<html><body><span style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:12.8px">Hi All,</span><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:12.8px"><br></div><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:12.8px">i am new to midPoint and I would like to test it. I have installed 1 domain controller and midPoint server on CentOS machine.</div><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:12.8px"><br></div><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:12.8px">After few hours i have created user sync. Using import task i got all users to midPoint. Using Live syng i am able to perform changes to</div><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:12.8px">AD from midPoint.</div><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:12.8px"><br></div><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:12.8px">Hell came with trying of creating roles for management AD groups members. I am totaly lost. If i try to create Role, it is creating USER account in AD.</div><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:12.8px"><br></div><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:12.8px">If i have created groups in AD i am able to import them as a role. Coul;d someone helped me with initial setup? I am using midPoint 3.6.1 and it looks like</div><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:12.8px">documentation is not complete.</div><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:12.8px"><br></div><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:12.8px">Also i am getting error :</div><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:12.8px"><br></div><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:12.8px"><span style="color:rgb(51,51,51);font-size:14px">No namespace in reference to attribute or association 'dn' in schema handling for 'AD Group (kind: ENTITLEMENT, intent: group)</span><br></div><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:12.8px"><span style="color:rgb(51,51,51);font-size:14px"><br></span></div><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:12.8px"><span style="color:rgb(51,51,51);font-size:14px">Is this root cause of all troubles? </span></div><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:12.8px"><span style="color:rgb(51,51,51);font-size:14px"><br></span></div><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:12.8px"><span style="color:rgb(51,51,51);font-size:14px">Thanks</span></div><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:12.8px"><div><br>Honza</div></div></body></html>