<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">I can explain the error.<br>
<br>
Long, long time ago we have based midPoint data model on XML
Schemas. There were many reasons for this, but the most important
one was that XSD was (and still somehow is) one-eyed king among
the blind. However, the XSD is not a perfect fit for what we need.
And the XML and XSD libraries are even worse (read: absolutely
terrible). So we had to make compromises. And in the end we have
rewritten good part of XML-processing libraries for our purposes.
We have created a new quasi-primitive types, such as the
ProtectedString used for password storage. But due to the
compromises that we have to make it is not properly detected in
all the places. E.g. this specific place is a mapping. And for
various complex reasons the data types inside the <value>
are not detected correctly and the value will not get encrypted
during object import as it normally should.<br>
<br>
So, currently, there is no practical way how to have encrypted
default password in the XML and use it in the expression in
mapping. So the hack with basic.encrypt(..) is probably the best
way how to do this now.<br>
<br>
This is not really a fault of midPoint architecture. This is the
state of the art. The declarative data modeling and representation
and code generation are big problems now. And no, JSON is not a
solution. It does not make these things significantly better in
any way (although we have plans to support JSON and we even have a
prototype code).<br>
<br>
We have a vision and a plan for this. The larger evolution on the
"prism" and "schema" layers is planned for late 2017 to be part of
midPoint 4. This should provide solution to this issue and a lot
of related issues. It is just not that easy to implement. So we
need more time to get ready and accumulate the funding.<br>
<br>
In the meantime there may be some features that may somehow remedy
this problem. E.g. use of constants or expression libraries (e.g.
<a class="moz-txt-link-freetext" href="https://jira.evolveum.com/browse/MID-1327">https://jira.evolveum.com/browse/MID-1327</a>). We are planning these
for a long time. But there does not seem to be sufficient demand
for these things to find their way into the roadmap.<br>
<br>
<pre class="moz-signature" cols="72">--
Radovan Semancik
Software Architect
evolveum.com
</pre>
<br>
<br>
On 04/14/2016 04:27 PM, Aivo Kuhlberg wrote:<br>
</div>
<blockquote cite="mid:1460644041974.90601@rmit.ee" type="cite">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<style type="text/css" style="display:none"><!--P{margin-top:0;margin-bottom:0;} --></style>
<p>How can I set initial password for midPoint 3.3.1 user when I
import them from csv-file. I tried to use something like that in
</p>
<p>schemaHandling section:<br>
<br>
<credentials><br>
<password><br>
<inbound><br>
<strength>weak</strength><br>
<expression><br>
<value>5ecr3t</value><br>
</expression><br>
</inbound><br>
</password><br>
</credentials><br>
<br>
but user import fails with following error:<br>
Failed to import: java.lang.IllegalStateException: Unencrypted
value in field
{<a class="moz-txt-link-freetext" href="http://midpoint.evolveum.com/xml/ns/public/common/common-3">http://midpoint.evolveum.com/xml/ns/public/common/common-3</a>}value
in user:null(test.user5)<br>
<br>
Thanks,<br>
Aivo Kuhlberg<br>
</p>
<br>
<hr>
<font face="Arial" size="2" color="Gray">Käesolev e-kiri võib
sisaldada asutusesiseseks kasutamiseks tunnistatud teavet.<br>
This e-mail may contain information which is classified for
official use.</font>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
midPoint mailing list
<a class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>
<a class="moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
<br>
</body>
</html>