<div dir="ltr">Thank you very much Ivan...<div>Have a good day...<br><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Mar 8, 2017 at 11:33 AM, Ivan Noris <span dir="ltr"><<a href="mailto:ivan.noris@evolveum.com" target="_blank">ivan.noris@evolveum.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
<p>Hi Dilek,</p>
<p>ri (resource instance) prefix is used for all normal resource
attributes</p>
<p>c (common) prefix is used for midPoint user attributes in this
case</p>
<p>but there are two special resource attributes icfs:name (unique
identifier, that can be changed, e.g. login or DN) and icfs:uid
(unique identifier, that cannot be changed, like generated primary
key in database or entryUUID in directory system).</p>
<p>For all but new LDAP connector, icfs:name and icfs:uid are
commonly used in correlation. You will see also mappings for them
in the schema handling. But there are also situations where you
use ri:employeeNumber to correlate with c:employeeNumber.
Everything is possible.<br>
</p>
<p>For the new LDAP connector, ri:dn is used instead of icfs:name
and ri:entryUUID is used instead of icfs:uid for standard
directory servers.</p>
<p>The special names icfs:name and icfs:uid are from the original
ICF design. The connector sees them as __NAME__ / __UID__
attributes. I could find some (connector-related) hins here:
<a class="m_-6638572887901306644moz-txt-link-freetext" href="https://wiki.evolveum.com/display/midPoint/Connector+Development+Guide" target="_blank">https://wiki.evolveum.com/<wbr>display/midPoint/Connector+<wbr>Development+Guide</a><br>
</p>
Best regards,<br>
Ivan<br>
<br>
<div class="m_-6638572887901306644moz-cite-prefix">On 03/08/2017 09:19 AM, Dilek Gider
wrote:<br>
</div>
<blockquote type="cite">
<div dir="ltr">You are greattt!!
<div>Thank you ver much. I think I still didn't understand logic
of resouce xml.</div>
<div>I thought that "ri" is row of coming from database, and
"c:name" is record in midpoint database.</div>
<div>I thought midpoint is comparing them, so it was wrong. </div>
<div><br>
</div>
<div>Thank you again, i am trying to solve this for two days.</div>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Wed, Mar 8, 2017 at 11:08 AM, Oskar
Butovič - AMI Praha a.s. <span dir="ltr"><<a href="mailto:oskar.butovic@ami.cz" target="_blank">oskar.butovic@ami.cz</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr">Hello Dilek,
<div><br>
</div>
<div>there is ri:name in your correlation rule
but icfs:name in your schema handling in your resource.
That might be the problem. Try icfs:name in both.</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">2017-03-08 8:49 GMT+01:00 Dilek
Gider <span dir="ltr"><<a href="mailto:dilek.gider@basistek.com" target="_blank">dilek.gider@basistek.com</a>></span>:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr">Hi Oskar,
<div><br>
</div>
<div>Thank you for your response. Yes I think
second reconciliation does not match but I dont
know why.</div>
<div>I send you my resource xml and
SearchScript.groovy. You can see on
SerachScript.groovy, I concat two database
column as "name".</div>
<div><br>
</div>
<div>I will appreciate for your help.</div>
</div>
<div class="m_-6638572887901306644m_-8810484838491336704m_4615393090750857349HOEnZb">
<div class="m_-6638572887901306644m_-8810484838491336704m_4615393090750857349h5">
<div class="gmail_extra"><br>
<div class="gmail_quote">On Tue, Mar 7, 2017
at 5:38 PM, Oskar Butovič - AMI Praha a.s. <span dir="ltr"><<a href="mailto:oskar.butovic@ami.cz" target="_blank">oskar.butovic@ami.cz</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr">Hello,
<div><br>
</div>
<div>it seems like names which are
created during first reconciliation
are not matched by corelation rule
during second reconciliation. What is
your mapping which creates users name?</div>
<div><br>
</div>
<div>Best Regards</div>
<div><br>
</div>
<div>Oskar Butovič</div>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">2017-03-07
12:52 GMT+01:00 Dilek Gider <span dir="ltr"><<a href="mailto:dilek.gider@basistek.com" target="_blank">dilek.gider@basistek.com</a>></span>:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr">Hi,
<div><br>
</div>
<div>I have reconciliation task in
scriptedSQL connector, it
creates users in midpoint.
First of all, users are created
with this task. But when I run
task twice or more, it gives an
error like below for all users:</div>
<div><br>
</div>
<div><font size="1">Error
processing
focus(user:null(TR45187127836)<wbr>):
constraint violation: Found
conflicting existing object
with property
{.../common/common-3}name =
PP({.../common/common-3}name):<wbr>[PPV(PolyString:TR45187127836,
origin:
INBOUND:<a class="m_-6638572887901306644moz-txt-link-freetext">resource:ef2bc59b-76e0</a><wbr>-48e2-86d6-3d4f02d420db(Tirsan<wbr>ScriptedSQLResource))]:
user:96dd9828-e16f-4a7c-bebe-7<wbr>4c4d184b340(TR45187127836)</font><br>
</div>
<div><font size="1"><br>
</font></div>
<div>Correlation rule has
PolyStringNorm such as:</div>
<div><br>
</div>
<div>
<div><font size="1"><synchronization></font></div>
<div><font size="1">
<objectSynchronization></font></div>
<div><font size="1">
<objectClass>ri:AccountObject<wbr>Class</objectClass></font></div>
<div><font size="1">
<kind>account</kind></font></div>
<div><font size="1">
<intent>default</intent></font></div>
<div><font size="1">
<enabled>true</enabled></font></div>
<div><font size="1">
<correlation></font></div>
<div><font size="1">
<q:description></font></div>
<div><font size="1"><span class="m_-6638572887901306644m_-8810484838491336704m_4615393090750857349m_-5190513761793235383m_-691441859128105076m_-7627896796955210813gmail-Apple-tab-span" style="white-space:pre-wrap"> </span>
Correlation expression is a
search query.</font></div>
<div><font size="1"><span class="m_-6638572887901306644m_-8810484838491336704m_4615393090750857349m_-5190513761793235383m_-691441859128105076m_-7627896796955210813gmail-Apple-tab-span" style="white-space:pre-wrap"> </span>
Following
search query will look for
users that have "name"</font></div>
<div><font size="1"><span class="m_-6638572887901306644m_-8810484838491336704m_4615393090750857349m_-5190513761793235383m_-691441859128105076m_-7627896796955210813gmail-Apple-tab-span" style="white-space:pre-wrap"> </span>
equal to
the "name" attribute of the
account. Simply speaking,</font></div>
<div><font size="1"><span class="m_-6638572887901306644m_-8810484838491336704m_4615393090750857349m_-5190513761793235383m_-691441859128105076m_-7627896796955210813gmail-Apple-tab-span" style="white-space:pre-wrap"> </span>
it will
look for match in usernames
in the IDM and the resource.</font></div>
<div><font size="1"><span class="m_-6638572887901306644m_-8810484838491336704m_4615393090750857349m_-5190513761793235383m_-691441859128105076m_-7627896796955210813gmail-Apple-tab-span" style="white-space:pre-wrap"> </span>
The
correlation rule always
looks for users, so it will
not match</font></div>
<div><font size="1"><span class="m_-6638572887901306644m_-8810484838491336704m_4615393090750857349m_-5190513761793235383m_-691441859128105076m_-7627896796955210813gmail-Apple-tab-span" style="white-space:pre-wrap"> </span>
any other
object type.</font></div>
<div><font size="1"><span class="m_-6638572887901306644m_-8810484838491336704m_4615393090750857349m_-5190513761793235383m_-691441859128105076m_-7627896796955210813gmail-Apple-tab-span" style="white-space:pre-wrap"> </span></q:description></font></div>
<div><font size="1">
<q:equal></font></div>
<div><font size="1">
<q:matching>PolyStringNorm</q<wbr>:matching></font></div>
<div><font size="1">
<q:path>c:name</q:path></font></div>
<div><font size="1">
<expression></font></div>
<div><font size="1">
<c:path>declare
namespace ri='<a href="http://midpoint.evolveum.com/xml/ns/public/resource/instance-3" target="_blank">http://midpoint.evolveum.c<wbr>om/xml/ns/public/resource/inst<wbr>ance-3</a>';
$account/attributes/ri:name</c<wbr>:path></font></div>
<div><font size="1">
</expression></font></div>
<div><font size="1">
</q:equal></font></div>
<div><font size="1">
</correlation></font></div>
<div><font size="1">
<reaction></font></div>
<div><font size="1">
<situation>linked</situation></font></div>
<div><font size="1">
<action></font></div>
<div><font size="1">
<handlerUri><a href="http://midpoint.evolveum.com/xml/ns/public/model/action-3#modifyUser" target="_blank">http://midpoint.e<wbr>volveum.com/xml/ns/public/mode<wbr>l/action-3#modifyUser</a></handler<wbr>Uri></font></div>
<div><font size="1">
</action></font></div>
<div><font size="1">
</reaction></font></div>
<div><font size="1">
<reaction></font></div>
<div><font size="1">
<situation>deleted</situation></font></div>
<div><font size="1">
<action></font></div>
<div><font size="1">
<handlerUri><a href="http://midpoint.evolveum.com/xml/ns/public/model/action-3#unlink" target="_blank">http://midpoint.e<wbr>volveum.com/xml/ns/public/mode<wbr>l/action-3#unlink</a></handlerUri></font></div>
<div><font size="1">
</action></font></div>
<div><font size="1">
</reaction></font></div>
<div><font size="1">
<reaction></font></div>
<div><font size="1">
<situation>unlinked</situation<wbr>></font></div>
<div><font size="1">
<objectTemplateRef
oid="e63e1118-cbe5-11e5-b08e-3<wbr>c970e44b9e2"/></font></div>
<div><font size="1">
<action></font></div>
<div><font size="1">
<handlerUri><a href="http://midpoint.evolveum.com/xml/ns/public/model/action-3#link" target="_blank">http://midpoint.e<wbr>volveum.com/xml/ns/public/mode<wbr>l/action-3#link</a></handlerUri></font></div>
<div><font size="1">
</action></font></div>
<div><font size="1">
</reaction></font></div>
<div><font size="1">
<reaction></font></div>
<div><font size="1">
<situation>unmatched</situatio<wbr>n></font></div>
<div><font size="1">
<objectTemplateRef
oid="e63e1118-cbe5-11e5-b08e-3<wbr>c970e44b9e2"/></font></div>
<div><font size="1">
<action></font></div>
<div><font size="1">
<handlerUri><a href="http://midpoint.evolveum.com/xml/ns/public/model/action-3#addUser" target="_blank">http://midpoint.e<wbr>volveum.com/xml/ns/public/mode<wbr>l/action-3#addUser</a></handlerUri<wbr>></font></div>
<div><font size="1">
</action></font></div>
<div><font size="1">
</reaction></font></div>
<div><font size="1">
</objectSynchronization></font></div>
<div><font size="1">
</synchronization></font></div>
</div>
<div><br>
</div>
<div>What can be a problem? Thanks
in advance.</div>
<span class="m_-6638572887901306644m_-8810484838491336704m_4615393090750857349m_-5190513761793235383m_-691441859128105076HOEnZb"><font color="#888888">
<div><br>
</div>
<div>Dilek.</div>
</font></span></div>
<br>
______________________________<wbr>_________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">http://lists.evolveum.com/mail<wbr>man/listinfo/midpoint</a><br>
<br>
</blockquote>
</div>
<br>
<br clear="all">
<div><br>
</div>
-- <br>
<div class="m_-6638572887901306644m_-8810484838491336704m_4615393090750857349m_-5190513761793235383m_-691441859128105076gmail_signature" data-smartmail="gmail_signature">
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr">
<div dir="ltr">
<table style="font-family:Verdana,Arial,Helvetica,sans-serif;border-collapse:collapse;padding:0px;margin:0px;border-width:0px!important;border-style:solid!important;width:482px!important">
<tbody>
<tr style="padding:0px;margin:0px;border:0px solid gray!important">
<td style="color:rgb(0,0,0);font-family:Arial,sans-serif;font-size:11px;width:160px;vertical-align:bottom;padding:0px;border:0px solid gray!important">
<p><span style="font-size:14px;font-weight:bold">Oskar
Butovič</span><br>
solution
architect<br>
<br>
gsm: <a href="tel:+420%20774%20480%20101" value="+420774480101" target="_blank">[+420]
774 480 101</a><br>
e-mail: <a href="mailto:oskar.butovic@ami.cz" target="_blank">oskar.butovic@ami.cz</a></p>
</td>
<td style="color:rgb(0,0,0);font-family:Verdana,Arial,Helvetica,sans-serif;font-size:10px;border-right-width:1px;border-right-style:solid;border-right-color:rgb(204,204,204);padding:0px;border-top-width:0px!important;border-bottom-width:0px!important;border-left-width:0px!important;border-top-style:solid!important;border-bottom-style:solid!important;border-left-style:solid!important;border-top-color:gray!important;border-bottom-color:gray!important;border-left-color:gray!important"> </td>
<td style="color:rgb(0,0,0);font-family:Verdana,Arial,Helvetica,sans-serif;font-size:10px;padding:0px;border:0px solid gray!important"> </td>
<td style="color:rgb(0,0,0);font-family:Arial,sans-serif;font-size:11px;vertical-align:bottom;padding:0px;width:123px;border:0px solid gray!important">
<p>AMI Praha a.s.<br>
Pláničkova 11<br>
162 00 Praha 6<br>
tel.: <a href="tel:+420%20274%20783%20239" value="+420274783239" target="_blank">[+420]
274 783 239</a><br>
web: <a href="http://www.ami.cz/" target="_blank">www.ami.cz</a></p>
</td>
<td style="color:rgb(0,0,0);font-family:Verdana,Arial,Helvetica,sans-serif;font-size:10px;border-right-width:1px;border-right-style:solid;border-right-color:rgb(204,204,204);padding:0px;border-top-width:0px!important;border-bottom-width:0px!important;border-left-width:0px!important;border-top-style:solid!important;border-bottom-style:solid!important;border-left-style:solid!important;border-top-color:gray!important;border-bottom-color:gray!important;border-left-color:gray!important"> </td>
<td style="color:rgb(0,0,0);font-family:Verdana,Arial,Helvetica,sans-serif;font-size:10px;padding:0px;border:0px solid gray!important"> </td>
<td style="color:rgb(0,0,0);font-family:Arial,sans-serif;font-size:11px;margin:8px;border:0px solid gray!important;width:116px">
<p><img src="http://www.ami.cz/images/podpis/ami_logo.gif" alt="AMI Praha a.s." style="border:0px"></p>
</td>
</tr>
<tr style="padding:0px;margin:0px;border:0px solid gray!important">
<td colspan="7" style="color:rgb(0,0,0);font-family:Verdana,Arial,Helvetica,sans-serif;font-size:10px;padding:0px;width:480px;border:0px solid gray!important"><br>
<a href="http://www.ami.cz/reseni-a-sluzby/bezpecnost-dat/identity-management" target="_blank"><img src="http://www.ami.cz/images/podpis/AMI-podpis-IdM_1.png" alt="AMI Praha
a.s." style="border:0px;width:480px!important;height:82px!important"></a></td>
</tr>
<tr style="padding:0px;margin:0px;border:0px solid gray!important">
<td colspan="7" style="color:rgb(128,128,128);font-family:Arial,sans-serif;font-size:11px;padding:0px;border:0px solid gray!important"><br>
Textem tohoto
e-mailu
podepisující
neslibuje uzavřít
ani neuzavírá za
společnost AMI
Praha a.s.<br>
jakoukoliv
smlouvu. Každá
smlouva, pokud
bude uzavřena,
musí mít výhradně
písemnou formu.<br>
<br>
</td>
</tr>
</tbody>
</table>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<br>
______________________________<wbr>_________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">http://lists.evolveum.com/mail<wbr>man/listinfo/midpoint</a><br>
<br>
</blockquote>
</div>
<br>
</div>
</div>
</div>
<br>
______________________________<wbr>_________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">http://lists.evolveum.com/mail<wbr>man/listinfo/midpoint</a><br>
<br>
</blockquote>
</div>
<br>
<br clear="all">
<div><br>
</div>
-- <br>
<div class="m_-6638572887901306644m_-8810484838491336704m_4615393090750857349gmail_signature" data-smartmail="gmail_signature">
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr">
<div dir="ltr">
<table style="font-family:Verdana,Arial,Helvetica,sans-serif;border-collapse:collapse;padding:0px;margin:0px;border-width:0px!important;border-style:solid!important;width:482px!important">
<tbody>
<tr style="padding:0px;margin:0px;border:0px solid gray!important">
<td style="color:rgb(0,0,0);font-family:Arial,sans-serif;font-size:11px;width:160px;vertical-align:bottom;padding:0px;border:0px solid gray!important">
<p><span style="font-size:14px;font-weight:bold">Oskar
Butovič</span><br>
solution architect<br>
<br>
gsm: <a href="tel:+420%20774%20480%20101" value="+420774480101" target="_blank">[+420]
774 480 101</a><br>
e-mail: <a href="mailto:oskar.butovic@ami.cz" target="_blank">oskar.butovic@ami.cz</a></p>
</td>
<td style="color:rgb(0,0,0);font-family:Verdana,Arial,Helvetica,sans-serif;font-size:10px;border-right-width:1px;border-right-style:solid;border-right-color:rgb(204,204,204);padding:0px;border-top-width:0px!important;border-bottom-width:0px!important;border-left-width:0px!important;border-top-style:solid!important;border-bottom-style:solid!important;border-left-style:solid!important;border-top-color:gray!important;border-bottom-color:gray!important;border-left-color:gray!important"> </td>
<td style="color:rgb(0,0,0);font-family:Verdana,Arial,Helvetica,sans-serif;font-size:10px;padding:0px;border:0px solid gray!important"> </td>
<td style="color:rgb(0,0,0);font-family:Arial,sans-serif;font-size:11px;vertical-align:bottom;padding:0px;width:123px;border:0px solid gray!important">
<p>AMI Praha a.s.<br>
Pláničkova 11<br>
162 00 Praha 6<br>
tel.: <a href="tel:+420%20274%20783%20239" value="+420274783239" target="_blank">[+420]
274 783 239</a><br>
web: <a href="http://www.ami.cz/" target="_blank">www.ami.cz</a></p>
</td>
<td style="color:rgb(0,0,0);font-family:Verdana,Arial,Helvetica,sans-serif;font-size:10px;border-right-width:1px;border-right-style:solid;border-right-color:rgb(204,204,204);padding:0px;border-top-width:0px!important;border-bottom-width:0px!important;border-left-width:0px!important;border-top-style:solid!important;border-bottom-style:solid!important;border-left-style:solid!important;border-top-color:gray!important;border-bottom-color:gray!important;border-left-color:gray!important"> </td>
<td style="color:rgb(0,0,0);font-family:Verdana,Arial,Helvetica,sans-serif;font-size:10px;padding:0px;border:0px solid gray!important"> </td>
<td style="color:rgb(0,0,0);font-family:Arial,sans-serif;font-size:11px;margin:8px;border:0px solid gray!important;width:116px">
<p><img src="http://www.ami.cz/images/podpis/ami_logo.gif" alt="AMI Praha a.s." style="border:0px"></p>
</td>
</tr>
<tr style="padding:0px;margin:0px;border:0px solid gray!important">
<td colspan="7" style="color:rgb(0,0,0);font-family:Verdana,Arial,Helvetica,sans-serif;font-size:10px;padding:0px;width:480px;border:0px solid gray!important"><br>
<a href="http://www.ami.cz/reseni-a-sluzby/bezpecnost-dat/identity-management" target="_blank"><img src="http://www.ami.cz/images/podpis/AMI-podpis-IdM_1.png" alt="AMI Praha a.s." style="border:0px;width:480px!important;height:82px!important"></a></td>
</tr>
<tr style="padding:0px;margin:0px;border:0px solid gray!important">
<td colspan="7" style="color:rgb(128,128,128);font-family:Arial,sans-serif;font-size:11px;padding:0px;border:0px solid gray!important"><br>
Textem tohoto e-mailu podepisující
neslibuje uzavřít ani neuzavírá za
společnost AMI Praha a.s.<br>
jakoukoliv smlouvu. Každá smlouva,
pokud bude uzavřena, musí mít
výhradně písemnou formu.<br>
<br>
</td>
</tr>
</tbody>
</table>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<br>
______________________________<wbr>_________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">http://lists.evolveum.com/mail<wbr>man/listinfo/midpoint</a><br>
<br>
</blockquote>
</div>
<br>
</div>
<br>
<fieldset class="m_-6638572887901306644mimeAttachmentHeader"></fieldset>
<br>
<pre>______________________________<wbr>_________________
midPoint mailing list
<a class="m_-6638572887901306644moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a>
<a class="m_-6638572887901306644moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/<wbr>mailman/listinfo/midpoint</a><span class="HOEnZb"><font color="#888888">
</font></span></pre><span class="HOEnZb"><font color="#888888">
</font></span></blockquote><span class="HOEnZb"><font color="#888888">
<br>
<pre class="m_-6638572887901306644moz-signature" cols="72">--
Ivan Noris
Senior Identity Engineer
<a href="http://evolveum.com" target="_blank">evolveum.com</a>
</pre>
</font></span></div>
<br>______________________________<wbr>_________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">http://lists.evolveum.com/<wbr>mailman/listinfo/midpoint</a><br>
<br></blockquote></div><br></div></div></div>