<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">Hi Pavol,<div class=""><br class=""></div><div class="">I’ve applied your suggestions and it works!</div><div class=""><br class=""></div><div class="">Thanks a lot.</div><div class=""><br class=""></div><div apple-content-edited="true" class="">
<div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div class=""><div class=""> Fabio</div></div><div class=""><br class=""></div></div></div></div></div></div><div style=""><blockquote type="cite" class=""><div class="">Il giorno 13 ott 2015, alle ore 09:35, Pavol Mederly <<a href="mailto:mederly@evolveum.com" class="">mederly@evolveum.com</a>> ha scritto:</div><br class="Apple-interchange-newline"><div class="">
<meta content="text/html; charset=utf-8" http-equiv="Content-Type" class="">
<div bgcolor="#FFFFFF" text="#000000" class="">
<div class="moz-cite-prefix">Hello Fabio,<br class="">
<br class="">
I have to correct myself with a clear head in the morning.<br class="">
<br class="">
<c:path> assignment </c:path> is wrong, as the default
input for activation mappings is not the focal object (as it is
for standard attribute mappings).<br class="">
<br class="">
So the working solution is:<br class="">
<br class="">
<tt class=""> <outbound></tt><tt class=""><br class="">
</tt><tt class=""> <strength>strong</strength></tt><tt class=""><br class="">
</tt><tt class=""> <source></tt><tt class=""><br class="">
</tt><tt class="">
<c:path>$user/assignment</c:path></tt><tt class=""><br class="">
</tt><tt class=""> </source></tt><tt class=""><br class="">
</tt><tt class=""> <expression></tt><tt class=""><br class="">
</tt><tt class=""> <value>enabled</value></tt><tt class=""><br class="">
</tt><tt class=""> </expression></tt><tt class=""><br class="">
</tt><tt class=""> <condition></tt><tt class=""><br class="">
</tt><tt class=""> <script></tt><tt class=""><br class="">
</tt><tt class="">
<relativityMode>absolute</relativityMode></tt><tt class=""><br class="">
</tt><tt class=""> <code></tt><tt class=""><br class="">
</tt><tt class="">
!midpoint.isDirectlyAssigned(user,
'a4ce0d72-ebf5-4214-9d76-65f1a98a6ea3')</tt><tt class=""><br class="">
</tt><tt class=""> </code></tt><tt class=""><br class="">
</tt><tt class=""> </script></tt><tt class=""><br class="">
</tt><tt class=""> </condition></tt><tt class=""><br class="">
</tt><tt class=""> </outbound></tt><tt class=""><br class="">
</tt><tt class=""> <outbound></tt><tt class=""><br class="">
</tt><tt class=""> <strength>strong</strength></tt><tt class=""><br class="">
</tt><tt class=""> <source></tt><tt class=""><br class="">
</tt><tt class="">
<c:path>$user/assignment</c:path></tt><tt class=""><br class="">
</tt><tt class=""> </source></tt><tt class=""><br class="">
</tt><tt class=""> <expression></tt><tt class=""><br class="">
</tt><tt class=""> <value>disabled</value></tt><tt class=""><br class="">
</tt><tt class=""> </expression></tt><tt class=""><br class="">
</tt><tt class=""> <condition></tt><tt class=""><br class="">
</tt><tt class=""> <script></tt><tt class=""><br class="">
</tt><tt class="">
<relativityMode>absolute</relativityMode></tt><tt class=""><br class="">
</tt><tt class=""> <code></tt><tt class=""><br class="">
</tt><tt class="">
midpoint.isDirectlyAssigned(user,
'a4ce0d72-ebf5-4214-9d76-65f1a98a6ea3')</tt><tt class=""><br class="">
</tt><tt class=""> </code></tt><tt class=""><br class="">
</tt><tt class=""> </script></tt><tt class=""><br class="">
</tt><tt class=""> </condition></tt><tt class=""><br class="">
</tt><tt class=""> </outbound></tt><tt class=""><br class="">
</tt><br class="">
At least this works for me in 3.3-snapshot. Note the change from
"assignment" to "$user/assignment" and added
"<relativityMode>absolute</relativityMode>" to work
around a subtle problem in providing assignment values to the
expression.<br class="">
<br class="">
Best regards,<br class="">
Pavol<br class="">
<br class="">
</div>
<blockquote cite="mid:561C3018.5050205@evolveum.com" type="cite" class="">
<meta content="text/html; charset=utf-8" http-equiv="Content-Type" class="">
<div class="moz-cite-prefix">Hello Fabio,<br class="">
<br class="">
problem of your code is in that activation/administrativeStatus
is not a real attribute. It is a property of the shadow, not an
attribute of the resource object.<br class="">
<br class="">
I would solve your problem by setting administrativeStatus in
the <activation> part of the AD resource schema handling -
not in the Org inducement.<br class="">
<br class="">
The code could look like this - well, it's just one of the
possibilities:<br class="">
<br class="">
<pre class="code-java"> <activation>
<administrativeStatus>
<outbound>
<strength>strong</strength>
<source>
<c:path>assignment</c:path>
</source>
<expression>
<value>enabled</value>
</expression>
<condition>
<script>
<code>
!midpoint.isDirectlyAssigned(user, 'a4ce0d72-ebf5-4214-9d76-65f1a98a6ea3')
</code>
</script>
</condition>
</outbound>
<outbound>
<strength>strong</strength>
<source>
<c:path>assignment</c:path>
</source>
<expression>
<value>disabled</value>
</expression>
<condition>
<script>
<code>
midpoint.isDirectlyAssigned(user, 'a4ce0d72-ebf5-4214-9d76-65f1a98a6ea3')
</code>
</script>
</condition>
</outbound>
</administrativeStatus>
</activation></pre>
<br class="">
In 3.3-snapshot this does not work <a moz-do-not-send="true" href="https://jira.evolveum.com/browse/MID-2618" class="">because of a
bug</a>, but in 3.2 it could work (please try).<br class="">
<br class="">
Best regards,<br class="">
Pavol<br class="">
<br class="">
<br class="">
On 12. 10. 2015 18:59, Fabio Contessi wrote:<br class="">
</div>
<blockquote cite="mid:C555D53C-BD0C-47DF-A832-40EFEDA1BB5A@nsr.it" type="cite" class="">
<meta http-equiv="Content-Type" content="text/html;
charset=utf-8" class="">
<div class="">
<div class="">Hi,</div>
<div class=""><br class="">
</div>
<div class="">I’m using midPoint 3.2 and I have an Active
Directory as target resource. I need to disable an Active
Directory account when the user linked to the account is
assigned to a particular midPoint Organizational Unit.</div>
<div class=""><br class="">
</div>
<div class="">In the inducement section of the OU I have this
snippet code:</div>
</div>
<div class=""><br class="">
</div>
<div class="">
<div style="font-family: HelveticaNeue;" class=""><inducement
id="1"></div>
<div style="font-family: HelveticaNeue;" class="">
<construction></div>
<div style="font-family: HelveticaNeue;" class="">
<resourceRef oid="Resource-ActiveDirectory"
type="c:ResourceType"></resourceRef></div>
<div style="font-family: HelveticaNeue;" class="">
<kind>account</kind></div>
<div style="font-family: HelveticaNeue;" class="">
<attribute></div>
<div style="font-family: HelveticaNeue;" class="">
<c:ref>activation/administrativeStatus</c:ref></div>
<div style="font-family: HelveticaNeue;" class="">
<outbound></div>
<div style="font-family: HelveticaNeue;" class="">
<expression></div>
<div style="font-family: HelveticaNeue;" class="">
<value>disabled</value></div>
<div style="font-family: HelveticaNeue;" class="">
</expression></div>
<div style="font-family: HelveticaNeue;" class="">
</outbound></div>
<div style="font-family: HelveticaNeue;" class="">
</attribute></div>
<div style="font-family: HelveticaNeue;" class="">
</construction></div>
<div style="font-family: HelveticaNeue;" class="">
</inducement></div>
</div>
<div class=""><br class="">
</div>
<div class="">
<div class="">When I assign a midPoint user to the
Organizational Unit, I receive an error and the operation
fails. </div>
<div class=""><br class="">
</div>
<div class="">What I’m doing wrong? What is the correct way to
do that?</div>
<div class=""><br class="">
</div>
<div class="">Thanks in advance for the help.</div>
<div class=""><br class="">
</div>
<div class="">Regards.</div>
</div>
<div class=""><br class="">
</div>
<div class=""> Fabio</div>
<div class="">
<div apple-content-edited="true" class="">
<div style="letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div class=""><br class="">
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<br class="">
<fieldset class="mimeAttachmentHeader"></fieldset>
<br class="">
<pre wrap="" class="">_______________________________________________
midPoint mailing list
<a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>
<a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br class="">
</blockquote>
<br class="">
</div>
_______________________________________________<br class="">midPoint mailing list<br class=""><a href="mailto:midPoint@lists.evolveum.com" class="">midPoint@lists.evolveum.com</a><br class="">http://lists.evolveum.com/mailman/listinfo/midpoint<br class=""></div></blockquote></div><br class=""></body></html>