<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">Hello Fabio,<br>
<br>
I have to correct myself with a clear head in the morning.<br>
<br>
<c:path> assignment </c:path> is wrong, as the default
input for activation mappings is not the focal object (as it is
for standard attribute mappings).<br>
<br>
So the working solution is:<br>
<br>
<tt> <outbound></tt><tt><br>
</tt><tt> <strength>strong</strength></tt><tt><br>
</tt><tt> <source></tt><tt><br>
</tt><tt>
<c:path>$user/assignment</c:path></tt><tt><br>
</tt><tt> </source></tt><tt><br>
</tt><tt> <expression></tt><tt><br>
</tt><tt> <value>enabled</value></tt><tt><br>
</tt><tt> </expression></tt><tt><br>
</tt><tt> <condition></tt><tt><br>
</tt><tt> <script></tt><tt><br>
</tt><tt>
<relativityMode>absolute</relativityMode></tt><tt><br>
</tt><tt> <code></tt><tt><br>
</tt><tt>
!midpoint.isDirectlyAssigned(user,
'a4ce0d72-ebf5-4214-9d76-65f1a98a6ea3')</tt><tt><br>
</tt><tt> </code></tt><tt><br>
</tt><tt> </script></tt><tt><br>
</tt><tt> </condition></tt><tt><br>
</tt><tt> </outbound></tt><tt><br>
</tt><tt> <outbound></tt><tt><br>
</tt><tt> <strength>strong</strength></tt><tt><br>
</tt><tt> <source></tt><tt><br>
</tt><tt>
<c:path>$user/assignment</c:path></tt><tt><br>
</tt><tt> </source></tt><tt><br>
</tt><tt> <expression></tt><tt><br>
</tt><tt> <value>disabled</value></tt><tt><br>
</tt><tt> </expression></tt><tt><br>
</tt><tt> <condition></tt><tt><br>
</tt><tt> <script></tt><tt><br>
</tt><tt>
<relativityMode>absolute</relativityMode></tt><tt><br>
</tt><tt> <code></tt><tt><br>
</tt><tt>
midpoint.isDirectlyAssigned(user,
'a4ce0d72-ebf5-4214-9d76-65f1a98a6ea3')</tt><tt><br>
</tt><tt> </code></tt><tt><br>
</tt><tt> </script></tt><tt><br>
</tt><tt> </condition></tt><tt><br>
</tt><tt> </outbound></tt><tt><br>
</tt><br>
At least this works for me in 3.3-snapshot. Note the change from
"assignment" to "$user/assignment" and added
"<relativityMode>absolute</relativityMode>" to work
around a subtle problem in providing assignment values to the
expression.<br>
<br>
Best regards,<br>
Pavol<br>
<br>
</div>
<blockquote cite="mid:561C3018.5050205@evolveum.com" type="cite">
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
<div class="moz-cite-prefix">Hello Fabio,<br>
<br>
problem of your code is in that activation/administrativeStatus
is not a real attribute. It is a property of the shadow, not an
attribute of the resource object.<br>
<br>
I would solve your problem by setting administrativeStatus in
the <activation> part of the AD resource schema handling -
not in the Org inducement.<br>
<br>
The code could look like this - well, it's just one of the
possibilities:<br>
<br>
<pre class="code-java"> <activation>
<administrativeStatus>
<outbound>
<strength>strong</strength>
<source>
<c:path>assignment</c:path>
</source>
<expression>
<value>enabled</value>
</expression>
<condition>
<script>
<code>
!midpoint.isDirectlyAssigned(user, 'a4ce0d72-ebf5-4214-9d76-65f1a98a6ea3')
</code>
</script>
</condition>
</outbound>
<outbound>
<strength>strong</strength>
<source>
<c:path>assignment</c:path>
</source>
<expression>
<value>disabled</value>
</expression>
<condition>
<script>
<code>
midpoint.isDirectlyAssigned(user, 'a4ce0d72-ebf5-4214-9d76-65f1a98a6ea3')
</code>
</script>
</condition>
</outbound>
</administrativeStatus>
</activation></pre>
<br>
In 3.3-snapshot this does not work <a moz-do-not-send="true"
href="https://jira.evolveum.com/browse/MID-2618">because of a
bug</a>, but in 3.2 it could work (please try).<br>
<br>
Best regards,<br>
Pavol<br>
<br>
<br>
On 12. 10. 2015 18:59, Fabio Contessi wrote:<br>
</div>
<blockquote cite="mid:C555D53C-BD0C-47DF-A832-40EFEDA1BB5A@nsr.it"
type="cite">
<meta http-equiv="Content-Type" content="text/html;
charset=utf-8">
<div class="">
<div class="">Hi,</div>
<div class=""><br class="">
</div>
<div class="">I’m using midPoint 3.2 and I have an Active
Directory as target resource. I need to disable an Active
Directory account when the user linked to the account is
assigned to a particular midPoint Organizational Unit.</div>
<div class=""><br class="">
</div>
<div class="">In the inducement section of the OU I have this
snippet code:</div>
</div>
<div class=""><br class="">
</div>
<div class="">
<div style="font-family: HelveticaNeue;" class=""><inducement
id="1"></div>
<div style="font-family: HelveticaNeue;" class="">
<construction></div>
<div style="font-family: HelveticaNeue;" class="">
<resourceRef oid="Resource-ActiveDirectory"
type="c:ResourceType"></resourceRef></div>
<div style="font-family: HelveticaNeue;" class="">
<kind>account</kind></div>
<div style="font-family: HelveticaNeue;" class="">
<attribute></div>
<div style="font-family: HelveticaNeue;" class="">
<c:ref>activation/administrativeStatus</c:ref></div>
<div style="font-family: HelveticaNeue;" class="">
<outbound></div>
<div style="font-family: HelveticaNeue;" class="">
<expression></div>
<div style="font-family: HelveticaNeue;" class="">
<value>disabled</value></div>
<div style="font-family: HelveticaNeue;" class="">
</expression></div>
<div style="font-family: HelveticaNeue;" class="">
</outbound></div>
<div style="font-family: HelveticaNeue;" class="">
</attribute></div>
<div style="font-family: HelveticaNeue;" class="">
</construction></div>
<div style="font-family: HelveticaNeue;" class="">
</inducement></div>
</div>
<div class=""><br class="">
</div>
<div class="">
<div class="">When I assign a midPoint user to the
Organizational Unit, I receive an error and the operation
fails. </div>
<div class=""><br class="">
</div>
<div class="">What I’m doing wrong? What is the correct way to
do that?</div>
<div class=""><br class="">
</div>
<div class="">Thanks in advance for the help.</div>
<div class=""><br class="">
</div>
<div class="">Regards.</div>
</div>
<div class=""><br class="">
</div>
<div class=""> Fabio</div>
<div class="">
<div apple-content-edited="true" class="">
<div style="color: rgb(0, 0, 0); letter-spacing: normal;
orphans: auto; text-align: start; text-indent: 0px;
text-transform: none; white-space: normal; widows: auto;
word-spacing: 0px; -webkit-text-stroke-width: 0px;
word-wrap: break-word; -webkit-nbsp-mode: space;
-webkit-line-break: after-white-space;" class="">
<div style="color: rgb(0, 0, 0); letter-spacing: normal;
orphans: auto; text-align: start; text-indent: 0px;
text-transform: none; white-space: normal; widows: auto;
word-spacing: 0px; -webkit-text-stroke-width: 0px;
word-wrap: break-word; -webkit-nbsp-mode: space;
-webkit-line-break: after-white-space;" class="">
<div style="color: rgb(0, 0, 0); letter-spacing: normal;
orphans: auto; text-align: start; text-indent: 0px;
text-transform: none; white-space: normal; widows:
auto; word-spacing: 0px; -webkit-text-stroke-width:
0px; word-wrap: break-word; -webkit-nbsp-mode: space;
-webkit-line-break: after-white-space;" class="">
<div style="color: rgb(0, 0, 0); letter-spacing:
normal; orphans: auto; text-align: start;
text-indent: 0px; text-transform: none; white-space:
normal; widows: auto; word-spacing: 0px;
-webkit-text-stroke-width: 0px; word-wrap:
break-word; -webkit-nbsp-mode: space;
-webkit-line-break: after-white-space;" class="">
<div class=""><br class="">
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
midPoint mailing list
<a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>
<a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
</blockquote>
<br>
</body>
</html>