<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns:mv="http://macVmlSchemaUri" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Title" content="">
<meta name="Keywords" content="">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Courier New";
panose-1:2 7 3 9 2 2 5 2 4 4;}
@font-face
{font-family:宋体;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0in;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:Courier;}
span.hoenzb
{mso-style-name:hoenzb;}
span.EmailStyle20
{mso-style-type:personal;
font-family:Calibri;
color:windowtext;}
span.EmailStyle22
{mso-style-type:personal-reply;
font-family:Calibri;
color:windowtext;}
span.msoIns
{mso-style-type:export-only;
mso-style-name:"";
text-decoration:underline;
color:teal;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style>
</head>
<body bgcolor="white" lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:Calibri">Pardon my misspelling of your name in the email below, Pavol.<o:p></o:p></span></p>
<div>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:Calibri;color:black">___________________________________</span><span style="font-size:10.5pt;font-family:Calibri;color:#888888"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:Calibri;color:#888888">email & jabber:
<a href="mailto:keith.hazelton@wisc.edu" target="_blank">keith.hazelton@wisc.edu</a><o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:Calibri;color:#888888">calendar:
<a href="http://go.wisc.edu/i6zxx0" target="_blank">http://go.wisc.edu/i6zxx0</a></span><span style="font-size:11.0pt;font-family:Calibri"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:Calibri"><o:p> </o:p></span></p>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-family:Calibri;color:black">From: </span>
</b><span style="font-family:Calibri;color:black">Keith Hazelton <keith.hazelton@wisc.edu><br>
<b>Date: </b>Wednesday, September 14, 2016 at 12:37 <br>
<b>To: </b>midPoint General Discussion <midpoint@lists.evolveum.com><br>
<b>Subject: </b>Re: [midPoint] Discovering Custom objectClasses<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<blockquote style="border:none;border-left:solid #B5C4DF 4.5pt;padding:0in 0in 0in 4.0pt;margin-left:3.75pt;margin-right:0in" id="MAC_OUTLOOK_ATTRIBUTION_BLOCKQUOTE">
<div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:Calibri">Pavel,</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:Calibri"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:Calibri">I think I understand the changes needed to support auxiliary object classes and their attributes in midPoint resource definitions. You provide an example using curl to PUT a revised resource
definition xml file via midPoint’s RESTful API. </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:Calibri"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:Calibri">My question is would it work equally well to use the midPoint Admin GUI, browse to the ‘localhost OpenDJ’ resource and directly edit the xml there?
</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:Calibri"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:Calibri"> Regards, --Keith</span><o:p></o:p></p>
<div>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:Calibri;color:black">___________________________________</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:Calibri;color:#888888">email & jabber:
<a href="mailto:keith.hazelton@wisc.edu" target="_blank">keith.hazelton@wisc.edu</a></span><o:p></o:p></p>
</div>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:Calibri;color:#888888">calendar:
<a href="http://go.wisc.edu/i6zxx0" target="_blank">http://go.wisc.edu/i6zxx0</a></span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:Calibri"> </span><o:p></o:p></p>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-family:Calibri;color:black">From: </span>
</b><span style="font-family:Calibri;color:black">midPoint <midpoint-bounces@lists.evolveum.com> on behalf of Pavol Mederly <pavol.mederly@evolveum.com><br>
<b>Reply-To: </b>midPoint General Discussion <midpoint@lists.evolveum.com><br>
<b>Date: </b>Friday, August 19, 2016 at 13:04 <br>
<b>To: </b>midPoint General Discussion <midpoint@lists.evolveum.com><br>
<b>Subject: </b>Re: [midPoint] Discovering Custom objectClasses</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"> <o:p></o:p></p>
</div>
<blockquote style="border:none;border-left:solid #B5C4DF 4.5pt;padding:0in 0in 0in 4.0pt;margin-left:3.75pt;margin-top:5.0pt;margin-right:0in;margin-bottom:5.0pt" id="MAC_OUTLOOK_ATTRIBUTION_BLOCKQUOTE">
<div>
<div>
<div>
<div>
<p class="MsoNormal"><span style="color:black">Matt,</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="color:black"> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="color:black">as for your second question,</span><o:p></o:p></p>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class="MsoNormal"><span style="color:black">Also, my resource XML that I edit and put in my source control system.... Is there a place to put that in midpoint.home that gets imported automatically (midpoint.home/import)? Or do I need to manually import
that every time I make a change to it?</span><o:p></o:p></p>
</div>
</blockquote>
<div>
<p class="MsoNormal"><span style="color:black">We do not recommend such auto-import feature, although it could be implemented quite easily. We prefer importing the resource after a change instead. It is not necessary to do that via GUI, however. You could prepare
simple scripts that would do the same: an example is this one:</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="color:black"> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="color:blue">curl.exe --user administrator:5ecr3t -H "Content-Type: application/xml" -X PUT http://localhost:8080/midpoint/ws/rest/resources/<strong>ef2bc95b-76e0-48e2-86d6-3d4f02d3e1a2</strong> -d @<strong>resource.xml</strong>
-v</span><o:p></o:p></p>
<div>
<p class="MsoNormal"><span style="color:black"> </span><o:p></o:p></p>
</div>
</div>
<div>
<p class="MsoNormal"><span style="color:black">Note that </span><strong><span style="color:blue">ef2bc95b-76e0-48e2-86d6-3d4f02d3e1a2</span></strong><span style="color:black"> is OID of the object to be imported or re-imported. (And, as of 3.4, it has to be
present also in the resource.xml file that is being imported: in oid attribute of the resource object.)</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="color:black"> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="color:black">I'd suggest creating a simple .bat (.sh) file containing the above command and invoking it after you make a change in the resource XML file.</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="color:black"> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="color:black">Also, if time permits, we hope to prepare an Eclipse plugin that would allow uploading such XML files by clicking of a key. (See
<a href="https://jira.evolveum.com/browse/MID-3358">MID-3358</a>.)</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="color:black"> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="color:black">Best regards,</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="color:black">Pavol</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="color:black"> </span><o:p></o:p></p>
</div>
<div class="MsoNormal" align="center" style="text-align:center"><span style="color:black">
<hr size="2" width="100%" align="center">
</span></div>
<div>
<p class="MsoNormal"><b><span style="font-family:Helvetica;color:black">From: </span>
</b><span style="font-family:Helvetica;color:black">"Jason Everling" <jeverling@bshp.edu><br>
<b>To: </b>"midPoint General Discussion" <midpoint@lists.evolveum.com><br>
<b>Sent: </b>Friday, August 19, 2016 6:49:15 PM<br>
<b>Subject: </b>Re: [midPoint] Discovering Custom objectClasses</span><o:p></o:p></p>
<div>
<p class="MsoNormal"><span style="font-family:Helvetica;color:black"> </span><o:p></o:p></p>
</div>
<div>
<div>
<p class="MsoNormal"><span style="font-family:Helvetica;color:black">I can answer the first question, 2 options, taken from ours ,
</span><o:p></o:p></p>
<div>
<p class="MsoNormal"><span style="font-family:Helvetica;color:black"> </span><o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><span style="font-family:Helvetica;color:black">Add a protected section for everything you do not want to sync,<br>
<a href="https://github.com/Evolveum/midpoint/blob/master/samples/resources/opendj/opendj-localhost-resource-sync-advanced.xml#L309" target="_blank">https://github.com/Evolveum/midpoint/blob/master/samples/resources/opendj/opendj-localhost-resource-sync-advanced.xml#L309</a></span><o:p></o:p></p>
<div>
<p class="MsoNormal"><span style="font-family:Helvetica;color:black"> </span><o:p></o:p></p>
</div>
<pre><span style="color:black"><protected></span><o:p></o:p></pre>
<pre><a name="BSHP_ad_development.xml-567"></a><span style="color:black"> <filter></span><o:p></o:p></pre>
<pre><a name="BSHP_ad_development.xml-568"></a><span style="color:black"> <q:substring xmlns:q="<a href="http://prism.evolveum.com/xml/ns/public/query-3" target="_blank">http://prism.evolveum.com/xml/ns/public/query-3</a>"></span><o:p></o:p></pre>
<pre><a name="BSHP_ad_development.xml-569"></a><span style="color:black"> <q:matching>stringIgnoreCase</q:matching></span><o:p></o:p></pre>
<pre><a name="BSHP_ad_development.xml-570"></a><span style="color:black"> <q:path>attributes/name</q:path></span><o:p></o:p></pre>
<pre><a name="BSHP_ad_development.xml-571"></a><span style="color:black"> <q:value>OU=TEMPLATE,DC=TEST,DC=LOCAL</q:value></span><o:p></o:p></pre>
<pre><a name="BSHP_ad_development.xml-572"></a><span style="color:black"> <q:anchorEnd>true</q:anchorEnd></span><o:p></o:p></pre>
<pre><a name="BSHP_ad_development.xml-573"></a><span style="color:black"> </q:substring></span><o:p></o:p></pre>
<pre><a name="BSHP_ad_development.xml-574"></a><span style="color:black"> </filter></span><o:p></o:p></pre>
<pre><a name="BSHP_ad_development.xml-575"></a><span style="color:black"></protected></span><o:p></o:p></pre>
<p class="MsoNormal"><span style="font-family:Helvetica;color:black"> </span><o:p></o:p></p>
<div>
<p class="MsoNormal"><span style="font-family:Helvetica;color:black"><br>
you could also instead add into the objectSynchronization section. Not necessarily based on a query but more of specific attribute values. In the below (..... ....... 'info') is the ad attribute and values are mpSecurity or mpDistribution . This keeps midPoint
from syncing all AD groups and only the ones we want to sync.</span><o:p></o:p></p>
<div>
<p class="MsoNormal"><span style="font-family:Helvetica;color:black"> </span><o:p></o:p></p>
</div>
<pre><span style="color:black"> <objectSynchronization></span><o:p></o:p></pre>
<pre><a name="BSHP_ad_development.xml-970"></a><span style="color:black"> <objectClass>ri:CustomGroupObjectClass</objectClass></span><o:p></o:p></pre>
<pre><a name="BSHP_ad_development.xml-971"></a><span style="color:black"> <kind>entitlement</kind></span><o:p></o:p></pre>
<pre><a name="BSHP_ad_development.xml-972"></a><span style="color:black"> <intent>group</intent></span><o:p></o:p></pre>
<pre><a name="BSHP_ad_development.xml-973"></a><span style="color:black"> <focusType>c:RoleType</focusType></span><o:p></o:p></pre>
<pre><a name="BSHP_ad_development.xml-974"></a><span style="color:black"> <enabled>true</enabled></span><o:p></o:p></pre>
<pre><a name="BSHP_ad_development.xml-975"></a><span style="color:black"> <!-- Only Sync Groups from AD that have info set as either "mpSecurity" or "mpDistribution" --></span><o:p></o:p></pre>
<pre><a name="BSHP_ad_development.xml-976"></a><span style="color:black"> <condition></span><o:p></o:p></pre>
<pre><a name="BSHP_ad_development.xml-977"></a><span style="color:black"> <script></span><o:p></o:p></pre>
<pre><a name="BSHP_ad_development.xml-978"></a><span style="color:black"> <code></span><o:p></o:p></pre>
<pre><a name="BSHP_ad_development.xml-979"></a><span style="color:black"> tmp = basic.getAttributeValue(shadow, '<a href="http://midpoint.evolveum.com/xml/ns/public/resource/instance-3" target="_blank">http://midpoint.evolveum.com/xml/ns/public/resource/instance-3</a>', 'info');</span><o:p></o:p></pre>
<pre><a name="BSHP_ad_development.xml-980"></a><span style="color:black"> return (tmp == 'mpSecurity' || tmp == 'mpDistribution')</span><o:p></o:p></pre>
<pre><a name="BSHP_ad_development.xml-981"></a><span style="color:black"> </code></span><o:p></o:p></pre>
<pre><a name="BSHP_ad_development.xml-982"></a><span style="color:black"> </script><br> </condition></span><o:p></o:p></pre>
<p class="MsoNormal"><span style="font-family:Helvetica;color:black"> </span><o:p></o:p></p>
</div>
</div>
<div>
<p class="MsoNormal"><span style="font-family:Helvetica;color:black"><br clear="all">
</span><o:p></o:p></p>
<div>
<div>
<div>
<p class="MsoNormal"><span style="font-family:Helvetica;color:black">JASON</span><o:p></o:p></p>
</div>
</div>
</div>
<p class="MsoNormal"><span style="font-family:Helvetica;color:black"> </span><o:p></o:p></p>
<div>
<p class="MsoNormal"><span style="font-family:Helvetica;color:black">On Fri, Aug 19, 2016 at 11:35 AM, Mencel, Matt <<a href="mailto:mr-mencel@wiu.edu" target="_blank">mr-mencel@wiu.edu</a>> wrote:</span><o:p></o:p></p>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bottom:5.0pt">
<div>
<p class="MsoNormal"><span style="font-family:Helvetica;color:black">OK. I think it's correct in the XML. It's just throwing the warning in the UI. I'll try a sync and see how it goes.
</span><o:p></o:p></p>
<div>
<p class="MsoNormal"><span style="font-family:Helvetica;color:black"> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:Helvetica;color:black">Is there a way to specify an LDAP query for the sync/import? I just want to sync for example my department '(&(objectClass=person)(department=IT))' during testing, rather than every user
object in my LDAP directory.</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:Helvetica;color:black"> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:Helvetica;color:black"> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:Helvetica;color:black">Also, my resource XML that I edit and put in my source control system.... Is there a place to put that in midpoint.home that gets imported automatically (midpoint.home/import)? Or do I need
to manually import that every time I make a change to it?</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:Helvetica;color:black"> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:Helvetica;color:black">Thanks for being patient with my questions...</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:Helvetica;color:#888888"> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:Helvetica;color:#888888">Matt</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:Helvetica;color:#888888"> </span><o:p></o:p></p>
</div>
</div>
<div>
<p class="MsoNormal"><span style="font-family:Helvetica;color:black"> </span><o:p></o:p></p>
<div>
<p class="MsoNormal"><span style="font-family:Helvetica;color:black">On Fri, Aug 19, 2016 at 11:22 AM, Pavol Mederly <<a href="mailto:pavol.mederly@evolveum.com" target="_blank">pavol.mederly@evolveum.com</a>> wrote:</span><o:p></o:p></p>
<div>
<div>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bottom:5.0pt">
<div>
<div>
<div>
<p class="MsoNormal"><span style="color:black">Hello Matt,</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="color:black"> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="color:black">I'm afraid that the resource wizard maybe does not work 100% correctly with auxiliary classes. At least I haven't tested it in this way when preparing it for 3.4 release. I've now created
<a href="https://jira.evolveum.com/browse/MID-3359" target="_blank">MID-3359</a> for it.</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="color:black"> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="color:black">For the time being, I'd recommend setting schemaHandling for that particular attribute by hand (via XML editor).</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="color:black"> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="color:black">Best regards,</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="color:black">Pavol</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="color:black"> </span><o:p></o:p></p>
</div>
<div class="MsoNormal" align="center" style="text-align:center"><span style="color:black">
<hr size="2" width="100%" align="center">
</span></div>
<div>
<p class="MsoNormal"><b><span style="font-family:Helvetica;color:black">From: </span>
</b><span style="font-family:Helvetica;color:black">"Matt Mencel" <<a href="mailto:mr-mencel@wiu.edu" target="_blank">mr-mencel@wiu.edu</a>><br>
<b>To: </b>"midPoint General Discussion" <<a href="mailto:midpoint@lists.evolveum.com" target="_blank">midpoint@lists.evolveum.com</a>><br>
<b>Sent: </b>Friday, August 19, 2016 6:11:13 PM<br>
<b>Subject: </b>Re: [midPoint] Discovering Custom objectClasses </span><o:p></o:p></p>
<div>
<div>
<p class="MsoNormal"><span style="font-family:Helvetica;color:black"> </span><o:p></o:p></p>
<div>
<p class="MsoNormal"><span style="font-family:Helvetica;color:black"> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:Helvetica;color:black">Capitalization looks correct. I notice that I cannot select wiuId on the Schema Handling tab for that attribute. It defaults to CN.
</span><o:p></o:p></p>
<div>
<p class="MsoNormal"><span style="font-family:Helvetica;color:black"> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:Helvetica;color:black">The Atttribute drop down is only presenting attributes from the person OC, not the other auxiliary OCs.</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:Helvetica;color:black"> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:Helvetica;color:black">Matt</span><o:p></o:p></p>
<div>
<p class="MsoNormal"><span style="font-family:Helvetica;color:black"> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:Helvetica;color:black"> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:Helvetica;color:black"> <img border="0" width="562" height="296" id="_x0000_i1027" src="cid:image001.png@01D20E84.F697C860"></span><o:p></o:p></p>
</div>
</div>
</div>
<div>
<p class="MsoNormal"><span style="font-family:Helvetica;color:black"> </span><o:p></o:p></p>
<div>
<p class="MsoNormal"><span style="font-family:Helvetica;color:black">On Fri, Aug 19, 2016 at 10:47 AM, Radovan Semancik <<a href="mailto:radovan.semancik@evolveum.com" target="_blank">radovan.semancik@evolveum.com</a>> wrote:</span><o:p></o:p></p>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bottom:5.0pt">
<div>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span style="font-family:Helvetica;color:black">Hi,<br>
<br>
Yes, that should work.<br>
Just check that you have correct lowercase/uppercase form for the attribute names. LDAP is (mostly) case insensitive, but midPoint is case sensitive. Look at the <schema> part of the resource definition. That is generated from the resource. Look for your auxiliary
object class definition there. And use the same capitalization as you see in the <schema> section.</span><o:p></o:p></p>
<pre><span style="color:black">-- </span><o:p></o:p></pre>
<pre><span style="color:black">Radovan Semancik</span><o:p></o:p></pre>
<pre><span style="color:black">Software Architect</span><o:p></o:p></pre>
<pre><span style="color:black"><a href="http://evolveum.com" target="_blank">evolveum.com</a></span><o:p></o:p></pre>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span style="font-family:Helvetica;color:black"><br>
<br>
<br>
</span><o:p></o:p></p>
<div>
<div>
<p class="MsoNormal"><span style="font-family:Helvetica;color:black">On 08/19/2016 05:23 PM, Mencel, Matt wrote:</span><o:p></o:p></p>
</div>
</div>
</div>
<div>
<div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class="MsoNormal"><span style="font-family:Helvetica;color:black">Thanks Radovan,
</span><o:p></o:p></p>
<div>
<p class="MsoNormal"><span style="font-family:Helvetica;color:black"> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:Helvetica;color:black">That helps. Do I declare the auxiliary's attributes in the same place as the default objectClass then? I'm getting this error in the UI...</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:Helvetica;color:black"> </span><o:p></o:p></p>
</div>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bottom:5.0pt">
<p class="MsoNormal"><span style="font-family:Helvetica;color:black">There is no attribute named '{<a href="http://midpoint.evolveum.com/xml/ns/public/resource/instance-3%7DwiuId" target="_blank">http://midpoint.evolveum.com/xml/ns/public/resource/instance-3}wiuId</a>'
in object class '{<a href="http://midpoint.evolveum.com/xml/ns/public/resource/instance-3%7Dperson" target="_blank">http://midpoint.evolveum.com/xml/ns/public/resource/instance-3}person</a>' (defined in schema handling for 'User Account (kind: ACCOUNT, intent:
person)').</span><o:p></o:p></p>
</blockquote>
<div>
<p class="MsoNormal"><span style="font-family:Helvetica;color:black"> </span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:Helvetica;color:black"> <a href="https://gist.github.com/MattMencel/2a3208371a1b0ce422e0b4923df413f7" target="_blank">https://gist.github.com/MattMencel/2a3208371a1b0ce422e0b4923df413f7</a></span><o:p></o:p></p>
</div>
</div>
<div>
<p class="MsoNormal"><span style="font-family:Helvetica;color:black"> </span><o:p></o:p></p>
<div>
<p class="MsoNormal"><span style="font-family:Helvetica;color:black">On Fri, Aug 19, 2016 at 9:54 AM, Radovan Semancik <<a href="mailto:radovan.semancik@evolveum.com" target="_blank">radovan.semancik@evolveum.com</a>> wrote:</span><o:p></o:p></p>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bottom:5.0pt">
<div>
<div>
<p class="MsoNormal"><span style="font-family:Helvetica;color:black">Hi,<br>
<br>
On 08/19/2016 04:26 PM, Mencel, Matt wrote:</span><o:p></o:p></p>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class="MsoNormal"><span style="font-family:Helvetica;color:black">I have multiple LDAP objectclasses that contain all the attributes that make up a person's identity. I've associated multiple OCs with the same kind/intent in midpoint and am getting a warning
in the UI. </span><o:p></o:p></p>
<div>
<table class="MsoNormalTable" border="0" cellpadding="0">
<tbody>
<tr>
<td style="padding:.75pt .75pt .75pt .75pt"></td>
</tr>
<tr>
<td valign="top" style="border:none;border-top:solid #F4F4F4 1.0pt;padding:2.25pt 2.25pt 2.25pt 2.25pt">
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bottom:5.0pt">
<p class="MsoNormal">There are multiple schema handling definitions for kind/intent: ACCOUNT/person.<o:p></o:p></p>
</blockquote>
</td>
</tr>
<tr>
<td valign="top" style="border:none;border-top:solid #F4F4F4 1.0pt;padding:2.25pt 2.25pt 2.25pt 2.25pt">
<p class="MsoNormal">Should I be doing this another way?<o:p></o:p></p>
</td>
</tr>
</tbody>
</table>
</div>
</div>
</blockquote>
<p class="MsoNormal"><span style="font-family:Helvetica;color:black"><br>
Yes. Just one of the objectclasses is structural (primary). Other object classes are auxiliary. MidPoint fully supports auxiliary object classes, but you need to use a slightly different approach. Use something like this:<br>
<br>
<br>
<br>
</span><o:p></o:p></p>
<pre><span style="color:black"> <schemaHandling></span><o:p></o:p></pre>
<pre><span style="color:black"> <objectType></span><o:p></o:p></pre>
<pre><span style="color:black"> <kind>account</kind></span><o:p></o:p></pre>
<pre><span style="color:black"> <displayName>Normal Account</displayName></span><o:p></o:p></pre>
<pre><span style="color:black"> <default>true</default></span><o:p></o:p></pre>
<pre><span style="color:black"> <objectClass>ri:inetOrgPerson</objectClass></span><o:p></o:p></pre>
<pre><span style="color:black"> <auxiliaryObjectClass>ri:posixAccount</auxiliaryObjectClass></span><o:p></o:p></pre>
<pre><span style="color:black"> <auxiliaryObjectClass>ri:foo</auxiliaryObjectClass></span><o:p></o:p></pre>
<pre><span style="color:black"> <auxiliaryObjectClass>ri:bar</auxiliaryObjectClass></span><o:p></o:p></pre>
<pre><span style="color:black">...</span><o:p></o:p></pre>
<pre><span style="color:black"> </span><o:p></o:p></pre>
<pre><span style="color:black">-- </span><o:p></o:p></pre>
<pre><span style="color:black">Radovan Semancik</span><o:p></o:p></pre>
<pre><span style="color:black">Software Architect</span><o:p></o:p></pre>
<pre><span style="color:black"><a href="http://evolveum.com" target="_blank">evolveum.com</a></span><o:p></o:p></pre>
</div>
<p class="MsoNormal"><span style="font-family:Helvetica;color:black">_______________________________________________ midPoint mailing list
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a></span><o:p></o:p></p>
</blockquote>
</div>
</div>
<pre><span style="color:black">_______________________________________________</span><o:p></o:p></pre>
<pre><span style="color:black">midPoint mailing list</span><o:p></o:p></pre>
<pre><span style="color:black"><a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a></span><o:p></o:p></pre>
<pre><span style="color:black"><a href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a></span><o:p></o:p></pre>
</blockquote>
</div>
</div>
</div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span style="font-family:Helvetica;color:black"><br>
_______________________________________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a></span><o:p></o:p></p>
</blockquote>
</div>
<p class="MsoNormal"><span style="font-family:Helvetica;color:black"> </span><o:p></o:p></p>
</div>
<p class="MsoNormal"><span style="font-family:Helvetica;color:black"><br>
_______________________________________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a></span><o:p></o:p></p>
</div>
</div>
</div>
<div>
<p class="MsoNormal"><span style="color:black"> </span><o:p></o:p></p>
</div>
</div>
</div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span style="font-family:Helvetica;color:black"><br>
_______________________________________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a></span><o:p></o:p></p>
</blockquote>
</div>
</div>
</div>
<p class="MsoNormal"><span style="font-family:Helvetica;color:black"> </span><o:p></o:p></p>
</div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span style="font-family:Helvetica;color:black"><br>
_______________________________________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a></span><o:p></o:p></p>
</blockquote>
</div>
<p class="MsoNormal"><span style="font-family:Helvetica;color:black"> </span><o:p></o:p></p>
</div>
<p class="MsoNormal"><span style="font-family:Helvetica;color:black"><br>
<br>
<br>
</span><o:p></o:p></p>
<div>
<p class="MsoNormal"><span style="font-family:Helvetica;color:black"> </span><o:p></o:p></p>
</div>
<p class="MsoNormal"><span style="font-family:Helvetica;color:black">CONFIDENTIALITY NOTICE:<br>
This e-mail together with any attachments is proprietary and confidential; intended for only the recipient(s) named above and may contain information that is privileged. You should not retain, copy or use this e-mail or any attachments for any purpose, or disclose
all or any part of the contents to any person. Any views or opinions expressed in this e-mail are those of the author and do not represent those of the Baptist School of Health Professions. If you have received this e-mail in error, or are not the named recipient(s),
you are hereby notified that any review, dissemination, distribution or copying of this communication is prohibited by the sender and to do so might constitute a violation of the Electronic Communications Privacy Act, 18 U.S.C. section 2510-2521. Please immediately
notify the sender and delete this e-mail and any attachments from your computer.
</span><o:p></o:p></p>
<div>
<p class="MsoNormal"><span style="font-family:Helvetica;color:black"> </span><o:p></o:p></p>
</div>
<p class="MsoNormal"><span style="font-family:Helvetica;color:black">_______________________________________________<br>
midPoint mailing list<br>
midPoint@lists.evolveum.com<br>
http://lists.evolveum.com/mailman/listinfo/midpoint</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="color:black"> </span><o:p></o:p></p>
</div>
</div>
</div>
</div>
</blockquote>
</div>
</div>
</blockquote>
</div>
</body>
</html>