<div dir="ltr">Hi Gustav,<div><br></div><div>does this simulated reconcile fetch shadows from resource?</div><div><br></div><div>for example i have one user in midpoint with assignments on accounts on those resources but is missing shadows. (because i deleted them, was corrupted by outage, etc...). Will this simulated reconcile fetch and link shadows from resource before creating them from midpoint user account?</div><div><br></div><div>Best regards,</div><div><br></div><div>Oskar</div></div><div class="gmail_extra"><br><div class="gmail_quote">2016-10-24 21:57 GMT+02:00 Pálos Gustáv <span dir="ltr"><<a href="mailto:gustav.palos@evolveum.com" target="_blank">gustav.palos@evolveum.com</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div><div class="h5"><span style="font-size:12.8px">Hi Martin,</span><div style="font-size:12.8px"><br></div><div style="font-size:12.8px">I'm using this task as workaround to <span class="m_-2635417206892851166gmail-il">reconcile</span> only one user by OID (symulating GUI <span class="m_-2635417206892851166gmail-il">reconcile</span>):</div><div style="font-size:12.8px"><div><?xml version="1.0" encoding="UTF-8"?></div><div><c:objects xmlns:c="<a href="http://midpoint.evolveum.com/xml/ns/public/common/common-3" target="_blank">http://midpoint.evolv<wbr>eum.com/xml/ns/public/common/<wbr>common-3</a>"></div><div>    <c:task></div><div>        <c:name><span class="m_-2635417206892851166gmail-il">reconcile</span> one org</c:name></div><div>        <c:extension xmlns:mext="<a href="http://midpoint.evolveum.com/xml/ns/public/model/extension-3" target="_blank">http://midpoint.ev<wbr>olveum.com/xml/ns/public/model<wbr>/extension-3</a>"></div><div>            <mext:objectType>ObjectType</m<wbr>ext:objectType></div><div>            <mext:objectQuery></div><div>                <q:filter xmlns:q="<a href="http://prism.evolveum.com/xml/ns/public/query-3" target="_blank">http://prism.evolveum<wbr>.com/xml/ns/public/query-3</a>"></div><div>                    <q:inOid></div><div>                        <q:value>73ca114b-dec5-4ae7-be<wbr>a1-645b4fa0fcb9</q:value></div><div>                    </q:inOid><br></div><div>                </q:filter></div><div>            </mext:objectQuery></div><div>            <mext:objectDelta></div><div>                <t:changeType xmlns:t="<a href="http://prism.evolveum.com/xml/ns/public/types-3" target="_blank">http://prism.evolveum<wbr>.com/xml/ns/public/types-3</a>"><wbr>modify</t:changeType></div><div>                <t:objectType xmlns:t="<a href="http://prism.evolveum.com/xml/ns/public/types-3" target="_blank">http://prism.evolveum<wbr>.com/xml/ns/public/types-3</a>"><wbr>OrgType</t:objectType></div><div>                <t:oid xmlns:t="<a href="http://prism.evolveum.com/xml/ns/public/types-3" target="_blank">http://prism.evolveum<wbr>.com/xml/ns/public/types-3</a>"><wbr>unused</t:oid></div><div>            </mext:objectDelta><br></div><div>        </c:extension></div><div>        <c:taskIdentifier>147634526327<wbr>2:174415297</c:taskIdentifier></div><div>        <c:ownerRef oid="00000000-0000-0000-0000-0<wbr>00000000002"/></div><div>        <c:executionStatus>runnable</c<wbr>:executionStatus></div><div>        <c:category>ExecuteChanges</c:<wbr>category></div><div>        <c:handlerUri><a href="http://midpoint.evolveum.com/xml/ns/public/model/synchronization/task/execute/handler-3" target="_blank">http://midpoint.<wbr>evolveum.com/xml/ns/public/mod<wbr>el/synchronization/task/execut<wbr>e/handler-3</a></c:handlerUri></div><div>        <c:recurrence>single</c:recurr<wbr>ence></div><div>    </c:task></div><div></c:objects></div></div><div style="font-size:12.8px"><br></div></div></div><div style="font-size:12.8px">if you need more, you can <span class="m_-2635417206892851166gmail-il">reconcile</span> more OIDs, but I never tryed other types of filter in this way.<br></div><div style="font-size:12.8px"><br></div><div style="font-size:12.8px">Best regards,</div><div style="font-size:12.8px"><br></div><div style="font-size:12.8px">Gustav</div></div><div class="gmail_extra"><div><div class="h5"><br><div class="gmail_quote">2016-10-24 21:56 GMT+02:00 Pálos Gustáv <span dir="ltr"><<a href="mailto:gustav.palos@gmail.com" target="_blank">gustav.palos@gmail.com</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Hi Martin,<div><br></div><div>I'm using this task as workaround to reconcile only one user by OID (symulating GUI reconcile):</div><div><div><?xml version="1.0" encoding="UTF-8"?></div><div><c:objects xmlns:c="<a href="http://midpoint.evolveum.com/xml/ns/public/common/common-3" target="_blank">http://midpoint.evolv<wbr>eum.com/xml/ns/public/common/<wbr>common-3</a>"></div><div>    <c:task></div><div>        <c:name>reconcile one org</c:name></div><div>        <c:extension xmlns:mext="<a href="http://midpoint.evolveum.com/xml/ns/public/model/extension-3" target="_blank">http://midpoint.ev<wbr>olveum.com/xml/ns/public/model<wbr>/extension-3</a>"></div><div>            <mext:objectType>ObjectType</m<wbr>ext:objectType></div><div>            <mext:objectQuery></div><div>                <q:filter xmlns:q="<a href="http://prism.evolveum.com/xml/ns/public/query-3" target="_blank">http://prism.evolveum<wbr>.com/xml/ns/public/query-3</a>"></div><div>                    <q:inOid></div><div>                        <q:value>73ca114b-dec5-4ae7-be<wbr>a1-645b4fa0fcb9</q:value></div><div>                    </q:inOid><br></div><div>                </q:filter></div><div>            </mext:objectQuery></div><div>            <mext:objectDelta></div><div>                <t:changeType xmlns:t="<a href="http://prism.evolveum.com/xml/ns/public/types-3" target="_blank">http://prism.evolveum<wbr>.com/xml/ns/public/types-3</a>"><wbr>modify</t:changeType></div><div>                <t:objectType xmlns:t="<a href="http://prism.evolveum.com/xml/ns/public/types-3" target="_blank">http://prism.evolveum<wbr>.com/xml/ns/public/types-3</a>"><wbr>OrgType</t:objectType></div><div>                <t:oid xmlns:t="<a href="http://prism.evolveum.com/xml/ns/public/types-3" target="_blank">http://prism.evolveum<wbr>.com/xml/ns/public/types-3</a>"><wbr>unused</t:oid></div><div>            </mext:objectDelta><br></div><div>        </c:extension></div><div>        <c:taskIdentifier>147634526327<wbr>2:174415297</c:taskIdentifier></div><div>        <c:ownerRef oid="00000000-0000-0000-0000-0<wbr>00000000002"/></div><div>        <c:executionStatus>runnable</c<wbr>:executionStatus></div><div>        <c:category>ExecuteChanges</c:<wbr>category></div><div>        <c:handlerUri><a href="http://midpoint.evolveum.com/xml/ns/public/model/synchronization/task/execute/handler-3" target="_blank">http://midpoint.<wbr>evolveum.com/xml/ns/public/mod<wbr>el/synchronization/task/execut<wbr>e/handler-3</a></c:handlerUri></div><div>        <c:recurrence>single</c:recurr<wbr>ence></div><div>    </c:task></div><div></c:objects></div></div><div><br></div><div>if you need more, you can reconcile more OIDs, but I never try other types of filter in this way.<br></div><div><br></div><div>Best regards,</div><div><br></div><div>Gustav<br><div class="gmail_extra"><br><div class="gmail_quote"><div><div class="m_-2635417206892851166h5">2016-10-24 16:01 GMT+02:00 Martin Marchese <span dir="ltr"><<a href="mailto:mmarchese@identicum.com" target="_blank">mmarchese@identicum.com</a>></span>:<br></div></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div><div class="m_-2635417206892851166h5"><div dir="ltr">Hi All,<div><br></div><div>We have a almost 600k users within midpoint and we need to reconcile all of them with our eDirectory resource since we need to change the users container within eDirectory.</div><div><br></div><div>Since it's a large number of users, we want to do this in subsets. We've already did something similar for recomputing users, but as far as I could find in the documentation, Reconciliation is always run for all the accounts. And even though we add an objectQuery extension into the task, it runs for all of them.</div><div><br></div><div>Is there a way to accomplish this? With reconciliation or any other action?</div><div><br></div><div>Thanks in Advance.</div><div><br></div><div><div><div class="m_-2635417206892851166m_-3414354604182126337gmail-m_-1292165713799510011gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><b><span></span><span></span>Ing. Martín Marchese</b><br><img src="http://www.identicum.com/img/favicon.ico">Identicum S.A.<br>Jorge Newbery 3226<br>Tel: <a href="tel:%2B54%20%2811%29%204552-3050" value="+541145523050" target="_blank">+54 (11) 4552-3050</a><br><a href="mailto:mmarchese@identicum.com" target="_blank">mmarchese@identicum.com</a><br><a href="http://www.identicum.com" target="_blank">www.identicum.com</a></div></div></div></div></div></div></div></div></div></div></div>
</div></div>
<br></div></div>______________________________<wbr>_________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">http://lists.evolveum.com/mail<wbr>man/listinfo/midpoint</a><br>
<br></blockquote></div><span class="m_-2635417206892851166HOEnZb"><font color="#888888"><br><br clear="all"><div><br></div>-- <br><div class="m_-2635417206892851166m_-3414354604182126337gmail_signature">s pozdravom<div><br></div><div>Gustáv Pálos</div></div>
</font></span></div></div></div>
</blockquote></div><br><br clear="all"><div><br></div></div></div><span class="HOEnZb"><font color="#888888">-- <br><div class="m_-2635417206892851166gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div>Gustáv Pálos</div><div>Identity Engineer</div><a href="http://evolveum.com/" rel="noreferrer" style="color:rgb(17,85,204);font-size:12.8px" target="_blank">evolveum.com</a><br></div></div>
</font></span></div>
<br>______________________________<wbr>_________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">http://lists.evolveum.com/<wbr>mailman/listinfo/midpoint</a><br>
<br></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div dir="ltr"><table style="font-family:Verdana,Arial,Helvetica,sans-serif;border-collapse:collapse;padding:0px;margin:0px;border-width:0px!important;border-style:solid!important;width:482px!important"><tbody><tr style="padding:0px;margin:0px;border:0px solid gray!important"><td style="color:rgb(0,0,0);font-family:Arial,sans-serif;font-size:11px;width:160px;vertical-align:bottom;padding:0px;border:0px solid gray!important"><p><span style="font-size:14px;font-weight:bold">Oskar Butovič</span><br>solution architect<br><br>gsm: [+420] 774 480 101<br>e-mail: <a href="mailto:oskar.butovic@ami.cz" target="_blank">oskar.butovic@ami.cz</a></p></td><td style="color:rgb(0,0,0);font-family:Verdana,Arial,Helvetica,sans-serif;font-size:10px;border-right-width:1px;border-right-style:solid;border-right-color:rgb(204,204,204);padding:0px;border-top-width:0px!important;border-bottom-width:0px!important;border-left-width:0px!important;border-top-style:solid!important;border-bottom-style:solid!important;border-left-style:solid!important;border-top-color:gray!important;border-bottom-color:gray!important;border-left-color:gray!important">   </td><td style="color:rgb(0,0,0);font-family:Verdana,Arial,Helvetica,sans-serif;font-size:10px;padding:0px;border:0px solid gray!important">   </td><td style="color:rgb(0,0,0);font-family:Arial,sans-serif;font-size:11px;vertical-align:bottom;padding:0px;width:123px;border:0px solid gray!important"><p>AMI Praha a.s.<br>Pláničkova 11<br>162 00 Praha 6<br>tel.: [+420] 274 783 239<br>web: <a href="http://www.ami.cz/" target="_blank">www.ami.cz</a></p></td><td style="color:rgb(0,0,0);font-family:Verdana,Arial,Helvetica,sans-serif;font-size:10px;border-right-width:1px;border-right-style:solid;border-right-color:rgb(204,204,204);padding:0px;border-top-width:0px!important;border-bottom-width:0px!important;border-left-width:0px!important;border-top-style:solid!important;border-bottom-style:solid!important;border-left-style:solid!important;border-top-color:gray!important;border-bottom-color:gray!important;border-left-color:gray!important">   </td><td style="color:rgb(0,0,0);font-family:Verdana,Arial,Helvetica,sans-serif;font-size:10px;padding:0px;border:0px solid gray!important">   </td><td style="color:rgb(0,0,0);font-family:Arial,sans-serif;font-size:11px;margin:8px;border:0px solid gray!important;width:116px"><p><img src="http://www.ami.cz/images/podpis/ami_logo.gif" alt="AMI Praha a.s." style="border:0px"></p></td></tr><tr style="padding:0px;margin:0px;border:0px solid gray!important"><td colspan="7" style="color:rgb(0,0,0);font-family:Verdana,Arial,Helvetica,sans-serif;font-size:10px;padding:0px;width:480px;border:0px solid gray!important"><br><a href="http://www.ami.cz/reseni-a-sluzby/bezpecnost-dat/identity-management" target="_blank"><img src="http://www.ami.cz/images/podpis/AMI-podpis-IdM_1.png" alt="AMI Praha a.s." style="border:0px;width:480px!important;height:82px!important"></a></td></tr><tr style="padding:0px;margin:0px;border:0px solid gray!important"><td colspan="7" style="color:rgb(128,128,128);font-family:Arial,sans-serif;font-size:11px;padding:0px;border:0px solid gray!important"><br>Textem tohoto e-mailu podepisující neslibuje uzavřít ani neuzavírá za společnost AMI Praha a.s.<br>jakoukoliv smlouvu. Každá smlouva, pokud bude uzavřena, musí mít výhradně písemnou formu.<br><br></td></tr></tbody></table></div></div></div></div></div></div></div>
</div>