<html>
  <head>
    <meta content="text/html; charset=utf-8" http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    <p>Hi,<br>
      <br>
      my mistake, sorry. I use it in Active Directory (LDAP) connector
      in which it works. <br>
      <br>
      Regards<br>
      MiSo</p>
    <br>
    <div class="moz-cite-prefix">On 31.08.2016 12:17, Ivan Noris wrote:<br>
    </div>
    <blockquote
      cite="mid:4b0f769a-2596-3222-26ad-33e846d6b23e@evolveum.com"
      type="cite">
      <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
      <p>Unfortunately, weak mapping for password will probably not
        work, at least not with the connectors, which are not fetching
        the current password from the remote system (which is also the
        case for AD .NET connector).</p>
      <p>As the connector does not return the current value, it is
        considered "empty" and the mapping will still be evaluated when
        the password change occurs in midPoint user (even with the weak
        strength).</p>
      <p><br>
      </p>
      <p>I will try to find another solution (except of what already
        Roman provided) in my spare time and report back.</p>
      <p><br>
      </p>
      <p>Regards,</p>
      <p>Ivan<br>
      </p>
      <br>
      <div class="moz-cite-prefix">On 08/31/2016 11:21 AM, Michal
        Štekláč wrote:<br>
      </div>
      <blockquote
        cite="mid:a79e15bb-33e1-9941-a3f0-7101809c3460@datalan.sk"
        type="cite">
        <p>Hi,</p>
        <p><br>
        </p>
        <p>Try to set strength to weak</p>
        <p>...<br>
        </p>
        <p><credentials><br>
              <password><br>
                  <outbound><br>
                      <strength>weak</strength><br>
                  </outbound><br>
              </password><br>
          </credentials></p>
        <p>....<br>
        </p>
        <p>On <a moz-do-not-send="true" class="moz-txt-link-freetext"
href="https://wiki.evolveum.com/display/midPoint/Mapping#Mapping-MappingStrength">https://wiki.evolveum.com/display/midPoint/Mapping#Mapping-MappingStrength</a>
          page you will find a description for the setting attribute
          Strength.<br>
        </p>
        <p><br>
        </p>
        <p>Regards,<br>
        </p>
        <p>MiSo<br>
        </p>
        <br>
        <div class="moz-cite-prefix">On 31.08.2016 10:52, Aivo Kuhlberg
          wrote:<br>
        </div>
        <blockquote cite="mid:1472633560188.57441@rmit.ee" type="cite">
          <style type="text/css" style="display:none"><!--P{margin-top:0;margin-bottom:0;} --></style>
          <p>Hi,<br>
            I am using midPoint 3.4 with .NET AD connector and here are
            my current schemaHandling password settings for AD
            connector:<br>
          </p>
          <p><br>
          </p>
          <p><span style="font-family: Consolas,monospace; color:
              rgb(114, 50, 173);"><span style="color: rgb(114, 50,
                173);">         <credentials></span><br
                style="color: rgb(114, 50, 173);">
              <span style="color: rgb(114, 50, 173);">           
                <password></span><br style="color: rgb(114, 50,
                173);">
              <span style="color: rgb(114, 50, 173);">              
                <outbound/></span><br style="color: rgb(114, 50,
                173);">
              <span style="color: rgb(114, 50, 173);">           
                </password></span><br style="color: rgb(114, 50,
                173);">
              <span style="color: rgb(114, 50, 173);">        
                </credentials></span><br style="color: rgb(114,
                50, 173);">
            </span></p>
          <p><br>
          </p>
          <p>These settings means that AD user password changes every
            time when it is changed in midPoint.<br>
            I do not want to manage AD users passwords at the moment
            with midPoint but I still want to set AD user password in
            situation when midPoint creates a new AD account. In all
            other sync situations AD password should not be changed. How
            should I implement that?<br>
            <br>
            Thanks,<br>
            Aivo Kuhlberg<br>
          </p>
          <br>
          <hr> <font face="Arial" color="Gray" size="2">Käesolev e-kiri
            võib sisaldada asutusesiseseks kasutamiseks tunnistatud
            teavet.<br>
            This e-mail may contain information which is classified for
            official use.</font> <br>
          <br>
          __________ Information from ESET Mail Security, version of
          virus signature database 14045 (20160831) __________<br>
          <br>
          The message was checked by ESET Mail Security.<br>
          <a moz-do-not-send="true" href="http://www.eset.com">http://www.eset.com</a><br>
          <br>
          <fieldset class="mimeAttachmentHeader"></fieldset>
          <br>
          <pre wrap="">_______________________________________________
midPoint mailing list
<a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>
<a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
        </blockquote>
        <br>
        <br>
        <fieldset class="mimeAttachmentHeader"></fieldset>
        <br>
        <pre wrap="">_______________________________________________
midPoint mailing list
<a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>
<a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
      </blockquote>
      <br>
      <pre class="moz-signature" cols="72">-- 
Ivan Noris
Senior Identity Engineer
evolveum.com
</pre>
      <br>
      <br>
      __________ Information from ESET Mail Security, version of virus
      signature database 14046 (20160831) __________<br>
      <br>
      The message was checked by ESET Mail Security.<br>
      <a moz-do-not-send="true" href="http://www.eset.com">http://www.eset.com</a><br>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <br>
      <pre wrap="">_______________________________________________
midPoint mailing list
<a class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>
<a class="moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
    </blockquote>
    <br>
  </body>
</html>