags to
distinguish former employees, or flags regarding the maternity
leave etc. on which you can react by disabling the User and all
his/her accounts.<br>
<br>
But off course, having the accounts deleted from DB table is OK
too, but the connector will not detect them using LiveSync, but
Reconciliation will work.<br>
<br>
Regards,<br>
Ivan<br>
<br>
<div class="moz-cite-prefix">On 07/06/2015 11:13 AM, Giovanni
Rosavini wrote:<br>
</div>
<blockquote cite="mid:559A46BF.60205@nsr.it" type="cite">
<meta content="text/html; charset=utf-8"
http-equiv="Content-Type">
Hello Ivan,<br>
<br>
here is the task. It was mostly a copy of the one available in
"samples/resources/opendj/opendj-localhost-resource-sync-advanced.xml".<br>
<br>
Thanks,<br>
<div class="moz-signature"><span style="color:rgb(17,52,80)"
class="">Giovanni Rosavini <<a moz-do-not-send="true"
href="mailto:g.rosavini@nsr.it" target="_blank" class="">g.rosavini@nsr.it</a></span><span
style="color:rgb(17,52,80)" class="">></span> <br
style="color:rgb(17,52,80)" class="">
<br style="color:rgb(17,52,80)" class="">
<span class=""> <font class="" color="#015494"><b class="">nova
systems roma / nsr</b></font> </span>
<div
style="font-variant:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"
class=""> <span style="color:rgb(17,52,80)" class=""> <font
class="" face="Lucida Sans" size="2"><br class="">
</font> </span> </div>
<div
style="font-variant:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"
class=""> <span style="color:rgb(17,52,80)" class=""> <font
class="" face="Lucida Sans" size="2">via della foce
micina, 74</font> </span> </div>
<div
style="font-variant:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"
class=""> <font class="" face="Lucida Sans" size="2"> <span
style="color:rgb(17,52,80)" class="">00054 Fiumicino
(RM) - Italia</span> <br style="color:rgb(17,52,80)"
class="">
<span style="color:rgb(17,52,80)" class="">t. <a
moz-do-not-send="true"
href="tel:%2B39%2006%206504%207521"
value="+390665047521" target="3D"_blank""
class="">+39 06 6504 7521</a></span> </font> </div>
<div
style="font-variant:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"
class=""> <font class="" face="Lucida Sans" size="2"> <span
style="color:rgb(17,52,80)" class="">f. <a
moz-do-not-send="true"
href="tel:%2B39%2006%206504%207519"
value="+390665047519" target="_blank" class="">+39
06 6504 7519</a></span> <br
style="color:rgb(17,52,80)" class="">
<span style="color:rgb(17,52,80)" class=""><br class="">
</span> </font> </div>
<div
style="font-variant:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"
class=""> <font class="" face="Lucida Sans" size="2"> <span
style="color:rgb(17,52,80)" class="">web:<span
class=""> </span><a moz-do-not-send="true"
href="http://www.nsr.it/" target="_blank" class="">http://www.nsr.it</a></span></font></div>
</div>
<div class="moz-cite-prefix">Il 06/07/2015 10:58, Ivan Noris
ha scritto:<br>
</div>
<blockquote cite="mid:559A4325.8020702@evolveum.com"
type="cite">
<meta content="text/html; charset=utf-8"
http-equiv="Content-Type">
Hi Giovanni,<br>
<br>
quick and stupid question: is Livesync task running? How
often?<br>
<br>
Thanks,<br>
Ivan<br>
<br>
<div class="moz-cite-prefix">On 07/06/2015 10:55 AM,
Giovanni Rosavini wrote:<br>
</div>
<blockquote cite="mid:559A4283.5000907@nsr.it" type="cite">
<meta content="text/html; charset=utf-8"
http-equiv="Content-Type">
Hello Pavol,<br>
<br>
I'm sorry, I accidentally disabled some of the loggers
while testing another scenario. Now I have changed my
settings enabling the logging for Model (attached is my
System Configuration).<br>
Here is the test I made:<br>
<ul>
<li>at 10:32 I deleted my user from HR;</li>
<li>at 10:33 I listed the users in the GUI: the
to-be-deleted user was still there;</li>
<li>at 10:34 I tried to access the user details from the
GUI, receiving the "user not found" error.</li>
</ul>
<p>I previously forgot to mention that I am using Midpoint
version 3.1.1.<br>
</p>
Thank you for your help<br>
<br>
Best regards,<br>
<br>
<div class="moz-signature"><span
style="color:rgb(17,52,80)" class="">Giovanni Rosavini
<<a moz-do-not-send="true"
href="mailto:g.rosavini@nsr.it" target="_blank"
class="">g.rosavini@nsr.it</a></span><span
style="color:rgb(17,52,80)" class="">></span> <br
style="color:rgb(17,52,80)" class="">
<br style="color:rgb(17,52,80)" class="">
<span class=""> <font class="" color="#015494"><b
class="">nova systems roma / nsr</b></font> </span>
<div
style="font-variant:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"
class=""> <span style="color:rgb(17,52,80)" class="">
<font class="" face="Lucida Sans" size="2"><br
class="">
</font> </span> </div>
<div
style="font-variant:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"
class=""> <span style="color:rgb(17,52,80)" class="">
<font class="" face="Lucida Sans" size="2">via della
foce micina, 74</font> </span> </div>
<div
style="font-variant:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"
class=""> <font class="" face="Lucida Sans" size="2">
<span style="color:rgb(17,52,80)" class="">00054
Fiumicino (RM) - Italia</span> <br
style="color:rgb(17,52,80)" class="">
<span style="color:rgb(17,52,80)" class="">t. <a
moz-do-not-send="true"
href="tel:%2B39%2006%206504%207521"
value="+390665047521"
target="3D"_blank"" class="">+39 06
6504 7521</a></span> </font> </div>
<div
style="font-variant:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"
class=""> <font class="" face="Lucida Sans" size="2">
<span style="color:rgb(17,52,80)" class="">f. <a
moz-do-not-send="true"
href="tel:%2B39%2006%206504%207519"
value="+390665047519" target="_blank" class="">+39
06 6504 7519</a></span> <br
style="color:rgb(17,52,80)" class="">
<span style="color:rgb(17,52,80)" class=""><br
class="">
</span> </font> </div>
<div
style="font-variant:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"
class=""> <font class="" face="Lucida Sans" size="2">
<span style="color:rgb(17,52,80)" class="">web:<span
class=""> </span><a moz-do-not-send="true"
href="http://www.nsr.it/" target="_blank"
class="">http://www.nsr.it</a></span></font></div>
</div>
<div class="moz-cite-prefix">Il 06/07/2015 09:29, Pavol
Mederly ha scritto:<br>
</div>
<blockquote cite="mid:559A2E4F.3010001@evolveum.com"
type="cite">
<meta content="text/html; charset=utf-8"
http-equiv="Content-Type">
<div class="moz-cite-prefix">Hello Giovanni,<br>
<br>
I've looked at your resource configuration and your
log, but so far I don't see the cause of the behavior
you observe.<br>
<br>
However, we could perhaps help you more if you could
send us complete log files. First of all, I think the
current log describes only the "discovery" part of the
process (and shows that midPoint correctly decided to
delete the user). What would be more useful is the log
covering the situation when you delete the row in DB,
execute the LiveSync cycle and observe that no
reaction is performed. Also, currently there seems to
be only logs from the Projector. Could you enable the
TRACE logging for the whole Model component?<br>
<br>
Best regards,<br>
Pavol<br>
<br>
On 3. 7. 2015 17:40, Giovanni Rosavini wrote:<br>
</div>
<blockquote cite="mid:5596ACD2.4000302@nsr.it"
type="cite">
<meta http-equiv="content-type" content="text/html;
charset=utf-8">
Hi,<br>
<br>
I have a problem with synchronization against a DB
read-only resource (my "HR" resource).<br>
When a new row is inserted in HR, Midpoint reacts and
correctly creates the relative user (inbound mappings
evaluations and object template application are OK),
but when a row is deleted no reaction is performed;
also, when I try to access the user in the GUI,
discovery occurs and I receive the error message: "<span
class="message-info"><span>Object of type 'UserType'
with oid 'ffa976d3-1700-476f-a6ba-a1d8c7f0875e'
was not found</span></span>".<br>
In the attachments you can find the relevant log lines
and the resource configuration.<br>
<br>
Can you please help us?<br>
<br>
Thanks in advance.<br>
<br>
<div class="moz-signature">-- <br>
<span style="color:rgb(17,52,80)" class="">Giovanni
Rosavini <<a moz-do-not-send="true"
href="mailto:g.rosavini@nsr.it" target="_blank"
class="">g.rosavini@nsr.it</a></span><span
style="color:rgb(17,52,80)" class="">></span> <br
style="color:rgb(17,52,80)" class="">
<br style="color:rgb(17,52,80)" class="">
<span class=""> <font class="" color="#015494"><b
class="">nova systems roma / nsr</b></font> </span>
<div
style="font-variant:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"
class=""> <span style="color:rgb(17,52,80)"
class=""> <font class="" face="Lucida Sans"
size="2"><br class="">
</font> </span> </div>
<div
style="font-variant:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"
class=""> <span style="color:rgb(17,52,80)"
class=""> <font class="" face="Lucida Sans"
size="2">via della foce micina, 74</font> </span>
</div>
<div
style="font-variant:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"
class=""> <font class="" face="Lucida Sans"
size="2"> <span style="color:rgb(17,52,80)"
class="">00054 Fiumicino (RM) - Italia</span>
<br style="color:rgb(17,52,80)" class="">
<span style="color:rgb(17,52,80)" class="">t. <a
moz-do-not-send="true"
href="tel:%2B39%2006%206504%207521"
value="+390665047521"
target="3D"_blank"" class="">+39
06 6504 7521</a></span> </font> </div>
<div
style="font-variant:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"
class=""> <font class="" face="Lucida Sans"
size="2"> <span style="color:rgb(17,52,80)"
class="">f. <a moz-do-not-send="true"
href="tel:%2B39%2006%206504%207519"
value="+390665047519" target="_blank"
class="">+39 06 6504 7519</a></span> <br
style="color:rgb(17,52,80)" class="">
<span style="color:rgb(17,52,80)" class=""><br
class="">
</span> </font> </div>
<div
style="font-variant:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"
class=""> <font class="" face="Lucida Sans"
size="2"> <span style="color:rgb(17,52,80)"
class="">web:<span class=""> </span><a
moz-do-not-send="true"
href="http://www.nsr.it/" target="_blank"
class="">http://www.nsr.it</a></span></font></div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
midPoint mailing list
<a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>
<a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
midPoint mailing list
<a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>
<a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
midPoint mailing list
<a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>
<a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
<pre class="moz-signature" cols="72">--
Ing. Ivan Noris
Senior Identity Management Engineer & IDM Architect
evolveum.com evolveum.com/blog/
___________________________________________________
"Semper Id(e)M Vix."
</pre>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
midPoint mailing list
<a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>
<a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
midPoint mailing list
<a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>
<a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
<pre class="moz-signature" cols="72">--
Ing. Ivan Noris
Senior Identity Management Engineer & IDM Architect
evolveum.com evolveum.com/blog/
___________________________________________________
"Semper Id(e)M Vix."
</pre>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
midPoint mailing list
<a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>
<a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
midPoint mailing list
<a class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>
<a class="moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
<pre class="moz-signature" cols="72">--
Ing. Ivan Noris
Senior Identity Management Engineer & IDM Architect
evolveum.com evolveum.com/blog/
___________________________________________________
"Semper Id(e)M Vix."
</pre>
</body>
</html>