<div dir="ltr">Ok, I will set debug on to full and then run a test enable/disable with the filters. I am out all week at a conference so next week I should have to data,<div><br></div><div>As for the Reconcile task disabling users, I went ahead and added,</div><div><br></div><div><div> <activation></div><div> <administrativeStatus></div><div> <inbound></div><div> <strength>weak</strength></div><div> <expression></div><div> <value>enabled</value></div><div> </expression></div><div> </inbound></div><div> </administrativeStatus></div><div> </activation></div></div><div><br></div><div>Directly onto the resource object, I didn't have any mapping defined for this resource since it is really not needed, so hopefully this will keep the recon task/resource from taking any activation action. I set it a few days ago and so far I haven't has any falsely disabled accounts. I also set full account notifications on to me so I can keep track every change made to user to see if it works.</div><div><br></div><div>Thanks!</div><div>JASON</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Mon, Oct 12, 2015 at 3:47 PM, Pavol Mederly <span dir="ltr"><<a href="mailto:mederly@evolveum.com" target="_blank">mederly@evolveum.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
<div>Hello Jason,<br>
<br>
sorry for the delay. Today I had a look at your problem again, but
... just don't know.<br>
<br>
I could diagnose the problem from detailed logs, if it would be
possible to take them.<br>
E.g. by reconciling one particular user (from GUI), with model
logs set to TRACE.<br>
<br>
And, as for the filtering problem below ... again, sorry, no idea
(yet). I think that == and != operators work in groovy just fine.
Maybe some logging instructions that you'd put into your scripts
could help...<br>
<br>
Best regards,<br>
Pavol<br>
<br>
</div>
<blockquote type="cite"><div><div class="h5">
<div dir="ltr">This below does not work
<div><br>
</div>
<div>
<div> <span style="white-space:pre-wrap"> </span>event.isRelatedToItem(new
com.evolveum.midpoint.prism.path.ItemPath("activation",
"administrativeStatus")) &&</div>
<div> requestee.getOrganization().size() ==
1 &&</div>
<div>
requestee.getOrganization().get(0).getOrig() <font color="#ff0000">!=</font>
'OU=DISABLED,OU=Dept,OU=Users,DC=Test,DC=Local'
&&</div>
<div><span style="white-space:pre-wrap"> </span>basic.getExtensionPropertyValue(requestee,
'<a href="http://www.bshp.edu/test/bshp" target="_blank">http://www.bshp.edu/test/bshp</a>',
'eduPersonAffiliation') == 'student'</div>
</div>
<div><br>
</div>
<div><br>
</div>
<div>But this one does</div>
<div><br>
</div>
<div>
<div> <span style="white-space:pre-wrap"> </span>event.isRelatedToItem(new
com.evolveum.midpoint.prism.path.ItemPath("activation",
"administrativeStatus")) &&</div>
<div> requestee.getOrganization().size() ==
1 &&</div>
<div>
requestee.getOrganization().get(0).getOrig() ==
'OU=DISABLED,OU=Dept,OU=Users,DC=Test,DC=Local'
&&</div>
<div><span style="white-space:pre-wrap"> </span>basic.getExtensionPropertyValue(requestee,
'<a href="http://www.bshp.edu/test/bshp" target="_blank">http://www.bshp.edu/test/bshp</a>',
'eduPersonAffiliation') == 'student'</div>
</div>
<div><br>
</div>
<div>All I changed was the == to != which I assumed would work
as a does not match<br clear="all">
<div><br>
</div>
-- <br>
<div>
<div dir="ltr">JASON</div>
</div>
</div>
</div>
<br>
</div></div><font size="2"><br>
<br>
CONFIDENTIALITY NOTICE:<br>
This e-mail together with any attachments is proprietary and
confidential; intended for only the recipient(s) named above and
may contain information that is privileged. You should not
retain, copy or use this e-mail or any attachments for any
purpose, or disclose all or any part of the contents to any
person. Any views or opinions expressed in this e-mail are those
of the author and do not represent those of the Baptist School
of Health Professions. If you have received this e-mail in
error, or are not the named recipient(s), you are hereby
notified that any review, dissemination, distribution or copying
of this communication is prohibited by the sender and to do so
might constitute a violation of the Electronic Communications
Privacy Act, 18 U.S.C. section 2510-2521. Please immediately
notify the sender and delete this e-mail and any attachments
from your computer. </font><br>
<br>
<fieldset></fieldset>
<br>
<pre>_______________________________________________
midPoint mailing list
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
</div>
<br>_______________________________________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
<br></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature"><div dir="ltr">JASON</div></div>
</div>
<br>
<font size="2"><br><br>CONFIDENTIALITY NOTICE:<br>This e-mail together with any attachments is proprietary and confidential; intended for only the recipient(s) named above and may contain information that is privileged. You should not retain, copy or use this e-mail or any attachments for any purpose, or disclose all or any part of the contents to any person. Any views or opinions expressed in this e-mail are those of the author and do not represent those of the Baptist School of Health Professions. If you have received this e-mail in error, or are not the named recipient(s), you are hereby notified that any review, dissemination, distribution or copying of this communication is prohibited by the sender and to do so might constitute a violation of the Electronic Communications Privacy Act, 18 U.S.C. section 2510-2521. Please immediately notify the sender and delete this e-mail and any attachments from your computer. </font><br>