<div dir="ltr">Hi Peter,<div><br></div><div>you can do this over bulk task, next sample send password for all users who has an account in resource with mentioned resourceOid</div><div><br></div><div><div><?xml version="1.0" encoding="UTF-8"?></div><div><br></div><div><objects xmlns="<a href="http://midpoint.evolveum.com/xml/ns/public/common/common-3" target="_blank">http://midpoint.<wbr>evolveum.com/xml/ns/public/<wbr>common/common-3</a>" xmlns:c="<a href="http://midpoint.evolveum.com/xml/ns/public/common/common-3" target="_blank">http://midpoint.<wbr>evolveum.com/xml/ns/public/<wbr>common/common-3</a>"</div><div><span class="gmail-m_4489137370368188815gmail-Apple-tab-span" style="white-space:pre-wrap"> </span>xmlns:q="<a href="http://prism.evolveum.com/xml/ns/public/query-3" target="_blank">http://prism.<wbr>evolveum.com/xml/ns/public/<wbr>query-3</a>" xmlns:t="<a href="http://prism.evolveum.com/xml/ns/public/types-3" target="_blank">http://prism.<wbr>evolveum.com/xml/ns/public/<wbr>types-3</a>"</div><div><span class="gmail-m_4489137370368188815gmail-Apple-tab-span" style="white-space:pre-wrap"> </span>xmlns:ri="<a href="http://midpoint.evolveum.com/xml/ns/public/resource/instance-3" target="_blank">http://midpoint.<wbr>evolveum.com/xml/ns/public/<wbr>resource/instance-3</a>" xmlns:icfs="<a href="http://midpoint.evolveum.com/xml/ns/public/connector/icf-1/resource-schema-3" target="_blank">http://midpoint.<wbr>evolveum.com/xml/ns/public/<wbr>connector/icf-1/resource-<wbr>schema-3</a>"</div><div><span class="gmail-m_4489137370368188815gmail-Apple-tab-span" style="white-space:pre-wrap"> </span>xmlns:xsi="<a href="http://www.w3.org/2001/XMLSchema-instance" target="_blank">http://www.w3.org/<wbr>2001/XMLSchema-instance</a>" ></div><div><br></div><div><br></div><div><span class="gmail-m_4489137370368188815gmail-Apple-tab-span" style="white-space:pre-wrap"> </span><task oid="6218c55d-0fee-4767-a1eb-<wbr>db7d023441b5"></div><div><span class="gmail-m_4489137370368188815gmail-Apple-tab-span" style="white-space:pre-wrap"> </span><name>Replace passwords on Resource - all users</name></div><div><span class="gmail-m_4489137370368188815gmail-Apple-tab-span" style="white-space:pre-wrap"> </span><extension><br></div><div><span class="gmail-m_4489137370368188815gmail-Apple-tab-span" style="white-space:pre-wrap"> </span><scext:executeScript xmlns:scext="<a href="http://midpoint.evolveum.com/xml/ns/public/model/scripting/extension-3" target="_blank">http://midpoint.<wbr>evolveum.com/xml/ns/public/<wbr>model/scripting/extension-3</a>"></div><div><span class="gmail-m_4489137370368188815gmail-Apple-tab-span" style="white-space:pre-wrap"> </span><s:search xmlns:s="<a href="http://midpoint.evolveum.com/xml/ns/public/model/scripting-3" target="_blank">http://midpoint.<wbr>evolveum.com/xml/ns/public/<wbr>model/scripting-3</a>"></div><div><span class="gmail-m_4489137370368188815gmail-Apple-tab-span" style="white-space:pre-wrap"> </span><s:type>c:UserType</s:type></div><div><span class="gmail-m_4489137370368188815gmail-Apple-tab-span" style="white-space:pre-wrap"> </span><s:action></div><div><span class="gmail-m_4489137370368188815gmail-Apple-tab-span" style="white-space:pre-wrap"> </span><s:type>execute-script</s:<wbr>type></div><div><span class="gmail-m_4489137370368188815gmail-Apple-tab-span" style="white-space:pre-wrap"> </span> <s:parameter></div><div><span class="gmail-m_4489137370368188815gmail-Apple-tab-span" style="white-space:pre-wrap"> </span> <s:name>script</s:name></div><div><span class="gmail-m_4489137370368188815gmail-Apple-tab-span" style="white-space:pre-wrap"> </span> <c:value xsi:type="c:<wbr>ScriptExpressionEvaluatorType" xmlns:c="<a href="http://midpoint.evolveum.com/xml/ns/public/common/common-3" target="_blank">http://midpoint.<wbr>evolveum.com/xml/ns/public/<wbr>common/common-3</a>"></div><div><span class="gmail-m_4489137370368188815gmail-Apple-tab-span" style="white-space:pre-wrap"> </span> <c:code></div><div><span class="gmail-m_4489137370368188815gmail-Apple-tab-span" style="white-space:pre-wrap"> </span> import com.evolveum.midpoint.prism.<wbr>delta.builder.*</div><div><span class="gmail-m_4489137370368188815gmail-Apple-tab-span" style="white-space:pre-wrap"> </span> import com.evolveum.midpoint.xml.ns._<wbr>public.common.common_3.*</div><div><span class="gmail-m_4489137370368188815gmail-Apple-tab-span" style="white-space:pre-wrap"> </span> import com.evolveum.prism.xml.ns._<wbr>public.types_3.*</div><div><span class="gmail-m_4489137370368188815gmail-Apple-tab-span" style="white-space:pre-wrap"> </span> </div><div><span class="gmail-m_4489137370368188815gmail-Apple-tab-span" style="white-space:pre-wrap"> </span> def resourceOid = '3d566aa3-e9f2-4e8d-8218-<wbr>72c0aad5273b' // resource OID where you need to send pwd</div><div><span class="gmail-m_4489137370368188815gmail-Apple-tab-span" style="white-space:pre-wrap"> </span> def prismContext = midpoint.getPrismContext()</div><div><span class="gmail-m_4489137370368188815gmail-Apple-tab-span" style="white-space:pre-wrap"> </span> </div><div><span class="gmail-m_4489137370368188815gmail-Apple-tab-span" style="white-space:pre-wrap"> </span> <a href="http://log.info/" target="_blank">log.info</a>('Processing user: {}', input)</div><div><span class="gmail-m_4489137370368188815gmail-Apple-tab-span" style="white-space:pre-wrap"> </span> input.linkRef</div><div><span class="gmail-m_4489137370368188815gmail-Apple-tab-span" style="white-space:pre-wrap"> </span> .findAll { midpoint.resolveReference(it)?<wbr>.resourceRef.oid == resourceOid }</div><div><span class="gmail-m_4489137370368188815gmail-Apple-tab-span" style="white-space:pre-wrap"> </span> .each {</div><div><span class="gmail-m_4489137370368188815gmail-Apple-tab-span" style="white-space:pre-wrap"> </span> <a href="http://log.info/" target="_blank">log.info</a>(' - Processing shadow: {}', it)</div><div><span class="gmail-m_4489137370368188815gmail-Apple-tab-span" style="white-space:pre-wrap"> </span> def delta = DeltaBuilder.deltaFor(<wbr>ShadowType.class, prismContext)</div><div><span class="gmail-m_4489137370368188815gmail-Apple-tab-span" style="white-space:pre-wrap"> </span> .item(ShadowType.F_<wbr>CREDENTIALS, CredentialsType.F_PASSWORD, PasswordType.F_VALUE)</div><div><span class="gmail-m_4489137370368188815gmail-Apple-tab-span" style="white-space:pre-wrap"> </span> .replace(input.credentials.<wbr>password.value)</div><div><span class="gmail-m_4489137370368188815gmail-Apple-tab-span" style="white-space:pre-wrap"> </span> .asObjectDelta(it.oid)</div><div><span class="gmail-m_4489137370368188815gmail-Apple-tab-span" style="white-space:pre-wrap"> </span> <a href="http://log.info/" target="_blank">log.info</a>(' - delta: {}', delta.debugDump())</div><div><span class="gmail-m_4489137370368188815gmail-Apple-tab-span" style="white-space:pre-wrap"> </span> midpoint.modifyObject(delta, null)</div><div><span class="gmail-m_4489137370368188815gmail-Apple-tab-span" style="white-space:pre-wrap"> </span> }</div><div><span class="gmail-m_4489137370368188815gmail-Apple-tab-span" style="white-space:pre-wrap"> </span> </c:code></div><div><span class="gmail-m_4489137370368188815gmail-Apple-tab-span" style="white-space:pre-wrap"> </span> </c:value></div><div><span class="gmail-m_4489137370368188815gmail-Apple-tab-span" style="white-space:pre-wrap"> </span> </s:parameter></div><div><span class="gmail-m_4489137370368188815gmail-Apple-tab-span" style="white-space:pre-wrap"> </span></s:action></div><div><span class="gmail-m_4489137370368188815gmail-Apple-tab-span" style="white-space:pre-wrap"> </span></s:search></div><div><span class="gmail-m_4489137370368188815gmail-Apple-tab-span" style="white-space:pre-wrap"> </span></scext:executeScript></div><div><span class="gmail-m_4489137370368188815gmail-Apple-tab-span" style="white-space:pre-wrap"> </span></extension></div><div><span class="gmail-m_4489137370368188815gmail-Apple-tab-span" style="white-space:pre-wrap"> </span><ownerRef oid="00000000-0000-0000-0000-<wbr>000000000002" /></div><div><span class="gmail-m_4489137370368188815gmail-Apple-tab-span" style="white-space:pre-wrap"> </span><executionStatus>suspended</<wbr>executionStatus></div><div><br></div><div><span class="gmail-m_4489137370368188815gmail-Apple-tab-span" style="white-space:pre-wrap"> </span><category>BulkActions</<wbr>category></div><div><span class="gmail-m_4489137370368188815gmail-Apple-tab-span" style="white-space:pre-wrap"> </span><handlerUri><a href="http://midpoint.evolveum.com/xml/ns/public/model/scripting/handler-3" target="_blank">http://midpoint.<wbr>evolveum.com/xml/ns/public/<wbr>model/scripting/handler-3</a></<wbr>handlerUri></div><div><span class="gmail-m_4489137370368188815gmail-Apple-tab-span" style="white-space:pre-wrap"> </span><recurrence>single</<wbr>recurrence></div><div><span class="gmail-m_4489137370368188815gmail-Apple-tab-span" style="white-space:pre-wrap"> </span></task></div><div><br></div><div></objects></div></div><div><br></div><div>Gustav</div><div><br></div><div><br></div><div><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div class="gmail_extra"><br><div class="gmail_quote"><div><div class="gmail-h5">2017-03-01 22:43 GMT+01:00 Peter Healy <span dir="ltr"><<a href="mailto:phealy3330@gmail.com" target="_blank">phealy3330@gmail.com</a>></span>:<br></div></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div><div class="gmail-h5"><div dir="ltr"><span style="font-size:12.8px">Hi All,</span><div style="font-size:12.8px">I currently have midpoint set up to manage one resource with the resource shadows linked to a midpoint account for a number of users. </div><div style="font-size:12.8px"><br><div>I am wondering how I can trigger an outbound password sync down to a second resource I just added. </div><div>The new resource accounts have been linking automatically to the midpoint accounts. <br></div><div><br></div><div>I am pretty sure that if I set a new password or re-set the same password it will get pushed down into the linked accounts in the new resource but, I need to do this for ~50 accounts and would like a better way to do this in bulk and without having to do a lot of custom scripting. </div><div><br></div><div>What is the best mechanism to force a user's current password down to a new resource? </div></div><div style="font-size:12.8px"><br></div><div style="font-size:12.8px">Thanks,</div><div style="font-size:12.8px">Peter</div></div>
<br></div></div>______________________________<wbr>_________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">http://lists.evolveum.com/mail<wbr>man/listinfo/midpoint</a><br>
<br></blockquote></div><span class="gmail-HOEnZb"><font color="#888888"><br><div><br></div></font></span></div></blockquote></div>
</div></div>