<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p>Hello Marco,</p>
<p>I assume your entitlements are created using account
constructions containing mappings. The behavior on
recompute/reconcile depends on the strength of those mappings and
on the tolerance level set on target associations (and
attributes).</p>
<p>Generally, strength=normal (read "relative") means the mappings
are put into action on a value change. Recompute/reconcile does <b>not</b>
trigger them.</p>
<p>If you want to be sure your mapping is employed on
recompute/reconcile, you have to mark it as strength=strong.</p>
<p>See <a moz-do-not-send="true"
href="https://wiki.evolveum.com/display/midPoint/Mapping#Mapping-MappingStrength">https://wiki.evolveum.com/display/midPoint/Mapping#Mapping-MappingStrength</a>.</p>
<p>Also you can enable logging and see what mappings are triggered,
and, generally, what's going on when you run recompute.</p>
<p>See <a moz-do-not-send="true"
href="https://wiki.evolveum.com/display/midPoint/Troubleshooting+Mappings">https://wiki.evolveum.com/display/midPoint/Troubleshooting+Mappings</a>.</p>
<p>Best regards,<br>
</p>
<pre class="moz-signature" cols="72">Pavol Mederly
Software developer
evolveum.com
</pre>
<div class="moz-cite-prefix">On 08.09.2017 19:56, Marco Benucci
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:lc8o38bri1ir6n242o422pn7.1504893392150@email.android.com">
<div dir="ltr">Sorry for not have specified this before, but
recompute seems not to work. Neither the checkbox on the user
page neither a bulk with the recompute action...<br>
</div>
<div dir="ltr"><br>
</div>
<div dir="ltr">No errors are showed by the way.<br>
</div>
<div dir="ltr"><br>
</div>
<div dir="ltr">We have planned the update asap, but before doing
that we have a bunch of more urgent requests...<br>
</div>
<div dir="ltr"><br>
</div>
<div dir="ltr">Anyway, should be this the expected behavior?<br>
</div>
<div dir="ltr"><br>
</div>
<div dir="ltr">If an account on AD is not in a given group, but
his/her virtual identity have the role/entitlement associated
(and the account is correctly linked), should a recomputation
fix this?<br>
</div>
<div dir="ltr"><br>
</div>
<div dir="ltr">Maybe we have a wrong resource configuration? </div>
<div class="wps_quotion">Il 08 set 2017 7:44 PM, Martin Lízner -
AMI Praha a.s. <a class="moz-txt-link-rfc2396E" href="mailto:martin.lizner@ami.cz"><martin.lizner@ami.cz></a> ha scritto:<br
type="attribution">
<blockquote class="quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr">Hi, simple user recompute should do it. E.g.
open user in GUI, check the reconcile checbox and hit save.
Anyway I also recommend upgrading to the latest (3.6, soon
3.6.1) mp version. M.</div>
<div class="gmail_extra"><br clear="all">
<div>
<div class="gmail_signature">
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<table
style="font-family:Verdana,Arial,Helvetica,sans-serif;border-collapse:collapse;padding:0px;margin:0px;border-width:0px!important;border-style:solid!important;width:482px!important">
<tbody>
<tr
style="padding:0px;margin:0px;border:0px
solid gray!important">
<td colspan="2"
style="color:rgb(0,0,0);font-family:Arial,sans-serif;font-size:11px;vertical-align:bottom;padding:0px;border:0px
solid gray!important">
<p><span
style="font-size:14px;font-weight:bold">Martin
Lízner</span><br>
solution architect<br>
<br>
gsm: [+420] 737 745 571<br>
e-mail: <a
href="mailto:martin.lizner@ami.cz"
target="_blank"
moz-do-not-send="true">martin.lizner@ami.cz</a></p>
</td>
<td
style="color:rgb(0,0,0);font-family:Verdana,Arial,Helvetica,sans-serif;font-size:10px;border-right-width:1px;border-right-style:solid;border-right-color:rgb(204,204,204);padding:0px;border-top-width:0px!important;border-bottom-width:0px!important;border-left-width:0px!important;border-top-style:solid!important;border-bottom-style:solid!important;border-left-style:solid!important;border-top-color:gray!important;border-bottom-color:gray!important;border-left-color:gray!important"> </td>
<td
style="color:rgb(0,0,0);font-family:Verdana,Arial,Helvetica,sans-serif;font-size:10px;padding:0px;border:0px
solid gray!important"> </td>
<td
style="color:rgb(0,0,0);font-family:Arial,sans-serif;font-size:11px;vertical-align:bottom;padding:0px;border:0px
solid gray!important">
<p>AMI Praha a.s.<br>
Pláničkova 11<br>
162 00 Praha 6<br>
tel.: [+420] 274 783 239<br>
web: <a
href="http://www.ami.cz/"
target="_blank"
moz-do-not-send="true">www.ami.cz</a></p>
</td>
<td
style="color:rgb(0,0,0);font-family:Verdana,Arial,Helvetica,sans-serif;font-size:10px;border-right-width:1px;border-right-style:solid;border-right-color:rgb(204,204,204);padding:0px;border-top-width:0px!important;border-bottom-width:0px!important;border-left-width:0px!important;border-top-style:solid!important;border-bottom-style:solid!important;border-left-style:solid!important;border-top-color:gray!important;border-bottom-color:gray!important;border-left-color:gray!important"> </td>
<td
style="color:rgb(0,0,0);font-family:Verdana,Arial,Helvetica,sans-serif;font-size:10px;padding:0px;border:0px
solid gray!important"> </td>
<td
style="color:rgb(0,0,0);font-family:Arial,sans-serif;font-size:11px;margin:8px;border:0px
solid gray!important">
<p><img
src="http://www.ami.cz/images/podpis/ami_logo.gif"
alt="" style="border:0px"
moz-do-not-send="true"></p>
</td>
</tr>
<tr
style="padding:0px;margin:0px;border:0px
solid gray!important">
<td colspan="8"
style="color:rgb(0,0,0);font-family:Verdana,Arial,Helvetica,sans-serif;font-size:10px;padding:0px;border:0px
solid gray!important"><br>
</td>
</tr>
<tr
style="padding:0px;margin:0px;border:0px
solid gray!important">
<td colspan="8"
style="color:rgb(128,128,128);font-family:Arial,sans-serif;font-size:11px;padding:0px;border:0px
solid gray!important">
<table
style="font-family:Verdana,Arial,Helvetica,sans-serif;border-collapse:collapse;padding:0px;margin:0px;border-width:0px!important;border-style:solid!important;width:482px!important">
<tbody>
<tr
style="padding:0px;margin:0px;border:0px
solid gray!important">
<td colspan="7"
style="color:rgb(0,0,0);font-family:Verdana,Arial,Helvetica,sans-serif;font-size:10px;padding:0px;width:480px;border:0px
solid gray!important"><br>
<a
href="http://www.skyidentity.com/"
target="_blank"
moz-do-not-send="true"><img
src="http://www.ami.cz/images/podpis/AMI-podpis-Sky.png" alt="AMI Praha
a.s."
style="border:0px;width:480px!important;height:82px!important"
moz-do-not-send="true"></a></td>
</tr>
<tr
style="padding:0px;margin:0px;border:0px
solid gray!important">
<td colspan="7"
style="font-family:Arial,sans-serif;padding:0px;border:0px
solid gray!important"><br>
</td>
</tr>
</tbody>
</table>
Textem tohoto e-mailu
podepisující neslibuje uzavřít
ani neuzavírá za společnost AMI
Praha a.s.<br>
jakoukoliv smlouvu. Každá
smlouva, pokud bude uzavřena,
musí mít výhradně písemnou
formu.</td>
</tr>
</tbody>
</table>
</div>
<br>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<br>
<div class="gmail_quote">2017-09-08 18:43 GMT+02:00 Marco
Benucci <span dir="ltr"><<a
href="mailto:m.benucci@nsr.it" target="_blank"
moz-do-not-send="true">m.benucci@nsr.it</a>></span>:<br>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
<div text="#000000" bgcolor="#FFFFFF">
<p><font face="Roboto">Hi,</font></p>
<p><font face="Roboto">we have midpoint 3.4 and an AD
resource with </font><font face="Roboto"><font
face="Roboto">configured </font>entitlements.<br>
<br>
Now, I still do not know why, but on AD many users
have lost their membership of a role. Fortunately
in midPoint we still have the role/entitlement
associated to all the right users.<br>
<br>
Is there a way to force midPoint to reevaluate the
entitlement association to add again users to
theri group?<br>
<br>
Thank you.</font><br>
</p>
</div>
<br>
_______________________________________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com"
moz-do-not-send="true">midPoint@lists.evolveum.com</a><br>
<a
href="http://lists.evolveum.com/mailman/listinfo/midpoint"
rel="noreferrer" target="_blank"
moz-do-not-send="true">http://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
<br>
</blockquote>
</div>
<br>
</div>
</blockquote>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
midPoint mailing list
<a class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>
<a class="moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
</body>
</html>