<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<p>Hi Aivo,</p>
<p>please check this issue:
<a class="moz-txt-link-freetext" href="https://jira.evolveum.com/browse/MID-3296">https://jira.evolveum.com/browse/MID-3296</a></p>
<p><br>
</p>
<p>If it's what you are experiencing, please check how is you
association + tolerant configured.</p>
<p><br>
</p>
<p>Ivan<br>
</p>
<br>
<div class="moz-cite-prefix">On 10/28/2016 10:14 AM, Aivo Kuhlberg
wrote:<br>
</div>
<blockquote cite="mid:1477642440273.74992@rmit.ee" type="cite">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<style type="text/css" style="display:none"><!--P{margin-top:0;margin-bottom:0;} --></style>
<p>Hello,<br>
</p>
<p>I am testing role assignment valid from/to triggering and have
problem with valid to functionality. I assigned role to midPoint
user and before saving the assignment I specified validto value.
This midPoint role is imported from AD group so I expect that
when the valid to time is over then the AD group will be removed
from the AD user but that does not happen. Even full
reconciliation of AD users and groups did not help. Even
changing the administrative status to "Disabled" did not help.
But when I changed it to "Enabled" and then "Disabled" then the
AD user group membership dissapeared. Can it be because I am
using .NET AD connector and in LDAP connector this problem is
fixed?<br>
Before that I tested "Valid From" field triggering and that
worked as expected - after the specified time and validity
scanner run the AD group was assigned to AD user. <br>
Regards,<br>
Aivo Kuhlberg<br>
</p>
<br>
<hr>
<font color="Gray" face="Arial" size="2">Käesolev e-kiri võib
sisaldada asutusesiseseks kasutamiseks tunnistatud teavet.<br>
This e-mail may contain information which is classified for
official use.</font>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
midPoint mailing list
<a class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>
<a class="moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
<pre class="moz-signature" cols="72">--
Ivan Noris
Senior Identity Engineer
evolveum.com
</pre>
</body>
</html>