<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
color:black;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
color:black;}
pre
{mso-style-priority:99;
mso-style-link:"HTML - vooraf opgemaakt Char";
margin:0cm;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";
color:black;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman",serif;
color:black;}
span.E-mailStijl19
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.HTML-voorafopgemaaktChar
{mso-style-name:"HTML - vooraf opgemaakt Char";
mso-style-priority:99;
mso-style-link:"HTML - vooraf opgemaakt";
font-family:Consolas;
color:black;}
span.E-mailStijl22
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body bgcolor="white" lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><span style="color:#1F497D">Hi Ivan,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Thank for your response. The role has an inducement for AD. I don’t see any errors in the log, but when a new account is created, I do see the normal AD LDAP warning stuff, so midpoint is definitely doing something.
User is not created though. I’ll try some more debugging. I also included the role as attachement.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">AD LDAP warnings:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">2018-01-29 13:30:39,000 [] [midPointScheduler_Worker-1] WARN (com.evolveum.polygon.connector.ldap.schema.AbstractSchemaTranslator): method: null msg:Uknown attribute 1.3.6.1.4.1.1466.115.121.1.15, cannot determine
if it is binary<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">2018-01-29 13:30:39,000 [] [midPointScheduler_Worker-1] WARN (com.evolveum.polygon.connector.ldap.schema.AbstractSchemaTranslator): method: null msg:Uknown attribute 1.3.6.1.4.1.1466.115.121.1.12, cannot determine
if it is binary<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">2018-01-29 13:30:39,000 [] [midPointScheduler_Worker-1] WARN (com.evolveum.polygon.connector.ldap.schema.AbstractSchemaTranslator): method: null msg:Uknown attribute 1.3.6.1.4.1.1466.115.121.1.15, cannot determine
if it is binary<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">2018-01-29 13:30:39,001 [] [midPointScheduler_Worker-1] WARN (com.evolveum.polygon.connector.ldap.schema.AbstractSchemaTranslator): method: null msg:Uknown attribute 1.3.6.1.4.1.1466.115.121.1.15, cannot determine
if it is binary<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">2018-01-29 13:30:39,001 [] [midPointScheduler_Worker-1] WARN (com.evolveum.polygon.connector.ldap.schema.AbstractSchemaTranslator): method: null msg:Uknown attribute 1.3.6.1.4.1.1466.115.121.1.15, cannot determine
if it is binary<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">2018-01-29 13:30:39,001 [] [midPointScheduler_Worker-1] WARN (com.evolveum.polygon.connector.ldap.schema.AbstractSchemaTranslator): method: null msg:Uknown attribute 1.3.6.1.4.1.1466.115.121.1.15, cannot determine
if it is binary<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">2018-01-29 13:30:39,001 [] [midPointScheduler_Worker-1] WARN (com.evolveum.polygon.connector.ldap.schema.AbstractSchemaTranslator): method: null msg:Uknown attribute 1.2.840.113556.1.4.906, cannot determine if
it is binary<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">2018-01-29 13:30:39,001 [] [midPointScheduler_Worker-1] WARN (com.evolveum.polygon.connector.ldap.schema.AbstractSchemaTranslator): method: null msg:Uknown attribute 1.3.6.1.4.1.1466.115.121.1.15, cannot determine
if it is binary<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">2018-01-29 13:30:39,001 [] [midPointScheduler_Worker-1] WARN (com.evolveum.polygon.connector.ldap.schema.AbstractSchemaTranslator): method: null msg:Uknown attribute 1.3.6.1.4.1.1466.115.121.1.15, cannot determine
if it is binary<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">2018-01-29 13:30:39,001 [] [midPointScheduler_Worker-1] WARN (com.evolveum.polygon.connector.ldap.schema.AbstractSchemaTranslator): method: null msg:Uknown attribute 1.3.6.1.4.1.1466.115.121.1.27, cannot determine
if it is binary<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">2018-01-29 13:30:39,040 [] [midPointScheduler_Worker-1] INFO (org.apache.cxf.wsdl.service.factory.ReflectionServiceFactoryBean): Creating Service {http://schemas.dmtf.org/wbem/wsman/1/wsman.xsd}WinRmService from
WSDL: jar:file:/var/cache/tomcat/temp/bundle-1680891419/lib/winrm4j-client-0.4.0.e4.jar!/wsdl/WinRmService.wsdl<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span style="color:windowtext">Van:</span></b><span style="color:windowtext"> midPoint [mailto:midpoint-bounces@lists.evolveum.com]
<b>Namens </b>Ivan Noris<br>
<b>Verzonden:</b> Wednesday, 24 January 2018 09:43<br>
<b>Aan:</b> midpoint@lists.evolveum.com<br>
<b>Onderwerp:</b> Re: [midPoint] inducement issue after upgrade to 3.7<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p>Hi Davy,<span style="font-size:12.0pt"><o:p></o:p></span></p>
<p>I have just tried our training environment installed from scratch, where we assign a role using object template, to each newly imported person from HR source. And it works. The projections are created after role is assigned.<o:p></o:p></p>
<p>I have not clean 3.7 but 3.7-support branch to be honest.<o:p></o:p></p>
<p>Are there any errors in midpoint.log? Can you share the role?<o:p></o:p></p>
<p>Best regards,<o:p></o:p></p>
<p>Ivan<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">On 24.01.2018 09:17, Davy Priem wrote:<o:p></o:p></p>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class="MsoNormal">Hi,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">This is a probably a version stupid question, but since I upgraded to version 3.7, the inducements on a role aren’t processed anymore when a role is assigned to a user. I have a template that assigns a role on a new user. That role has
several inducements. When a new users is imported, midpoint succesfully assigns the role to the user (as with 3.6). However, there it stops. When I go to the user and do a recon, then the projections are made. Am I overlooking something? I didn’t found any
behaviour change in 3.7 release notes. <o:p></o:p></p>
<p class="MsoNormal"><br>
<br>
<o:p></o:p></p>
<p class="MsoNormal">Best regards,<o:p></o:p></p>
<p class="MsoNormal">Davy Priem <o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman",serif"><br>
<br>
<br>
<o:p></o:p></span></p>
<pre>_______________________________________________<o:p></o:p></pre>
<pre>midPoint mailing list<o:p></o:p></pre>
<pre><a href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a><o:p></o:p></pre>
<pre><a href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</a><o:p></o:p></pre>
</blockquote>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman",serif"><br>
<br>
<o:p></o:p></span></p>
<pre>-- <o:p></o:p></pre>
<pre>Ivan Noris<o:p></o:p></pre>
<pre>Senior Identity Engineer<o:p></o:p></pre>
<pre>evolveum.com<o:p></o:p></pre>
</div>
</body>
</html>