<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Hi,<br>
<br>
DB Table connector is capable to synchronize only accounts, and only
in one table. For anything else you need either ScriptedSQL
connector or a custom connector for your specific needs.<br>
<br>
You can then have two object types supported in your connector, e.g.
"accounts" (e.g. AccountObjectClass, mapped to midPoint Users - in
schema handling kind=account, intent=default) and "groups" (e.g.
GroupObjectClass, mapped to midPoint Organizations or Roles - in
schema handling kind=entitlement, intent=group).<br>
<br>
USER / GROUP relationship seems to me best represented as
association.<br>
<br>
So midPoint will be able to create accounts in DB (USER_TBL), groups
(GROUP_TBL) and have associations between accounts and groups
(USER_GROUP).<br>
<br>
If your objects originate in LDAP and not in midPoint, you have to
first sync them to midPoint and then from midPoint to DB (by
assigning roles to provision them there).<br>
<br>
Anyway you will need ScriptedSQL or custom connector to achieve
this.<br>
<br>
Regards,<br>
Ivan<br>
<br>
<div class="moz-cite-prefix">On 08/20/2015 01:17 PM, Steklac Michal
wrote:<br>
</div>
<blockquote cite="mid:1440069427.7061.2.camel@steky" type="cite">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="GENERATOR" content="GtkHTML/4.6.6">
Hi,<br>
<br>
Your instruction for create LDAP groups works well.<br>
<br>
I have <br>
In LDAP I have users and groups. Not only groups, which have same
name as users. From LDAP I want to synchronize users and groups to
DB tables.<br>
I have 3 tables:<br>
1) USER_TBL - contain users<br>
primary key is USER_ID<br>
2) GROUP_TBL - contain groups<br>
primary key is GROUP_ID<br>
3) USER_GROUP - mapping table<br>
contain two columns USER_ID and GROUP_ID<br>
It is posible synchronize users and groups from LDAP to DB tables?<br>
I use DB connector to synchronize users to USER_TBL table. How
can I synchronize GROUP_TBL and USER_GROUP tables?<br>
<br>
Thanks & Best regards<br>
MiSo<br>
<br>
On St, 2015-08-19 at 12:31 +0200, Ivan Noris wrote:<br>
<blockquote type="CITE">Hi MiSo,<br>
<br>
I believe we have already discussed this here <a
moz-do-not-send="true"
href="http://lists.evolveum.com/pipermail/midpoint/2015-July/001285.html">http://lists.evolveum.com/pipermail/midpoint/2015-July/001285.html</a><br>
<br>
Regards,<br>
Ivan<br>
<br>
</blockquote>
<blockquote type="CITE">On 08/18/2015 08:19 PM, Steklac Michal
wrote:<br>
<br>
</blockquote>
<blockquote type="CITE">
<blockquote type="CITE">Hi,<br>
<br>
I have configuration where AD is authoritative source for
users. When is user create in AD then is create user in LDAP
(in midpoint terminology account). It is possible create group
in different ldap subtree with same name? What is best way?<br>
Example:<br>
AD - cn=Janko Hrasko,ou=midpoint,dc=sk (with
sAMAccountName=jhrasko)<br>
LDAP user - uid=jhrasko,ou=people,ou=midpoint,dc=sk<br>
LDAP group - cn=jhrasko,ou=group,ou=midpoint,dc=sk<br>
<br>
Thanks & Best regards<br>
MiSo<br>
<br>
<br>
<br>
<br>
<br>
<pre>_______________________________________________
midPoint mailing list
<a moz-do-not-send="true" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>
<a moz-do-not-send="true" href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
<pre>--
Ing. Ivan Noris
Senior Identity Management Engineer & IDM Architect
evolveum.com evolveum.com/blog/
___________________________________________________
"Semper Id(e)M Vix."
</pre>
<br>
<br>
__________ Information from ESET Mail Security, version of virus
signature database 12117 (20150819) __________<br>
<br>
The message was checked by ESET Mail Security.<br>
<a moz-do-not-send="true" href="http://www.eset.com">http://www.eset.com</a><br>
</blockquote>
<br>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
midPoint mailing list
<a class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>
<a class="moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
<pre class="moz-signature" cols="72">--
Ing. Ivan Noris
Senior Identity Management Engineer & IDM Architect
evolveum.com evolveum.com/blog/
___________________________________________________
"Semper Id(e)M Vix."
</pre>
</body>
</html>