<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Hi,<br>
<br>
There is currently no easy way how to do this. This is one of the
issues that are waiting for funding or contribution. Please see:<br>
<a class="moz-txt-link-freetext" href="https://jira.evolveum.com/browse/MID-2104">https://jira.evolveum.com/browse/MID-2104</a><br>
<a class="moz-txt-link-freetext" href="https://jira.evolveum.com/browse/MID-2103">https://jira.evolveum.com/browse/MID-2103</a><br>
<br>
What you can do about it is described here:
<a class="moz-txt-link-freetext" href="https://wiki.evolveum.com/display/midPoint/I+Need+New+Feature">https://wiki.evolveum.com/display/midPoint/I+Need+New+Feature</a><br>
<br>
These features would be really useful and they are waiting for some
time already ...<br>
In the meantime you can probably do some magic with scripting hooks
(<a class="moz-txt-link-freetext" href="https://wiki.evolveum.com/display/midPoint/Scripting+Hooks">https://wiki.evolveum.com/display/midPoint/Scripting+Hooks</a>) but
that is not an easy approach and it definitely is not the right one.
The correct approach would be to develop the necessary features.<br>
<br>
<pre class="moz-signature" cols="72">--
Radovan Semancik
Software Architect
evolveum.com
</pre>
<br>
<br>
<div class="moz-cite-prefix">On 08/30/2016 01:09 AM,
<a class="moz-txt-link-abbreviated" href="mailto:pdbogen@cernu.us">pdbogen@cernu.us</a> wrote:<br>
</div>
<blockquote cite="mid:20160829230919.GQ6336@cernu.us" type="cite">
<pre wrap="">Howdy!
I have MidPoint set up to create users and roles from the inetOrgPersons and
groupOfMembers in OpenLDAP, respectively.
GroupOfMembers are created using a template that assigns a meta-role that
induces a 2nd order assignment of the correct entitlement- so in other words,
assigning the role in midpoint correctly associates the entitlement, and
changes LDAP properly.
My concern right now is the other direction- maybe just for initial import,
maybe ongoing; I'd like new associations from LDAP to add the role to the
affected account.
I.e., if cn=patrick is added to role cn=midpoint.admin in LDAP, the
corresponding 'patrick' user in MidPoint should be assigned the
'midpoint.admin' role.
I think they may be a concept I'm missing to implement this, so I'm not sure
if anything is 'wrong' at this stage.
Thoughts? What information can I provide to help figure this out?
Thanks!
</pre>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
midPoint mailing list
<a class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>
<a class="moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
</body>
</html>