<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
Hi Dick,<br>
<br>
I was just testing this and this is how it works:<br>
<br>
1) if attribute is set as tolerant, it means, that <b>during
reconciliation</b>, the other values of the attribute (not
mandated by midPoint mappings) will be tolerated, i.e. kept, not
removed. This is fine if you manage some group membership by
midPoint and other membership by other means, i.e. manually and you
wish to have both. If attribute is not tolerant, midPoint would
remove the values that are not provided by mappings in resource
schema handling and/or role mappings.<br>
<br>
2) tolerantValuePattern and intolerantValuePattern work also only
during reconciliation, but you can specify regexps to match.<br>
Sample for carLicense in LDAP resource:<br>
<attribute><br>
<c:ref>ri:carLicense</c:ref><br>
<tolerant>true</tolerant><br>
<tolerantValuePattern>^Secret.*$</tolerantValuePattern><br>
<intolerantValuePattern>^.*$</intolerantValuePattern><br>
</attribute><br>
<br>
This means, that during reconciliation, only values starting with
Secret will be kept and all other will be removed.<br>
To test this silly example, I've done the following:<br>
<br>
- put the above attribute definition to OpenLDAP sample<br>
- added OpenLDAP account as projection / assigned role constructing
the account<br>
- added several values of carLicense attribute manually or using
midPoint (Projections-OpenLDAP-expand-carLicense-"+"). From these
values, one is "Secret is my food", second is "XXX", third is "Too
many secrets".<br>
- edited the user again in midPoint, checked "reconcile" checkbox
and saved.<br>
<br>
After the save (with reconcile checkbox) all values except the
"Secret is my food" are removed from the attribute carLicense,
because they are not mandated by any mapping. The value "Secret is
my food" is not removed, because it matches the
"tolerantValuePattern".<br>
<br>
The documentation for these little beasts is also in schema:
<a class="moz-txt-link-freetext" href="https://github.com/Evolveum/midpoint/blob/master/infra/schema/src/main/resources/xml/ns/public/common/common-core-3.xsd">https://github.com/Evolveum/midpoint/blob/master/infra/schema/src/main/resources/xml/ns/public/common/common-core-3.xsd</a><br>
<br>
Hope this helps. I have not yet used this tolerant patterns, so if
there are further questions please ask.<br>
<br>
Regards,<br>
Ivan<br>
<br>
<div class="moz-cite-prefix">On 05/26/2016 04:00 PM, Dick Muller
wrote:<br>
</div>
<blockquote
cite="mid:46DB2E7F-5C8F-4E95-AB66-AA8219CB20B1@tahzoo.com"
type="cite">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Title" content="">
<meta name="Keywords" content="">
<meta name="Generator" content="Microsoft Word 15 (filtered
medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]-->
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:0 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:Calibri;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:Calibri;
color:windowtext;}
span.msoIns
{mso-style-type:export-only;
mso-style-name:"";
text-decoration:underline;
color:teal;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:Calibri;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style>
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt">Hi,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Is there
somebody that can explain how the tolerant checkbox and
tolerant patterns work.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">I want to
allow values with the tolerant pattern that end with
dc=domainname, dc=com.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Is that
possible with this function?<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Kindest
regards,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<div>
<p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Times New
Roman";color:black"> <o:p></o:p></span></p>
<div>
<div>
<div class="MsoNormal"><span
style="font-size:10.5pt;color:black">
<hr style="width:187.5pt" size="1" width="250"
align="left">
</span></div>
</div>
</div>
<p class="MsoNormal"><b><span
style="font-size:9.0pt;font-family:Helvetica;color:#1D6084">Dick
Muller</span></b><span
style="font-size:11.0pt;font-family:"Times New
Roman";color:black"><o:p></o:p></span></p>
<p class="MsoNormal" style="background:white"><span
style="font-size:10.0pt;font-family:Helvetica;color:#646464">Senior
Systems Engineer</span><span
style="font-size:11.0pt;font-family:"Times New
Roman";color:black"><o:p></o:p></span></p>
<p class="MsoNormal"
style="margin-bottom:12.0pt;background:white"><span
style="font-size:8.5pt;font-family:Helvetica;color:#646464">Delftechpark
37i<br>
2628 XJ Delft<b><br>
d</b>: +31 88 2682586 <br>
<b>m:</b> +31 6 46477690</span><span
style="font-size:11.0pt;font-family:"Times New
Roman";color:black"><o:p></o:p></span></p>
<p class="MsoNormal" style="background:white"><a
moz-do-not-send="true" href="http://www.tahzoo.com/"
target="_blank"><span
style="font-size:11.0pt;font-family:"Times New
Roman";color:#954F72;text-decoration:none"><img
id="_x0000_i1026"
src="cid:part1.04070808.04040001@evolveum.com"
height="48" width="125" border="0"></span></a><span
style="font-size:11.0pt;font-family:"Times New
Roman";color:black"><o:p></o:p></span></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
midPoint mailing list
<a class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>
<a class="moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
<pre class="moz-signature" cols="72">--
Ing. Ivan Noris
Senior Identity Management Engineer & IDM Architect
evolveum.com evolveum.com/blog/
___________________________________________________
"Semper ID(e)M Vix."
</pre>
</body>
</html>