<div dir="ltr"><div>Alexandre, in such case we have the same problem.</div><div><br></div><div>As I have to manage sshPublicKey as a single values attribute I have a temporary workaround  <br></div><div>I use a configuration that doesn't remove sshPublicKey on LDAP resource automatically when it is removed from the user profile (mapping has tolerant=true option).</div><div>But users, if they want, can delete sshPublicKey by removing it from user profile and projection manually by themselves. In this case, it removes sshPublicKey on LDAP resource successfully.</div><div>In other situations, everything works as expected.  I am able to add or replace sshPublicKey with a new one on the resource via user profile interface in IDM.</div><div><br></div><div>         <attribute id="135"><br>            <c:ref>ri:sshPublicKey</c:ref><br>            <displayName>sshPublicKey</displayName><br>            <outbound><br>               <strength>normal</strength><br>               <source><br>                  <c:path>$user/extension/sshPublicKey</c:path><br>               </source><br>            </outbound><br>         </attribute></div><div></div><div>(tolerant=true by default)<br></div><div><br></div><div><br></div><div>Best regards, Oleksandr<br></div><div><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On 26 July 2018 at 14:26, Alexandre Zia <span dir="ltr"><<a href="mailto:alexandre.zia@ifood.com.br" target="_blank">alexandre.zia@ifood.com.br</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div>Hi Oleksandr</div><div><br></div><div>I think it is the same problem.<br></div><div>I was using index=false, have just enabled index=true in hope to make it work, didn't realize the error on database was due to enabling indexing. Now I've just disabled it again.<br></div><div><br></div><div>I have the same behavior as you mentioned if I set the outbount mapping strength to "normal" then one time it adds the attribute, other time it removes the attribute exactly as tou reported.<br></div><div>If I set the outbound mapping strength to "strong" it doesn't delete the attribute anymore when doing a reconciliation, but when the user is editing its own sshPublicKeys midpoint is not syncronizing user object with shadow properly, one of its sshPublicKeys are missing, if user has only one sshPublicKey shadow has none</div><div><br></div><div>Regards <br></div><span class="HOEnZb"><font color="#888888"><div>Alexandre<br></div><div><br></div><br></font></span></div><div class="HOEnZb"><div class="h5"><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Jul 26, 2018 at 4:06 AM, Oleksandr Nekriach <span dir="ltr"><<a href="mailto:o.nekriach@dynatech.lv" target="_blank">o.nekriach@dynatech.lv</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div>Hi Alexandre,</div><div>I have a little bit different situation. I have not a problem with provisioning sshPublicKey from a user profile to LDAP resource but I have a problem with recalculation of users that have such attribute on the user profile and <span class="m_5847170821325971355m_-4750759020263860602gmail-gr_ m_5847170821325971355m_-4750759020263860602gmail-gr_390 m_5847170821325971355m_-4750759020263860602gmail-gr-alert m_5847170821325971355m_-4750759020263860602gmail-gr_gramm m_5847170821325971355m_-4750759020263860602gmail-gr_inline_cards m_5847170821325971355m_-4750759020263860602gmail-gr_run_anim m_5847170821325971355m_-4750759020263860602gmail-Grammar m_5847170821325971355m_-4750759020263860602gmail-only-ins m_5847170821325971355m_-4750759020263860602gmail-doubleReplace m_5847170821325971355m_-4750759020263860602gmail-replaceWithoutSep" id="m_5847170821325971355m_-4750759020263860602gmail-390"><span class="m_5847170821325971355m_-4750759020263860602gmail-gr_ m_5847170821325971355m_-4750759020263860602gmail-gr_800 m_5847170821325971355m_-4750759020263860602gmail-gr-alert m_5847170821325971355m_-4750759020263860602gmail-gr_gramm m_5847170821325971355m_-4750759020263860602gmail-gr_inline_cards m_5847170821325971355m_-4750759020263860602gmail-gr_run_anim m_5847170821325971355m_-4750759020263860602gmail-Grammar m_5847170821325971355m_-4750759020263860602gmail-only-ins m_5847170821325971355m_-4750759020263860602gmail-doubleReplace m_5847170821325971355m_-4750759020263860602gmail-replaceWithoutSep" id="m_5847170821325971355m_-4750759020263860602gmail-800">the tolerant=false</span></span> option in mapping in LDAP resource  (more details see above).</div><div>Your case is different in Midpoint schema you use type="xsd:string" for sshPublicKey and you have a problem with field length in DB as you wrote. But I use type="xsd:base64Binary"  in midpoint schema and have another problem only with recalculation users. When mapping has the <span class="m_5847170821325971355m_-4750759020263860602gmail-gr_ m_5847170821325971355m_-4750759020263860602gmail-gr_390 m_5847170821325971355m_-4750759020263860602gmail-gr-alert m_5847170821325971355m_-4750759020263860602gmail-gr_gramm m_5847170821325971355m_-4750759020263860602gmail-gr_inline_cards m_5847170821325971355m_-4750759020263860602gmail-gr_run_anim m_5847170821325971355m_-4750759020263860602gmail-Grammar m_5847170821325971355m_-4750759020263860602gmail-only-ins m_5847170821325971355m_-4750759020263860602gmail-doubleReplace m_5847170821325971355m_-4750759020263860602gmail-replaceWithoutSep" id="m_5847170821325971355m_-4750759020263860602gmail-390"><span class="m_5847170821325971355m_-4750759020263860602gmail-gr_ m_5847170821325971355m_-4750759020263860602gmail-gr_800 m_5847170821325971355m_-4750759020263860602gmail-gr-alert m_5847170821325971355m_-4750759020263860602gmail-gr_gramm m_5847170821325971355m_-4750759020263860602gmail-gr_inline_cards m_5847170821325971355m_-4750759020263860602gmail-gr_run_anim m_5847170821325971355m_-4750759020263860602gmail-Grammar m_5847170821325971355m_-4750759020263860602gmail-only-ins m_5847170821325971355m_-4750759020263860602gmail-doubleReplace m_5847170821325971355m_-4750759020263860602gmail-replaceWithoutSep" id="m_5847170821325971355m_-4750759020263860602gmail-800">tolerant=false</span></span>  option in LDAP resource. The first user recalculation event adds attribute value from user profile into LDAP resource the second one removes this attribute on the resource from the user account. <span id="m_5847170821325971355m_-4750759020263860602gmail-result_box" class="m_5847170821325971355m_-4750759020263860602gmail-short_text" lang="en"><span class="m_5847170821325971355m_-4750759020263860602gmail-">And this happens periodically.</span></span></div><div><span id="m_5847170821325971355m_-4750759020263860602gmail-result_box" class="m_5847170821325971355m_-4750759020263860602gmail-short_text" lang="en"><span class="m_5847170821325971355m_-4750759020263860602gmail-"><br></span></span></div><div><span id="m_5847170821325971355m_-4750759020263860602gmail-result_box" class="m_5847170821325971355m_-4750759020263860602gmail-short_text" lang="en"><span class="m_5847170821325971355m_-4750759020263860602gmail-">Best regards, Oleksandr</span></span><br></div><div><br></div></div><div class="m_5847170821325971355HOEnZb"><div class="m_5847170821325971355h5"><div class="gmail_extra"><br><div class="gmail_quote">On 26 July 2018 at 05:46, Alexandre Zia <span dir="ltr"><<a href="mailto:alexandre.zia@ifood.com.br" target="_blank">alexandre.zia@ifood.com.br</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div>Think I may have found something</div><div><br></div><div>Got this error in logs:</div><div>Caused by: java.sql.BatchUpdateException: Batch entry 0 insert into m_object_ext_string (dynamicDef, eType, valueType, eName, owner_oid, ownerType, stringValue) values ('0', '<a href="http://www.w3.org/2001/XMLSchema#string" target="_blank">http://www.w3.org/2001/XMLSch<wbr>ema#string</a>', 0, '<a href="http://midpoint.evolveum.com/xml/ns/story/orgsync/ext#sshPublicKey" target="_blank">http://midpoint.evolveum.com/<wbr>xml/ns/story/orgsync/ext#sshPu<wbr>blicKey</a>', 'e50bac40-2b0f-4566-ba8d-76c65<wbr>876ed1d', 0, 'ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA+f<wbr>Ah6coYQqrA5ohhqkizbPkFquRKalRv<wbr>0MzTpK620b2oVV0y5jPNgW1hh2tsIo<wbr>DbXK/ZXc05EtCqV88S7PlJrmRvSPAV<wbr>5wtZ2ZSQ6H42YvgG4MmGgGF98fm8od<wbr>DtKfjS1uz/aoNXHbvK9378tCy0crzo<wbr>TyenSwYgavDLCjM+IG3/cFFIyDEr0O<wbr>enQIq6EUXTPxoVIgPlXyb+krah/gpu<wbr>rZHcyc2YKzOtDgpsOZ0/yDX68ICJMx<wbr>m9UDhFxH6KL4tz/A2vNOyfbsXbnIV3<wbr>bWM9A8ZsuEUR5LSCCQopFP02C6Ad3Y<wbr>cRVSRR33EOOwfdwQaGdRCzlzm3oGxz<wbr>r07CmjqElw==') was aborted: ERROR: value too long for type character varying(255)  Call getNextException to see other errors in the batch.<br></div><div><br></div><div>using postgresql as database.<br></div><div><br></div><div>table: m_object_ext_string  - that stores extended string attribute has only 255 chars and sshPublicKeys are bigger my key have 380 chars</div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div></div><div class="m_5847170821325971355m_-4750759020263860602HOEnZb"><div class="m_5847170821325971355m_-4750759020263860602h5"><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Jul 25, 2018 at 3:45 PM, Alexandre Zia <span dir="ltr"><<a href="mailto:alexandre.zia@ifood.com.br" target="_blank">alexandre.zia@ifood.com.br</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">I'm facing the exact same issue, and was about to ask for help as well.<br>However my setup is a bit different, sshPublicKey is multivalued in ldap, so I'm using it as multivalued in Midpoint as well<br><br>Differences of my setup:<br>  - Attribute sshPublicKey in my Ldap is multivalued<br>  - Attribute sshPublicKey in my Midpoint is multivalued<br>  - Created authorization for users to log into GUI and edit their own sshPublicKeys<br><br>Issues:<br> <br>  - when users edit their own profile and add/delete sshPublicKeys sometimes they are not propagated to Ldap, sometimes they are but incomplete, <br><br>  - enabling Clockwork Debug in Midpoint, it shows that sshPublicKey is being included in Shadow ObjectDelta but shows no action (ADD, DELETE):<br>    <br>       ObjectDelta(ShadowType:b679ca0<wbr>0-4b00-47ba-819b-c18253624bc3,<wbr>MODIFY: PropertyDelta(attributes / {.../resource/instance-3}sshPu<wbr>blicKey), ... REMOVED TEXT ....): SUCCESS<br><br> - sometimes Clockwork Debug shows actions, ADD or DELETE, but it never reflects the user object in Midpoint, e.g. User objet has 4 sshPublicKeys, Shadow has 3, or even User object has 1 sshPublicKey and shadow has 0<br><br><br><br><br>My setup:<br><br>-----------------------------<br>- OpenLdap schema: (in openldap service)<br><br>attributetype ( 1.3.6.1.4.1.24552.500.1.1.1.13 NAME 'sshPublicKey'<br>    DESC 'MANDATORY: OpenSSH Public key'<br>    EQUALITY octetStringMatch<br>    SYNTAX 1.3.6.1.4.1.1466.115.121.1.40 )<br><br><br>-----------------------------<br>- IDM extended attibute: I've created sshPublicKey as "string" in userType <br>  (so it would be easy for users to type it in their profiles):<br><br><!-- sshPublicKey --><br><xsd:element name="sshPublicKey" type="xsd:string" minOccurs="0" maxOccurs="unbounded"  ><br>    <xsd:annotation><br>        <xsd:appinfo><br>            <a:indexed>false</a:indexed><br>            <a:displayName>SSH Public Key</a:displayName><span><br>        </xsd:appinfo><br>    </xsd:annotation><br></xsd:element><br><br></span>-----------------------------<br>- attribute in ldap connector schema:<br><br> <xsd:element maxOccurs="unbounded" minOccurs="0" name="sshPublicKey" type="xsd:base64Binary"><br>    <xsd:annotation><br>       <xsd:appinfo><br>          <a:displayOrder>150</a:display<wbr>Order><span><br>          <ra:nativeAttributeName>sshPub<wbr>licKey</ra:nativeAttributeName<wbr>><br>          <ra:frameworkAttributeName>ssh<wbr>PublicKey</ra:frameworkAttribu<wbr>teName><br>       </xsd:appinfo><br>    </xsd:annotation><br> </xsd:element><br><br></span>-----------------------------<br>- attribute mapping in ldap connector:<br><br><attribute><span><br>   <c:ref>ri:sshPublicKey</c:ref><br></span>   <displayName>SSH Public Key</displayName><br>   <tolerant>false</tolerant><br>   <exclusiveStrong>false</exclus<wbr>iveStrong><br>   <outbound><br>      <authoritative>false</authorit<wbr>ative><br>      <exclusive>false</exclusive><span><br>      <strength>strong</strength><br>      <source><br>         <c:path>$user/extension/sshPub<wbr>licKey</c:path><br>      </source><br></span>      <expression><br>         <script xsi:type="c:ScriptExpressionEv<wbr>aluatorType"><br>            <trace>false</trace><br>            <relativityMode>absolute</rela<wbr>tivityMode><br>            <includeNullInputs>true</inclu<wbr>deNullInputs><br>            <code><br>               def ret = []<br>               for (publicKey in sshPublicKey)<br>               {<br>               ret.add(publicKey.getBytes() )<br>               }<br>               return ret<br>            </code><br>         </script><br>      </expression><br>   </outbound><br>   <inbound><br>      <authoritative>false</authorit<wbr>ative><br>      <exclusive>false</exclusive><br>      <strength>weak</strength><br>      <source><br>         <c:path>$account/attributes/ss<wbr>hPublicKey</c:path><br>      </source><br>      <expression><br>         <script xsi:type="c:ScriptExpressionEv<wbr>aluatorType"><br>            <trace>false</trace><br>            <relativityMode>absolute</rela<wbr>tivityMode><br>            <includeNullInputs>true</inclu<wbr>deNullInputs><br>            <code><br>               def ret = []<br>               for (publicKey in sshPublicKey)<br>               {<br>               ret.add(new String(publicKey, "UTF-8"))<br>               }<br>               return ret<br>            </code><br>         </script><br>      </expression><br>      <target><span><br>         <c:path>$user/extension/sshPub<wbr>licKey</c:path><br></span>      </target><br>   </inbound><br></attribute><br><br><br>-----------------------------<br>- Added authorization in "End User" role, for users to manage their own sshPublicKey attribute<br><br>      <authorization><br>         <name>edit-own-ssh-public-key<<wbr>/name><br>         <description><br>         Authorize users add and delete ssh public keys from the GUI.<br>      </description><br>         <action><a href="http://midpoint.evolveum.com/xml/ns/public/security/authorization-model-3#modify" target="_blank">http://midpoint.evolve<wbr>um.com/xml/ns/public/security/<wbr>authorization-model-3#modify</a></<wbr>action><br>         <action><a href="http://midpoint.evolveum.com/xml/ns/public/security/authorization-model-3#add" target="_blank">http://midpoint.evolve<wbr>um.com/xml/ns/public/security/<wbr>authorization-model-3#add</a></act<wbr>ion><br>         <action><a href="http://midpoint.evolveum.com/xml/ns/public/security/authorization-model-3#read" target="_blank">http://midpoint.evolve<wbr>um.com/xml/ns/public/security/<wbr>authorization-model-3#read</a></ac<wbr>tion><br>         <action><a href="http://midpoint.evolveum.com/xml/ns/public/security/authorization-model-3#delete" target="_blank">http://midpoint.evolve<wbr>um.com/xml/ns/public/security/<wbr>authorization-model-3#delete</a></<wbr>action><br>         <object><br>            <special>self</special><br>         </object><br>         <object><br>            <type>ShadowType</type><br>            <owner><br>               <special>self</special><br>            </owner><br>         </object><br>         <c:item>extension/sshPublicKey<wbr></c:item><br>         <c:item>attributes/sshPublicKe<wbr>y</c:item><br>      </authorization><br><br>-----------------------------<br><br><br><br><br><div>Regards</div><div>Alexandre Zia<br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div class="gmail_extra"><div><div class="m_5847170821325971355m_-4750759020263860602m_-3698540529800188438h5"><br><div class="gmail_quote">On Wed, Jul 25, 2018 at 8:25 AM, Oleksandr Nekriach <span dir="ltr"><<a href="mailto:o.nekriach@dynatech.lv" target="_blank">o.nekriach@dynatech.lv</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div>Hi Gustav,</div><div>Thank you for the quick reply but you advise doesn't help me. Behaviour is the same. <br></div><div><br></div><div>My config after <br></div><div><span class="m_5847170821325971355m_-4750759020263860602m_-3698540529800188438m_7020317846137159041gmail-">         <attribute id="141"><br>            <c:ref>ri:sshPublicKey</c:ref><br>            <displayName>sshPublicKey</dis<wbr>playName><br></span><span class="m_5847170821325971355m_-4750759020263860602m_-3698540529800188438m_7020317846137159041gmail-">            <limitations><br>               <minOccurs>0</minOccurs><br>               <maxOccurs>1</maxOccurs><br>               <access><br>                  <read>true</read><br>                  <add>true</add><br>                  <modify>true</modify><br>               </access><br>            </limitations><br></span><span class="m_5847170821325971355m_-4750759020263860602m_-3698540529800188438m_7020317846137159041gmail-">            <tolerant>false</tolerant><br>            <fetchStrategy>explicit</fetch<wbr>Strategy><br>            <outbound><br>               <strength>strong</strength><br>               <source><br>                  <c:path>$user/extension/sshPub<wbr>licKey</c:path><br>               </source><br>            </outbound><br>         </attribute><br></span></div><div><br></div></div><div class="m_5847170821325971355m_-4750759020263860602m_-3698540529800188438m_7020317846137159041gmail-HOEnZb"><div class="m_5847170821325971355m_-4750759020263860602m_-3698540529800188438m_7020317846137159041gmail-h5"><div class="gmail_extra"><br><div class="gmail_quote">On 25 July 2018 at 12:43, Pálos Gustáv <span dir="ltr"><<a href="mailto:gustav.palos@evolveum.com" target="_blank">gustav.palos@evolveum.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr">Hi,<div><br></div><div>try to put limitation to use it as single value:</div><div><span><div>

<span style="font-size:small;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial;float:none;display:inline">         <attribute id="141"></span><br style="font-size:small;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial"><span style="font-size:small;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial;float:none;display:inline">            <c:ref>ri:sshPublicKey</c:ref></span> <br></div></span><div><span style="white-space:pre-wrap">                         </span><limitations></div><div><span style="white-space:pre-wrap">                                      </span><minOccurs>0</minOccurs></div><div><span style="white-space:pre-wrap">                                     </span><maxOccurs>1</maxOccurs></div><div><span style="white-space:pre-wrap">                                     </span><access></div><div><span style="white-space:pre-wrap">                                           </span><read>true</read></div><div><span style="white-space:pre-wrap">                                            </span><add>true</add></div><div><span style="white-space:pre-wrap">                                              </span><modify>true</modify></div><div><span style="white-space:pre-wrap">                                        </span></access></div><div><span style="white-space:pre-wrap">                          </span></limitations><span style="white-space:pre-wrap">                            </span></div><div>....</div><div><br></div><div>best regards,</div><div><br></div><div>Gustav </div><br><div class="gmail_quote"><div dir="ltr">st 25. 7. 2018 o 10:48 Oleksandr Nekriach <<a href="mailto:o.nekriach@dynatech.lv" target="_blank">o.nekriach@dynatech.lv</a>> napísal(a):<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div><div class="m_5847170821325971355m_-4750759020263860602m_-3698540529800188438m_7020317846137159041gmail-m_-399890421742829879h5"><div dir="ltr">Hi to all,<br>I have faced with a problem of unexpected behavior of Midpoint IDM(3.7) during user recalculations.<br>I have extended IDM and LDAP with sshPublicKey attribute (xsd:base64Binary in IDM and Octet String in LDAP) and created of mapping attribute in LDAP resource as is.<br>I have to remove the attribute value on LDAP when it removes in IDM. For this task, I have added tolerant=false option in the attribute mapping in LDAP resource.<br>It works in a wrong way. When I have a non-empty sshPublicKey in IDM it is provisioned in LDAP correctly. It is Ok. But when run user recalculation it removes sshPublicKey attribute value in  LDAP. When I run recalculation the second time it re-provisions sshPublicKey attribute value in  LDAP again.<br>And it can be Infinite. Every time when recalculation runs it removes and restores attribute value periodically.<br>Please help me to understand what I did in the wrong way in configuration or confirm that is a bug in Midpoint.<br><div><br></div><div>See below configuration details<br></div><div><br></div><div>Attribute in LDAP schema<br></div><div><br></div><div>olcAttributeTypes: {17}( 1.3.6.1.4.1.45689.1.1.1.2.18 NAME 'sshPublicKey' DESC 'SSH Public key' EQUALITY octetStringMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.40 SINGLE-VALUE )<br></div><div><br></div><div>Attribute in LDAP connector  schema<br></div><div><br></div><div>                  <xsd:element minOccurs="0" name="sshPublicKey" type="xsd:base64Binary"><br>                     <xsd:annotation><br>                        <xsd:appinfo><br>                           <a:displayOrder>290</a:display<wbr>Order><br>                           <ra:nativeAttributeName>sshPub<wbr>licKey</ra:nativeAttributeName<wbr>><br>                           <ra:frameworkAttributeName>ssh<wbr>PublicKey</ra:frameworkAttribu<wbr>teName><br>                        </xsd:appinfo><br>                     </xsd:annotation><br>                  </xsd:element></div><div><br></div><div>Attribute in IDM schema<br></div><div><br></div><div>               <xsd:element name="sshPublicKey" type="xsd:base64Binary" minOccurs="0" maxOccurs="1"><br>                <xsd:annotation><br>                        <xsd:appinfo><br>                        <a:displayName>sshPublicKey</a<wbr>:displayName><br>                        <a:indexed>false</a:indexed><br>                        </xsd:appinfo><br>                </xsd:annotation><br>                </xsd:element><br></div><div><br></div><div>Attribute mapping in LDAP connector</div><div><br></div><div>         <attribute id="141"><br>            <c:ref>ri:sshPublicKey</c:ref><br>            <displayName>sshPublicKey</dis<wbr>playName><br>            <tolerant>false</tolerant><br>            <fetchStrategy>explicit</fetch<wbr>Strategy><br>            <outbound><br>               <strength>strong</strength><br>               <source><br>                  <c:path>$user/extension/sshPub<wbr>licKey</c:path><br>               </source><br>            </outbound><br>         </attribute><br></div><div><br></div>-- <br><div class="m_5847170821325971355m_-4750759020263860602m_-3698540529800188438m_7020317846137159041gmail-m_-399890421742829879m_7567355648435120055gmail-m_-7492617122192416046gmail_signature"><div dir="ltr"><span style="color:rgb(76,76,76)">Best regards, <br><br><img src="cid:o.nekriach@dynatech.lv1520941785292-7770"> <br><br>Oleksandr Nekriach | Identity and access management engineer <br><br>Dynatech, <a href="https://maps.google.com/?q=Mednieku+str.+4a,+Riga,+LV-1010,+Latvia&entry=gmail&source=g" target="_blank">Mednieku str. 4a, Riga, LV-1010, Latvia</a> <br><br><div style="display:inline-block"><a href="tel:+371%2025%20314%20685" value="+37125314685" target="_blank">+37125314685</a></div>,<div style="display:inline-block"><a href="mailto:o.nekriach@dynatech.lv" target="_blank">o.nekriach@dynatech.lv</a></div>|<div style="display:inline-block"><a href="http://www.dynatech.lv" target="_blank">www.dynatech.lv</a></div> <br><br>Stay connected: <br><div style="display:inline-block;margin:5px 5px 0px 0px"><a href="https://www.facebook.com/DynatechLatvia/?ref=br_rs" target="_blank"><img src="cid:o.nekriach@dynatech.lv1520941785292-7771"></a></div><div style="display:inline-block;margin:5px 0px 0px"><a href="https://www.linkedin.com/company-beta/17893047/" target="_blank"><img src="cid:o.nekriach@dynatech.lv1520941785292-7772"></a></div><br><br><span style="font-size:11px;color:rgb(161,161,161)">Confidentiality Notice: This message contains confidential information and is intended only for the named recipient(s). If you are not the addressee you may not copy, distribute or perform any other activities with this information. If you have received this transmission in error, please notify us by e-mail immediately. E-mail transmission cannot be guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses.</span></span></div></div>
</div></div></div>
______________________________<wbr>_________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">http://lists.evolveum.com/mail<wbr>man/listinfo/midpoint<span class="m_5847170821325971355m_-4750759020263860602m_-3698540529800188438m_7020317846137159041gmail-m_-399890421742829879HOEnZb"><font color="#888888"><br clear="all"><div><br></div>-- <br></font></span></a><span class="m_5847170821325971355m_-4750759020263860602m_-3698540529800188438m_7020317846137159041gmail-m_-399890421742829879HOEnZb"><font color="#888888"><div dir="ltr" class="m_5847170821325971355m_-4750759020263860602m_-3698540529800188438m_7020317846137159041gmail-m_-399890421742829879m_7567355648435120055gmail_signature"><a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank"></a><div class="m_5847170821325971355m_-4750759020263860602m_-3698540529800188438m_7020317846137159041gmail-m_-399890421742829879m_7567355648435120055gmail_signature"><a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank"></a><div dir="ltr"><a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank"><div>Gustáv Pálos</div><div>Identity Engineer</div></a><a href="http://evolveum.com/" rel="noreferrer" style="color:rgb(17,85,204);font-size:12.8px" target="_blank">evolveum.com</a><br></div></div></div></font></span></blockquote></div></div></div>
<br>______________________________<wbr>_________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">http://lists.evolveum.com/mail<wbr>man/listinfo/midpoint</a><br>
<br></blockquote></div><br><br clear="all"><br>-- <br><div class="m_5847170821325971355m_-4750759020263860602m_-3698540529800188438m_7020317846137159041gmail-m_-399890421742829879gmail_signature"><div dir="ltr"><span style="color:rgb(76,76,76)">Best regards, <br><br><img src="cid:o.nekriach@dynatech.lv1520941785292-7770"> <br><br>Oleksandr Nekriach | Identity and access management engineer <br><br>Dynatech, <a href="https://maps.google.com/?q=Mednieku+str.+4a,+Riga,+LV-1010,+Latvia&entry=gmail&source=g" target="_blank">Mednieku str. 4a, Riga, LV-1010, Latvia</a> <br><br><div style="display:inline-block"><a href="tel:+371%2025%20314%20685" value="+37125314685" target="_blank">+37125314685</a></div>, <div style="display:inline-block"><a href="mailto:o.nekriach@dynatech.lv" target="_blank">o.nekriach@dynatech.lv</a></div> | <div style="display:inline-block"><a href="http://www.dynatech.lv" target="_blank">www.dynatech.lv</a></div> <br><br>Stay connected: <br><div style="display:inline-block;margin:5px 5px 0px 0px"><a href="https://www.facebook.com/DynatechLatvia/?ref=br_rs" target="_blank"><img src="cid:o.nekriach@dynatech.lv1520941785292-7771"></a></div><div style="display:inline-block;margin:5px 0px 0px"><a href="https://www.linkedin.com/company-beta/17893047/" target="_blank"><img src="cid:o.nekriach@dynatech.lv1520941785292-7772"></a></div><br><br><span style="font-size:11px;color:rgb(161,161,161)">Confidentiality
 Notice: This message contains confidential information and is intended 
only for the named recipient(s). If you are not the addressee you may 
not copy, distribute or perform any other activities with this 
information. If you have received this transmission in error, please 
notify us by e-mail immediately. E-mail transmission cannot be 
guaranteed to be secure or error-free as information could be 
intercepted, corrupted, lost, destroyed, arrive late or incomplete, or 
contain viruses.</span></span></div></div>
</div>
</div></div><br>______________________________<wbr>_________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">http://lists.evolveum.com/mail<wbr>man/listinfo/midpoint</a><br>
<br></blockquote></div><br><br clear="all"><br>-- <br></div></div><div class="m_5847170821325971355m_-4750759020263860602m_-3698540529800188438m_7020317846137159041gmail_signature"><div dir="ltr"><div><div dir="ltr"><div style="color:rgb(34,34,34);font-size:12.8px"><br></div><div style="color:rgb(34,34,34);font-size:12.8px"><table style="font-size:13px;line-height:normal;font-family:tahoma,geneva,sans-serif" cellspacing="0" cellpadding="0" border="0"><tbody><tr><td colspan="2"><font style="font-size:small;line-height:normal;font-weight:bold" size="2" face="tahoma, sans-serif" color="#888888"><div style="font-family:tahoma,sans-serif;display:inline">​Alexandre Roberto Zia​</div></font></td></tr><tr><td colspan="2" style="font-size:12px;line-height:2em"><b><font color="#d52623"><div style="font-family:tahoma,sans-serif;display:inline">​Security<br></div></font></b></td></tr><tr><td colspan="2" style="font-size:11px"><br></td></tr><tr><td colspan="2"><b style="font-size:11px"><font face="arial narrow, sans-serif">TEL:</font></b><span style="font-size:11px"> </span><font style="font-size:11px" color="#999999"><a value="+551136343360" style="color:rgb(34,34,34)">+55 (11) 3634-3360</a></font><br></td></tr><tr><td colspan="2"><span style="font-size:11px"></span><br></td></tr><tr><td colspan="2"><span style="font-size:11px"><a href="http://www.ifood.com.br/" target="_blank"><font face="verdana, sans-serif">www.ifood.com.br</font></a></span><br><br></td></tr><tr></tr><tr><td rowspan="3" width="76"><img src="http://pro-bee-beepro-img.s3-website-eu-west-1.amazonaws.com/17011/images/logo_ifood_ass.png" alt="" width="76" height="77"></td><td> </td></tr><tr><td><table width="100%" cellspacing="0" cellpadding="0" border="0"><tbody><tr><td width="20"> </td><td><img src="http://pro-bee-beepro-img.s3-website-eu-west-1.amazonaws.com/17011/images/ifood_assinatura.png" alt="" width="150" height="16"></td></tr></tbody></table></td></tr><tr><td><table width="100%" cellspacing="0" cellpadding="0" border="0"><tbody><tr><td width="20"> </td><td width="25"><a href="https://itunes.apple.com/br/app/ifood-delivery-e-entrega-comida/id483017239?mt=8" target="_blank"><img src="http://pro-bee-beepro-img.s3-website-eu-west-1.amazonaws.com/17011/images/ifood_app_iphone.png" alt="" width="17" height="20"></a></td><td width="25"><a href="https://play.google.com/store/apps/details?id=br.com.brainweb.ifood" target="_blank"><img src="http://pro-bee-beepro-img.s3-website-eu-west-1.amazonaws.com/17011/images/ifood_app_android.png" alt="" width="17" height="20"></a></td><td width="25"><a href="https://www.facebook.com/iFood?fref=ts" target="_blank"><img src="http://pro-bee-beepro-img.s3-website-eu-west-1.amazonaws.com/17011/images/ifood_facebook.png" alt="" width="17" height="20"></a></td><td width="12"><a href="https://twitter.com/iFood" target="_blank"><img src="http://pro-bee-beepro-img.s3-website-eu-west-1.amazonaws.com/17011/images/ifood_twitter.png" alt="" width="17" height="20"></a></td><td width="70"> </td></tr></tbody></table></td></tr></tbody></table></div></div></div></div></div>
</div></div>
</blockquote></div><br><br clear="all"><br>-- <br><div class="m_5847170821325971355m_-4750759020263860602m_-3698540529800188438gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div style="color:rgb(34,34,34);font-size:12.8px"><br></div><div style="color:rgb(34,34,34);font-size:12.8px"><table style="font-size:13px;line-height:normal;font-family:tahoma,geneva,sans-serif" cellspacing="0" cellpadding="0" border="0"><tbody><tr><td colspan="2"><font style="font-size:small;line-height:normal;font-weight:bold" size="2" face="tahoma, sans-serif" color="#888888"><div style="font-family:tahoma,sans-serif;display:inline">​Alexandre Roberto Zia​</div></font></td></tr><tr><td colspan="2" style="font-size:12px;line-height:2em"><b><font color="#d52623"><div style="font-family:tahoma,sans-serif;display:inline">​Security<br></div></font></b></td></tr><tr><td colspan="2" style="font-size:11px"><br></td></tr><tr><td colspan="2"><b style="font-size:11px"><font face="arial narrow, sans-serif">TEL:</font></b><span style="font-size:11px"> </span><font style="font-size:11px" color="#999999"><a value="+551136343360" style="color:rgb(34,34,34)">+55 (11) 3634-3360</a></font><br></td></tr><tr><td colspan="2"><span style="font-size:11px"></span><br></td></tr><tr><td colspan="2"><span style="font-size:11px"><a href="http://www.ifood.com.br/" target="_blank"><font face="verdana, sans-serif">www.ifood.com.br</font></a></span><br><br></td></tr><tr></tr><tr><td rowspan="3" width="76"><img src="http://pro-bee-beepro-img.s3-website-eu-west-1.amazonaws.com/17011/images/logo_ifood_ass.png" alt="" width="76" height="77"></td><td> </td></tr><tr><td><table width="100%" cellspacing="0" cellpadding="0" border="0"><tbody><tr><td width="20"> </td><td><img src="http://pro-bee-beepro-img.s3-website-eu-west-1.amazonaws.com/17011/images/ifood_assinatura.png" alt="" width="150" height="16"></td></tr></tbody></table></td></tr><tr><td><table width="100%" cellspacing="0" cellpadding="0" border="0"><tbody><tr><td width="20"> </td><td width="25"><a href="https://itunes.apple.com/br/app/ifood-delivery-e-entrega-comida/id483017239?mt=8" target="_blank"><img src="http://pro-bee-beepro-img.s3-website-eu-west-1.amazonaws.com/17011/images/ifood_app_iphone.png" alt="" width="17" height="20"></a></td><td width="25"><a href="https://play.google.com/store/apps/details?id=br.com.brainweb.ifood" target="_blank"><img src="http://pro-bee-beepro-img.s3-website-eu-west-1.amazonaws.com/17011/images/ifood_app_android.png" alt="" width="17" height="20"></a></td><td width="25"><a href="https://www.facebook.com/iFood?fref=ts" target="_blank"><img src="http://pro-bee-beepro-img.s3-website-eu-west-1.amazonaws.com/17011/images/ifood_facebook.png" alt="" width="17" height="20"></a></td><td width="12"><a href="https://twitter.com/iFood" target="_blank"><img src="http://pro-bee-beepro-img.s3-website-eu-west-1.amazonaws.com/17011/images/ifood_twitter.png" alt="" width="17" height="20"></a></td><td width="70"> </td></tr></tbody></table></td></tr></tbody></table></div></div></div></div></div>
</div>
</div></div><br>______________________________<wbr>_________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">http://lists.evolveum.com/mail<wbr>man/listinfo/midpoint</a><br>
<br></blockquote></div><br><br clear="all"><br>-- <br><div class="m_5847170821325971355m_-4750759020263860602gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><span style="color:#4c4c4c">Best regards, <br><br><img src="cid:o.nekriach@dynatech.lv1520941785292-7770"> <br><br>Oleksandr Nekriach | Identity and access management engineer <br><br>Dynatech, <a href="https://maps.google.com/?q=Mednieku+str.+4a,+Riga,+LV-1010,+Latvia&entry=gmail&source=g" target="_blank">Mednieku str. 4a, Riga, LV-1010, Latvia</a> <br><br><div style="display:inline-block"><a href="tel:+371%2025%20314%20685" value="+37125314685" target="_blank">+37125314685</a></div>, <div style="display:inline-block"><a href="mailto:o.nekriach@dynatech.lv" target="_blank">o.nekriach@dynatech.lv</a></div> | <div style="display:inline-block"><a href="http://www.dynatech.lv" target="_blank">www.dynatech.lv</a></div> <br><br>Stay connected: <br><div style="display:inline-block;margin:5px 5px 0 0"><a href="https://www.facebook.com/DynatechLatvia/?ref=br_rs" target="_blank"><img src="cid:o.nekriach@dynatech.lv1520941785292-7771"></a></div><div style="display:inline-block;margin:5px 0 0 0"><a href="https://www.linkedin.com/company-beta/17893047/" target="_blank"><img src="cid:o.nekriach@dynatech.lv1520941785292-7772"></a></div><br><br><span style="font-size:11px;color:#a1a1a1">Confidentiality
 Notice: This message contains confidential information and is intended 
only for the named recipient(s). If you are not the addressee you may 
not copy, distribute or perform any other activities with this 
information. If you have received this transmission in error, please 
notify us by e-mail immediately. E-mail transmission cannot be 
guaranteed to be secure or error-free as information could be 
intercepted, corrupted, lost, destroyed, arrive late or incomplete, or 
contain viruses.</span></span></div></div>
</div>
</div></div></blockquote></div><br><br clear="all"><br>-- <br><div class="m_5847170821325971355gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div style="color:rgb(34,34,34);font-size:12.8px"><br></div><div style="color:rgb(34,34,34);font-size:12.8px"><table style="font-size:13px;line-height:normal;font-family:tahoma,geneva,sans-serif" cellspacing="0" cellpadding="0" border="0"><tbody><tr><td colspan="2"><font style="font-size:small;line-height:normal;font-weight:bold" size="2" face="tahoma, sans-serif" color="#888888"><div style="font-family:tahoma,sans-serif;display:inline">​Alexandre Roberto Zia​</div></font></td></tr><tr><td colspan="2" style="font-size:12px;line-height:2em"><b><font color="#d52623"><div style="font-family:tahoma,sans-serif;display:inline">​Security<br></div></font></b></td></tr><tr><td colspan="2" style="font-size:11px"><br></td></tr><tr><td colspan="2"><b style="font-size:11px"><font face="arial narrow, sans-serif">TEL:</font></b><span style="font-size:11px"> </span><font style="font-size:11px" color="#999999"><a value="+551136343360" style="color:rgb(34,34,34)">+55 (11) 3634-3360</a></font><br></td></tr><tr><td colspan="2"><span style="font-size:11px"></span><br></td></tr><tr><td colspan="2"><span style="font-size:11px"><a href="http://www.ifood.com.br/" target="_blank"><font face="verdana, sans-serif">www.ifood.com.br</font></a></span><br><br></td></tr><tr></tr><tr><td rowspan="3" width="76"><img src="http://pro-bee-beepro-img.s3-website-eu-west-1.amazonaws.com/17011/images/logo_ifood_ass.png" alt="" width="76" height="77"></td><td> </td></tr><tr><td><table width="100%" cellspacing="0" cellpadding="0" border="0"><tbody><tr><td width="20"> </td><td><img src="http://pro-bee-beepro-img.s3-website-eu-west-1.amazonaws.com/17011/images/ifood_assinatura.png" alt="" width="150" height="16"></td></tr></tbody></table></td></tr><tr><td><table width="100%" cellspacing="0" cellpadding="0" border="0"><tbody><tr><td width="20"> </td><td width="25"><a href="https://itunes.apple.com/br/app/ifood-delivery-e-entrega-comida/id483017239?mt=8" target="_blank"><img src="http://pro-bee-beepro-img.s3-website-eu-west-1.amazonaws.com/17011/images/ifood_app_iphone.png" alt="" width="17" height="20"></a></td><td width="25"><a href="https://play.google.com/store/apps/details?id=br.com.brainweb.ifood" target="_blank"><img src="http://pro-bee-beepro-img.s3-website-eu-west-1.amazonaws.com/17011/images/ifood_app_android.png" alt="" width="17" height="20"></a></td><td width="25"><a href="https://www.facebook.com/iFood?fref=ts" target="_blank"><img src="http://pro-bee-beepro-img.s3-website-eu-west-1.amazonaws.com/17011/images/ifood_facebook.png" alt="" width="17" height="20"></a></td><td width="12"><a href="https://twitter.com/iFood" target="_blank"><img src="http://pro-bee-beepro-img.s3-website-eu-west-1.amazonaws.com/17011/images/ifood_twitter.png" alt="" width="17" height="20"></a></td><td width="70"> </td></tr></tbody></table></td></tr></tbody></table></div></div></div></div></div>
</div>
</div></div></blockquote></div><br><br clear="all"><br>-- <br><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><span style="color:#4c4c4c">Best regards, <br><br><img src="cid:o.nekriach@dynatech.lv1520941785292-7770"> <br><br>Oleksandr Nekriach | Identity and access management engineer <br><br>Dynatech, <a href="https://maps.google.com/?q=Mednieku+str.+4a,+Riga,+LV-1010,+Latvia&entry=gmail&source=g" target="_blank">Mednieku str. 4a, Riga, LV-1010, Latvia</a> <br><br><div style="display:inline-block"><a href="tel:+371%2025%20314%20685" value="+37125314685" target="_blank">+37125314685</a></div>, <div style="display:inline-block"><a href="mailto:o.nekriach@dynatech.lv" target="_blank">o.nekriach@dynatech.lv</a></div> | <div style="display:inline-block"><a href="http://www.dynatech.lv" target="_blank">www.dynatech.lv</a></div> <br><br>Stay connected: <br><div style="display:inline-block;margin:5px 5px 0 0"><a href="https://www.facebook.com/DynatechLatvia/?ref=br_rs" target="_blank"><img src="cid:o.nekriach@dynatech.lv1520941785292-7771"></a></div><div style="display:inline-block;margin:5px 0 0 0"><a href="https://www.linkedin.com/company-beta/17893047/" target="_blank"><img src="cid:o.nekriach@dynatech.lv1520941785292-7772"></a></div><br><br><span style="font-size:11px;color:#a1a1a1">Confidentiality
 Notice: This message contains confidential information and is intended 
only for the named recipient(s). If you are not the addressee you may 
not copy, distribute or perform any other activities with this 
information. If you have received this transmission in error, please 
notify us by e-mail immediately. E-mail transmission cannot be 
guaranteed to be secure or error-free as information could be 
intercepted, corrupted, lost, destroyed, arrive late or incomplete, or 
contain viruses.</span></span></div></div>
</div>