<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">Hi Samu,<br>
<br>
AD Livesync with LDAP connector is supposed to work and it indeed
works in my tests. Here's the setup on midPoint side:<br>
<br>
<a class="moz-txt-link-freetext" href="https://github.com/Evolveum/midpoint/tree/master/testing/conntest/src/test/resources/ad-ldap">https://github.com/Evolveum/midpoint/tree/master/testing/conntest/src/test/resources/ad-ldap</a><br>
<br>
I have documented the entire setup in this wiki page:<br>
<br>
<a class="moz-txt-link-freetext" href="https://wiki.evolveum.com/display/midPoint/Active+Directory+with+LDAP+connector">https://wiki.evolveum.com/display/midPoint/Active+Directory+with+LDAP+connector</a><br>
<br>
However, I'm not really sure what are exactly the access rights
and setup to be done on the AD side.<br>
<br>
Perhaps the best steps for you are to enable trace on ConnId
framework and LDAP connector. Set up logging like this:<br>
<br>
org.identityconnectors.framework: TRACE<br>
com.evolveum.polygon.connector.ldap: TRACE<br>
<br>
The midPoint logfiles should tell you what exactly is going on and
why are you not getting any synchronization events. You should see
invocation of ConnId sync() method, then LDAP connector detecting
the change, invocation of ConnId handle() method for each change
and then midPoint provisioning and model (notifyChange() method)
processing the change.<br>
<br>
However, please be warned: if the problem is on the AD side then
all you usually get is "unwilling to perform" error and I have
found no practical way how to figure out what is going on on the
AD side. AD logfiles are mostly useless. So good old guessing and
trial and error is often the only way ...<br>
<br>
<pre class="moz-signature" cols="72">--
Radovan Semancik
Software Architect
evolveum.com
</pre>
<br>
<br>
On 12/30/2015 09:40 AM, Samu Viitanen wrote:<br>
</div>
<blockquote cite="mid:DUB117-W3383E87642F46092478EE5D1FD0@phx.gbl"
type="cite">
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style>
<div dir="ltr">Hello,<br>
<br>
I have experimented with the new experimental AD with LDAP
connector, and in my solution the Live Synchronization does not
seem to work. Is it supposed to work or is that still TODO? I
keep getting a warning about current sync token being null and
it does not sync anything from AD, but the task is still running
fine. If it should work, is there something special I need to
take into consideration to get it working?<br>
<br>
Best Regards<br>
Samu Viitanen<br>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
midPoint mailing list
<a class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>
<a class="moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
<br>
<pre class="moz-signature" cols="72">
</pre>
</body>
</html>