<?xml version="1.0" encoding="utf-16"?><html><head><style id="signatureStyle" type="text/css"><!--#x5e30aea012444ae a img
{border: 0px;}
#x5e30aea012444ae
{font-family: Tahoma; font-size: 12pt;}
--></style><style id="css_styles" type="text/css"><!--blockquote.cite { margin-left: 5px; margin-right: 0px; padding-left: 10px; padding-right:0px; border-left: 1px solid #cccccc }
blockquote.cite2 {margin-left: 5px; margin-right: 0px; padding-left: 10px; padding-right:0px; border-left: 1px solid #cccccc; margin-top: 3px; padding-top: 0px; }
a img { border: 0px; }
ol, ul { list-style-position: inside }
body { font-family: Tahoma; font-size: 12pt; }--></style></head><body><div>Hi Jan,</div><div>try this modified filter:</div><div><br /></div><div><br /></div><div> <protected><br /> <filter><br /> <q:or><br /> <q:substring><br /> <q:matching>stringIgnoreCase</q:matching><br /> <q:path>declare namespace icfs='<a href="http://midpoint.evolveum.com/xml/ns/public/connector/icf-1/resource-schema-3';">http://midpoint.evolveum.com/xml/ns/public/connector/icf-1/resource-schema-3';</a> attributes/icfs:name</q:path><br /> <q:value>ou=Global,dc=hell,dc=local</q:value><br /> <q:anchorEnd>true</q:anchorEnd><br /> </q:substring><br /> <q:substring><br /> <q:matching>stringIgnoreCase</q:matching><br /> <q:path>declare namespace icfs='<a href="http://midpoint.evolveum.com/xml/ns/public/connector/icf-1/resource-schema-3';">http://midpoint.evolveum.com/xml/ns/public/connector/icf-1/resource-schema-3';</a> attributes/icfs:name</q:path><br /> <q:value>ou=CZ,dc=hell,dc=local</q:value><br /> <q:anchorEnd>true</q:anchorEnd><br /> </q:substring><br /> <q:substring><br /> <q:matching>stringIgnoreCase</q:matching><br /> <q:path>declare namespace icfs='<a href="http://midpoint.evolveum.com/xml/ns/public/connector/icf-1/resource-schema-3';">http://midpoint.evolveum.com/xml/ns/public/connector/icf-1/resource-schema-3';</a> attributes/icfs:name</q:path><br /> <q:value>cz=Users,dc=hell,dc=local</q:value><br /> <q:anchorEnd>true</q:anchorEnd><br /> </q:substring><br /> </q:or><br /> </filter><br /> </protected><br /></div><div><br /></div>
<div>Regards</div><div id="signature_old"><div id="x5e30aea012444ae"><div style="FONT-SIZE: 12pt; FONT-FAMILY: Tahoma"><br /></div><div style="FONT-SIZE: 12pt; FONT-FAMILY: Tahoma"><table style="WHITE-SPACE: normal; WORD-SPACING: 0px; BORDER-COLLAPSE: collapse; TEXT-TRANSFORM: none; COLOR: rgb(0,0,0); FONT: medium 'Times New Roman'; WIDOWS: 1; LETTER-SPACING: normal; TEXT-INDENT: 0px; -webkit-text-stroke-width: 0px">
<tbody>
<tr>
<td style="FONT-SIZE: 11px; FONT-FAMILY: Arial, sans-serif; VERTICAL-ALIGN: bottom; COLOR: rgb(0,0,0)" colspan="2">
<p><span style="FONT-SIZE: 14px; FONT-WEIGHT: bold">Roman Pudil</span><br />solution architect<br /><br />gsm: [+420] 775 663 666<br />e-mail:<span class="Apple-converted-space"> </span><a href="mailto:roman.pudil@ami.cz">roman.pudil@ami.cz</a></p></td>
<td style="BORDER-RIGHT: rgb(204,204,204) 1px solid"> </td>
<td> </td>
<td style="FONT-SIZE: 11px; FONT-FAMILY: Arial, sans-serif; VERTICAL-ALIGN: bottom; COLOR: rgb(0,0,0)">
<p>AMI Praha a.s.<br />Pláničkova 11<br />162 00 Praha 6<br />tel./fax: [+420] 274 783 239<br />web:<span class="Apple-converted-space"> </span><a href="http://www.ami.cz">www.ami.cz</a></p></td>
<td style="BORDER-RIGHT: rgb(204,204,204) 1px solid"> </td>
<td> </td>
<td style="FONT-SIZE: 11px; FONT-FAMILY: Arial, sans-serif; COLOR: rgb(0,0,0)">
<p><img title="AMI Praha a.s." border="0" alt="" src="http://www.ami.cz/images/podpis/ami_logo.gif " /></p></td></tr>
<tr>
<td colspan="8"><br /><a href="http://www.ami.cz/reseni-a-sluzby/bezpecnost-dat/identity-management"><img border="0" alt="" src="http://www.ami.cz/images/podpis/AMI-podpis-IdM_1.png" /></a></td></tr>
<tr>
<td style="FONT-SIZE: 11px; FONT-FAMILY: Arial, sans-serif; COLOR: rgb(128,128,128)" colspan="8"><br />Textem tohoto e-mailu podepisující neslibuje uzavřít ani neuzavírá za společnost AMI Praha a.s.<br />jakoukoliv smlouvu. Každá smlouva, pokud bude uzavřena, musí mít výhradně písemnou formu.</td></tr></tbody></table></div></div></div><div><br /></div>
<div>------ Původní zpráva ------</div>
<div>Od: "Jan Kaspar" <<a href="mailto:Caspi@seznam.cz">Caspi@seznam.cz</a>></div>
<div>Komu: <a href="mailto:midpoint@lists.evolveum.com">midpoint@lists.evolveum.com</a></div>
<div>Odesláno: 4.1.2018 20:27:48</div>
<div>Předmět: [midPoint] Protected</div><div><br /></div>
<div id="xd04e3f00bd4d496"><blockquote cite="U4L.vGu.ERPMWxSaP}.1QJe0q@seznam.cz" type="cite" class="cite2">
Hi all,<div><br /></div><div>I have a question about protected objects. I need to exclude multiple OU's in AD.</div><div><br /></div><div>I tryed to do that by adding:</div><div><br /></div><div><div> <protected></div><div> <filter></div><div> <q:substring></div><div> <q:matching>stringIgnoreCase</q:matching></div><div> <q:path>declare namespace icfs='<a href="http://midpoint.evolveum.com/xml/ns/public/connector/icf-1/resource-schema-3';">http://midpoint.evolveum.com/xml/ns/public/connector/icf-1/resource-schema-3';</a> attributes/icfs:name</q:path></div><div> <q:value>ou=Global,dc=hell,dc=local</q:value></div><div> <q:anchorEnd>true</q:anchorEnd></div><div> </q:substring></div><div> </filter></div><div> </protected></div><div> <protected></div><div> <filter></div><div> <q:substring></div><div> <q:matching>stringIgnoreCase</q:matching></div><div> <q:path>declare namespace icfs='<a href="http://midpoint.evolveum.com/xml/ns/public/connector/icf-1/resource-schema-3';">http://midpoint.evolveum.com/xml/ns/public/connector/icf-1/resource-schema-3';</a> attributes/icfs:name</q:path></div><div> <q:value>ou=CZ,dc=hell,dc=local</q:value></div><div> <q:anchorEnd>true</q:anchorEnd></div><div> </q:substring></div><div> </filter></div><div> </protected></div></div><div><div> <protected></div><div> <filter></div><div> <q:substring></div><div> <q:matching>stringIgnoreCase</q:matching></div><div> <q:path>declare namespace icfs='<a href="http://midpoint.evolveum.com/xml/ns/public/connector/icf-1/resource-schema-3';">http://midpoint.evolveum.com/xml/ns/public/connector/icf-1/resource-schema-3';</a> attributes/icfs:name</q:path></div><div> <q:value>cz=Users,dc=hell,dc=local</q:value></div><div> <q:anchorEnd>true</q:anchorEnd></div><div> </q:substring></div><div> </filter></div><div> </protected></div></div><div><br /></div><div>But it doesnt work. I am not able to see account in repository and resource. If htere is only one protected OU then it works.</div><div>Where is an error?</div><div><br /></div><div>Thanks </div><div><br /></div><div>Jan</div></blockquote></div>
</body></html>