<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<p>Unfortunately, weak mapping for password will probably not work,
at least not with the connectors, which are not fetching the
current password from the remote system (which is also the case
for AD .NET connector).</p>
<p>As the connector does not return the current value, it is
considered "empty" and the mapping will still be evaluated when
the password change occurs in midPoint user (even with the weak
strength).</p>
<p><br>
</p>
<p>I will try to find another solution (except of what already Roman
provided) in my spare time and report back.</p>
<p><br>
</p>
<p>Regards,</p>
<p>Ivan<br>
</p>
<br>
<div class="moz-cite-prefix">On 08/31/2016 11:21 AM, Michal Štekláč
wrote:<br>
</div>
<blockquote
cite="mid:a79e15bb-33e1-9941-a3f0-7101809c3460@datalan.sk"
type="cite">
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
<p>Hi,</p>
<p><br>
</p>
<p>Try to set strength to weak</p>
<p>...<br>
</p>
<p><credentials><br>
<password><br>
<outbound><br>
<strength>weak</strength><br>
</outbound><br>
</password><br>
</credentials></p>
<p>....<br>
</p>
<p>On
<a moz-do-not-send="true" class="moz-txt-link-freetext"
href="https://wiki.evolveum.com/display/midPoint/Mapping#Mapping-MappingStrength">https://wiki.evolveum.com/display/midPoint/Mapping#Mapping-MappingStrength</a>
page you will find a description for the setting attribute
Strength.<br>
</p>
<p><br>
</p>
<p>Regards,<br>
</p>
<p>MiSo<br>
</p>
<br>
<div class="moz-cite-prefix">On 31.08.2016 10:52, Aivo Kuhlberg
wrote:<br>
</div>
<blockquote cite="mid:1472633560188.57441@rmit.ee" type="cite">
<meta http-equiv="Content-Type" content="text/html;
charset=utf-8">
<style type="text/css" style="display:none"><!--P{margin-top:0;margin-bottom:0;} --></style>
<p>Hi,<br>
I am using midPoint 3.4 with .NET AD connector and here are my
current schemaHandling password settings for AD connector:<br>
</p>
<p><br>
</p>
<p><span style="font-family: Consolas,monospace; color: rgb(114,
50, 173);"><span style="color: rgb(114, 50, 173);">
<credentials></span><br style="color: rgb(114, 50,
173);">
<span style="color: rgb(114, 50, 173);">
<password></span><br style="color: rgb(114, 50,
173);">
<span style="color: rgb(114, 50, 173);">
<outbound/></span><br style="color: rgb(114, 50,
173);">
<span style="color: rgb(114, 50, 173);">
</password></span><br style="color: rgb(114, 50,
173);">
<span style="color: rgb(114, 50, 173);">
</credentials></span><br style="color: rgb(114, 50,
173);">
</span></p>
<p><br>
</p>
<p>These settings means that AD user password changes every time
when it is changed in midPoint.<br>
I do not want to manage AD users passwords at the moment with
midPoint but I still want to set AD user password in
situation when midPoint creates a new AD account. In all other
sync situations AD password should not be changed. How should
I implement that?<br>
<br>
Thanks,<br>
Aivo Kuhlberg<br>
</p>
<br>
<hr> <font color="Gray" face="Arial" size="2">Käesolev e-kiri
võib sisaldada asutusesiseseks kasutamiseks tunnistatud
teavet.<br>
This e-mail may contain information which is classified for
official use.</font> <br>
<br>
__________ Information from ESET Mail Security, version of virus
signature database 14045 (20160831) __________<br>
<br>
The message was checked by ESET Mail Security.<br>
<a moz-do-not-send="true" href="http://www.eset.com">http://www.eset.com</a><br>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
midPoint mailing list
<a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>
<a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
midPoint mailing list
<a class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>
<a class="moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
<pre class="moz-signature" cols="72">--
Ivan Noris
Senior Identity Engineer
evolveum.com
</pre>
</body>
</html>