<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns:mv="http://macVmlSchemaUri" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Title" content="">
<meta name="Keywords" content="">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
        {font-family:"Cambria Math";
        panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
        {font-family:Calibri;
        panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
        {font-family:"Century Gothic";
        panose-1:2 11 5 2 2 2 2 2 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
        {margin:0in;
        margin-bottom:.0001pt;
        font-size:12.0pt;
        font-family:Calibri;}
a:link, span.MsoHyperlink
        {mso-style-priority:99;
        color:#0563C1;
        text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
        {mso-style-priority:99;
        color:#954F72;
        text-decoration:underline;}
span.EmailStyle17
        {mso-style-type:personal;
        font-family:Calibri;
        color:windowtext;}
span.EmailStyle19
        {mso-style-type:personal-reply;
        font-family:Calibri;
        color:windowtext;}
span.msoIns
        {mso-style-type:export-only;
        mso-style-name:"";
        text-decoration:underline;
        color:teal;}
.MsoChpDefault
        {mso-style-type:export-only;
        font-size:10.0pt;}
@page WordSection1
        {size:8.5in 11.0in;
        margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
        {page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1031"/>
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1"/>
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt">Strangest thing is:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">When I configure the role on an OU some users aren’t projected to the group in the AD domain.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">If the same user is directly added to the group as an assignment it doesn’t work eighter.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">But if I unassign the role from the OU and assign the user directly to that group it works.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Very strange, especially because there are users in that OU that inherit the role successfully.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">The user objects in the repository show that they inherit the role. I looked at the shadow objects, the user objects, the role objects.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">I absolutely don’t understand why?<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<div style="mso-line-height-rule:exactly;-webkit-text-size-adjust:100%;white-space:normal;"><br /><table cellpadding="0" cellspacing="0" border="0" style="background-color:#FFFFFF;border-collapse:collapse;font-size:0;line-height:16.88px;"><tr><td align="left" style="vertical-align:middle;"><table cellpadding="0" cellspacing="0" border="0" style="border-collapse:collapse;font-size:0;"><tr><td align="left" style="border-top:none;border-right:solid 2px #124A7D;border-bottom:none;border-left:none;padding:0 10px 0 0;vertical-align:middle;line-height:normal;"><a href="http://www.tahzoo.com" target="_blank" id="LPlnk689713" style="text-decoration:none;"><img src="cid:image822000.png@3D1CF270.DD61C344" width="96" height="51" border="0" alt="" style="min-width:96px;font-size:0;" /></a></td><td align="left" style="padding:10px 0 10px 10px;vertical-align:top;"><table cellpadding="0" cellspacing="0" border="0" style="border-collapse:collapse;font-size:0;"><tr><td align="left" style="vertical-align:top;"><table cellpadding="0" cellspacing="0" border="0" style="border-collapse:collapse;font-size:13.5px;color:#606060;font-style:normal;font-weight:bold;text-decoration:none;"><tr><td align="left" style="vertical-align:top;text-align:left;font-family:Century Gothic,CenturyGothic,AppleGothic,sans-serif;">Dick Muller</td></tr><tr style="font-size:12px;color:#808080;line-height:15px;"><td align="left" style="vertical-align:top;text-align:left;font-family:Century Gothic,CenturyGothic,AppleGothic,sans-serif;">Senior Systems Engineer</td></tr></table></td></tr><tr style="line-height:15px;white-space:nowrap;"><td align="left" style="padding:5px 0 10px;vertical-align:top;"><table cellpadding="0" cellspacing="0" border="0" style="border-collapse:collapse;font-size:0;"><tr><td align="left" style="vertical-align:top;"><table cellpadding="0" cellspacing="0" border="0" style="border-collapse:collapse;font-size:12px;color:#124A7D;font-style:normal;font-weight:normal;text-decoration:none;"><tr><td align="left" style="vertical-align:top;text-align:left;font-family:Century Gothic,CenturyGothic,AppleGothic,sans-serif;font-weight:bold;">P: </td><td align="left" style="vertical-align:top;text-align:left;font-family:Century Gothic,CenturyGothic,AppleGothic,sans-serif;"><a href="tel:0031%208%2082682586" target="_blank" id="LPlnk689713" style="color:#808080;text-decoration:none;"><strong style="font-weight:normal;">0031 8 82682586</strong></a></td><td align="left" style="vertical-align:top;text-align:left;color:#808080;font-family:Century Gothic,CenturyGothic,AppleGothic,sans-serif;"> | </td><td align="left" style="vertical-align:top;text-align:left;font-family:Century Gothic,CenturyGothic,AppleGothic,sans-serif;font-weight:bold;">M: </td><td align="left" style="vertical-align:top;text-align:left;font-family:Century Gothic,CenturyGothic,AppleGothic,sans-serif;"><a href="tel:0031%206%2046477690" target="_blank" id="LPlnk689713" style="color:#808080;text-decoration:none;"><strong style="font-weight:normal;">0031 6 46477690</strong></a></td></tr></table></td></tr><tr><td align="left" style="vertical-align:top;"><table cellpadding="0" cellspacing="0" border="0" style="border-collapse:collapse;font-size:12px;color:#124A7D;font-style:normal;font-weight:normal;text-decoration:none;"><tr><td align="left" style="vertical-align:top;text-align:left;font-family:Century Gothic,CenturyGothic,AppleGothic,sans-serif;font-weight:bold;">E: </td><td align="left" style="vertical-align:top;text-align:left;font-family:Century Gothic,CenturyGothic,AppleGothic,sans-serif;"><a href="mailto:dick.muller@tahzoo.com" target="_blank" id="LPlnk689713" style="color:#808080;text-decoration:none;"><strong style="font-weight:normal;">dick.muller@tahzoo.com</strong></a></td><td align="left" style="vertical-align:top;text-align:left;color:#808080;font-family:Century Gothic,CenturyGothic,AppleGothic,sans-serif;"> | </td><td align="left" style="vertical-align:top;text-align:left;font-family:Century Gothic,CenturyGothic,AppleGothic,sans-serif;font-weight:bold;">W: </td><td align="left" style="vertical-align:top;text-align:left;font-family:Century Gothic,CenturyGothic,AppleGothic,sans-serif;"><a href="http://www.tahzoo.com" target="_blank" id="LPlnk689713" style="color:#808080;text-decoration:none;"><strong style="font-weight:normal;">www.tahzoo.com</strong></a></td></tr></table></td></tr><tr><td align="left" style="vertical-align:top;"><table cellpadding="0" cellspacing="0" border="0" style="border-collapse:collapse;font-size:12px;color:#124A7D;font-style:normal;font-weight:normal;text-decoration:none;"><tr><td align="left" style="vertical-align:top;text-align:left;font-family:Century Gothic,CenturyGothic,AppleGothic,sans-serif;font-weight:bold;">A: </td><td align="left" style="vertical-align:top;text-align:left;font-family:Century Gothic,CenturyGothic,AppleGothic,sans-serif;"><a href="https://www.google.com/maps/place/Delftechpark+37,+2628+XJ+Delft,+Netherlands/@51.997531,4.3824845,17z/data=!3m1!4b1!4m5!3m4!1s0x47c5b589ec2c237b:0x22b6e5d15befb3d5!8m2!3d51.997531!4d4.3846732" target="_blank" id="LPlnk689713" style="color:#808080;text-decoration:none;"><strong style="font-weight:normal;">Delftechpark 37I, 2628 XJ Delft, Netherlands</strong></a></td></tr></table></td></tr></table></td></tr><tr style="line-height:normal;"><td align="left" style="vertical-align:top;"><map id="map_6e69d3cb-cb22-4ab1-9c45-f19c686ead3f" name="map_6e69d3cb-cb22-4ab1-9c45-f19c686ead3f"><area shape="rect" coords="0,0,16,16" href="https://nl.linkedin.com/in/dickmuller" alt="LinkedIn" title="LinkedIn" target="_blank" /><area shape="rect" coords="19,0,35,16" href="skype:dick-muller?chat" alt="Skype" title="Skype" target="_blank" /><area shape="rect" coords="38,0,54,16" href="http://www.twitter.com/MullerDick" alt="Twitter" title="Twitter" target="_blank" /></map><img usemap="#map_6e69d3cb-cb22-4ab1-9c45-f19c686ead3f" src="cid:image590001.png@AAF92301.9B919A41" width="57" height="16" border="0" alt="" style="min-width:57px;font-size:0;" /></td></tr></table></td></tr></table></td></tr></table><br /></div><div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="color:black">From: </span></b><span style="color:black">midPoint <midpoint-bounces@lists.evolveum.com> on behalf of Dick Muller <dick.muller@tahzoo.com><br>
<b>Reply-To: </b>midPoint General Discussion <midpoint@lists.evolveum.com><br>
<b>Date: </b>Wednesday 14 September 2016 at 08:46<br>
<b>To: </b>midPoint General Discussion <midpoint@lists.evolveum.com><br>
<b>Subject: </b>[midPoint] recompute on OU members<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"Times New Roman""><o:p> </o:p></span></p>
</div>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:11.0pt">Hi,</span><o:p></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:11.0pt">I have 700 users devided over different OU’s for ease of administration.</span><o:p></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:11.0pt">I now want to add all members of a OU in a new role and added the role as an inducement to the OU.</span><o:p></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:11.0pt">After that I did a recompute on all members in the OU.</span><o:p></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:11.0pt">For some reason some users are added to the role and projected to our AD environment successfully.</span><o:p></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:11.0pt">But most of them are not.</span><o:p></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:11.0pt">I enabled the projector logging and recomputed two users blokers that was added successfully and mduiker that wasn’t added.</span><o:p></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:11.0pt">You can find the two logs in this mail.</span><o:p></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:11.0pt">In the mduiker file there are errors for the NLDFTDC01 (Hinttech) resource, but I don’t mind because I only used that for provisioning.</span><o:p></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:11.0pt">The projection I really need is to the Tahzoo EU1 envinroment.</span><o:p></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:11.0pt">In the log I can see the evaluation and the assignment path for the role jira-users and don’t see any errors on that.</span><o:p></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:11.0pt">But still it isn’t projected to Tahzoo EU1 domain.</span><o:p></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:11.0pt">Is there something I can do or that I didn’t see?</span><o:p></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:11.0pt">Thanks in advance,</span><o:p></o:p></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt">DIck</span><o:p></o:p></p>
<div>
<p class="MsoNormal"><span style="font-family:"Times New Roman""><o:p> </o:p></span></p>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" style="background:white;border-collapse:collapse">
<tbody>
<tr>
<td style="padding:0in 0in 0in 0in">
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" style="border-collapse:collapse">
<tbody>
<tr>
<td style="border:none;border-right:solid #124A7D 1.5pt;padding:0in 7.5pt 0in 0in">
<p class="MsoNormal"><span style="font-size:1.0pt;font-family:"Times New Roman""><a href="http://www.tahzoo.com" target="_blank"><span style="text-decoration:none"><img border="0" width="96" height="51" id="_x0000_i1025" src="cid:image001.png@01D20E8D.12E5E6C0"></span></a><o:p></o:p></span></p>
</td>
<td valign="top" style="padding:7.5pt 0in 7.5pt 7.5pt">
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" style="border-collapse:collapse">
<tbody>
<tr>
<td valign="top" style="padding:0in 0in 0in 0in">
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" style="border-collapse:collapse">
<tbody>
<tr>
<td valign="top" style="padding:0in 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Century Gothic";color:#606060">Dick Muller<o:p></o:p></span></b></p>
</td>
</tr>
<tr>
<td valign="top" style="padding:0in 0in 0in 0in">
<p class="MsoNormal" style="line-height:11.25pt;mso-line-height-rule:exactly"><b><span style="font-size:9.0pt;font-family:"Century Gothic";color:gray">Senior Systems Engineer<o:p></o:p></span></b></p>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
<tr>
<td valign="top" style="padding:3.75pt 0in 7.5pt 0in">
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" style="border-collapse:collapse">
<tbody>
<tr>
<td valign="top" style="padding:0in 0in 0in 0in">
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" style="border-collapse:collapse">
<tbody>
<tr>
<td valign="top" style="padding:0in 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:9.0pt;font-family:"Century Gothic";color:#124A7D">P: <o:p></o:p></span></b></p>
</td>
<td valign="top" style="padding:0in 0in 0in 0in">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Century Gothic";color:#124A7D"><a href="tel:0031%208%2082682586" target="_blank"><strong><span style="font-family:"Century Gothic";color:gray;font-weight:normal;text-decoration:none">0031 8 82682586</span></strong></a><o:p></o:p></span></p>
</td>
<td valign="top" style="padding:0in 0in 0in 0in">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Century Gothic";color:gray"> | <o:p></o:p></span></p>
</td>
<td valign="top" style="padding:0in 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:9.0pt;font-family:"Century Gothic";color:#124A7D">M: <o:p></o:p></span></b></p>
</td>
<td valign="top" style="padding:0in 0in 0in 0in">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Century Gothic";color:#124A7D"><a href="tel:0031%206%2046477690" target="_blank"><strong><span style="font-family:"Century Gothic";color:gray;font-weight:normal;text-decoration:none">0031 6 46477690</span></strong></a><o:p></o:p></span></p>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
<tr>
<td valign="top" style="padding:0in 0in 0in 0in">
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" style="border-collapse:collapse">
<tbody>
<tr>
<td valign="top" style="padding:0in 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:9.0pt;font-family:"Century Gothic";color:#124A7D">E: <o:p></o:p></span></b></p>
</td>
<td valign="top" style="padding:0in 0in 0in 0in">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Century Gothic";color:#124A7D"><a href="mailto:dick.muller@tahzoo.com" target="_blank"><strong><span style="font-family:"Century Gothic";color:gray;font-weight:normal;text-decoration:none">dick.muller@tahzoo.com</span></strong></a><o:p></o:p></span></p>
</td>
<td valign="top" style="padding:0in 0in 0in 0in">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Century Gothic";color:gray"> | <o:p></o:p></span></p>
</td>
<td valign="top" style="padding:0in 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:9.0pt;font-family:"Century Gothic";color:#124A7D">W: <o:p></o:p></span></b></p>
</td>
<td valign="top" style="padding:0in 0in 0in 0in">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Century Gothic";color:#124A7D"><a href="http://www.tahzoo.com" target="_blank"><strong><span style="font-family:"Century Gothic";color:gray;font-weight:normal;text-decoration:none">www.tahzoo.com</span></strong></a><o:p></o:p></span></p>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
<tr>
<td valign="top" style="padding:0in 0in 0in 0in">
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" style="border-collapse:collapse">
<tbody>
<tr>
<td valign="top" style="padding:0in 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:9.0pt;font-family:"Century Gothic";color:#124A7D">A: <o:p></o:p></span></b></p>
</td>
<td valign="top" style="padding:0in 0in 0in 0in">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Century Gothic";color:#124A7D"><a href="https://www.google.com/maps/place/Delftechpark+37,+2628+XJ+Delft,+Netherlands/@51.997531,4.3824845,17z/data=!3m1!4b1!4m5!3m4!1s0x47c5b589ec2c237b:0x22b6e5d15befb3d5!8m2!3d51.997531!4d4.3846732" target="_blank"><strong><span style="font-family:"Century Gothic";color:gray;font-weight:normal;text-decoration:none">Delftechpark 37I, 2628 XJ Delft, Netherlands</span></strong></a><o:p></o:p></span></p>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
<tr>
<td valign="top" style="padding:0in 0in 0in 0in">
<p class="MsoNormal"><span style="font-size:1.0pt;font-family:"Times New Roman""><map name="MicrosoftOfficeMap0"><area shape="Rect" coords="-1, 0, 15, 16" href="https://nl.linkedin.com/in/dickmuller" target="_blank" title="LinkedIn"><area shape="Rect" coords="18, 0, 34, 16" href="skype:dick-muller?chat" target="_blank" title="Skype"><area shape="Rect" coords="37, 0, 53, 16" href="http://www.twitter.com/MullerDick" target="_blank" title="Twitter"></map><img border="0" width="57" height="16" id="_x0000_i1026" src="cid:image002.png@01D20E8D.12E5E6C0" usemap="#MicrosoftOfficeMap0"><o:p></o:p></span></p>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><span style="font-family:"Times New Roman""><o:p> </o:p></span></p>
</div>
</div>
</body>
</html>