<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
  </head>
  <body text="#000000" bgcolor="#FFFFFF">
    <p>Hi,</p>
    <p>my first thought (but I'm still on holidays) is to make the
      mapping which populates the group membership (association)
      "strong" and see if that helps.</p>
    <p>Ivan<br>
    </p>
    <div class="moz-cite-prefix">On 3. 1. 2019 15:53, Jésica Collado
      wrote:<br>
    </div>
    <blockquote type="cite"
cite="mid:CA+=kOOsJO2jqz+mppW+n9+2LGx_U00MRDvuynv4BzhJdMAowPw@mail.gmail.com">
      <meta http-equiv="content-type" content="text/html; charset=UTF-8">
      <div dir="ltr">
        <p class="MsoNormal" style="margin:0in 0in
          0.0001pt;font-size:11pt;font-family:Calibri,sans-serif">Hello,</p>
        <p class="MsoNormal" style="margin:0in 0in
          0.0001pt;font-size:11pt;font-family:Calibri,sans-serif"> </p>
        <p class="MsoNormal" style="margin:0in 0in
          0.0001pt;font-size:11pt;font-family:Calibri,sans-serif">I was
          reading this section in midpoint wiki <a
href="https://wiki.evolveum.com/display/midPoint/Consistency+mechanism#Consistencymechanism-Postponingtheoperations"
            target="_blank" style="color:rgb(5,99,193)"
            moz-do-not-send="true">https://wiki.evolveum.com/display/midPoint/Consistency+mechanism#Consistencymechanism-Postponingtheoperations</a></p>
        <p class="MsoNormal" style="margin:0in 0in
          0.0001pt;font-size:11pt;font-family:Calibri,sans-serif"> </p>
        <p class="MsoNormal" style="margin:0in 0in
          0.0001pt;font-size:11pt;font-family:Calibri,sans-serif">In
          order to see how this feature work I did the following:</p>
        <p class="MsoNormal" style="margin:0in 0in
          0.0001pt;font-size:11pt;font-family:Calibri,sans-serif">-Configure
          an AD resource and test that work properly assigning groups
          and stuff</p>
        <p class="MsoNormal" style="margin:0in 0in
          0.0001pt;font-size:11pt;font-family:Calibri,sans-serif">-Assign
          some roles to a user that create an AD account and provide
          some groups</p>
        <p class="MsoNormal" style="margin:0in 0in
          0.0001pt;font-size:11pt;font-family:Calibri,sans-serif">-Turn
          down the resource. In Test connection I get: Connection
          failed:
org.identityconnectors.framework.common.exceptions.ConnectionFailedException(Unable
          to connect to LDAP server <a
            href="http://192.168.151.133:636/" target="_blank"
            moz-do-not-send="true">192.168.151.133:636</a> due to
          unknown reasons)</p>
        <p class="MsoNormal" style="margin:0in 0in
          0.0001pt;font-size:11pt;font-family:Calibri,sans-serif">-Request
          a new role that provide a new group in AD</p>
        <p class="MsoNormal" style="margin:0in 0in
          0.0001pt;font-size:11pt;font-family:Calibri,sans-serif">-Turn
          up the resource</p>
        <p class="MsoNormal" style="margin:0in 0in
          0.0001pt;font-size:11pt;font-family:Calibri,sans-serif">-Run a
          reconciliation task for the resource</p>
        <p class="MsoNormal" style="margin:0in 0in
          0.0001pt;font-size:11pt;font-family:Calibri,sans-serif"> </p>
        <p class="MsoNormal" style="margin:0in 0in
          0.0001pt;font-size:11pt;font-family:Calibri,sans-serif">The
          role has been assigned but the new group has never provided.</p>
        <p class="MsoNormal" style="margin:0in 0in
          0.0001pt;font-size:11pt;font-family:Calibri,sans-serif"> </p>
        <p class="MsoNormal" style="margin:0in 0in
          0.0001pt;font-size:11pt;font-family:Calibri,sans-serif">In
          reconciliation log I got: Processing unfinished operations
          done. Out of 0 objects, 0 were processed successfully and
          processing of 0 resulted in failure. Total time spent: 0 ms.</p>
        <p class="MsoNormal" style="margin:0in 0in
          0.0001pt;font-size:11pt;font-family:Calibri,sans-serif"> </p>
        <p class="MsoNormal" style="margin:0in 0in
          0.0001pt;font-size:11pt;font-family:Calibri,sans-serif">In
          shadow object I got a partial_error</p>
        <p class="MsoNormal" style="margin:0in 0in
          0.0001pt;font-size:11pt;font-family:Calibri,sans-serif">  
          <operationExecution id="327"></p>
        <p class="MsoNormal" style="margin:0in 0in
          0.0001pt;font-size:11pt;font-family:Calibri,sans-serif">     
          <timestamp>2018-12-27T14:48:54.929Z</timestamp></p>
        <p class="MsoNormal" style="margin:0in 0in
          0.0001pt;font-size:11pt;font-family:Calibri,sans-serif">     
          <operation></p>
        <p class="MsoNormal" style="margin:0in 0in
          0.0001pt;font-size:11pt;font-family:Calibri,sans-serif">        
          <objectDelta></p>
        <p class="MsoNormal" style="margin:0in 0in
          0.0001pt;font-size:11pt;font-family:Calibri,sans-serif">           
          <t:changeType>modify</t:changeType></p>
        <p class="MsoNormal" style="margin:0in 0in
          0.0001pt;font-size:11pt;font-family:Calibri,sans-serif">           
          <t:objectType>c:ShadowType</t:objectType></p>
        <p class="MsoNormal" style="margin:0in 0in
          0.0001pt;font-size:11pt;font-family:Calibri,sans-serif">        
          </objectDelta></p>
        <p class="MsoNormal" style="margin:0in 0in
          0.0001pt;font-size:11pt;font-family:Calibri,sans-serif">        
          <executionResult></p>
        <p class="MsoNormal" style="margin:0in 0in
          0.0001pt;font-size:11pt;font-family:Calibri,sans-serif">           
<operation>com.evolveum.midpoint.model.impl.lens.ChangeExecutor.executeDelta</operation></p>
        <p class="MsoNormal" style="margin:0in 0in
          0.0001pt;font-size:11pt;font-family:Calibri,sans-serif">           
          <status>partial_error</status></p>
        <p class="MsoNormal" style="margin:0in 0in
          0.0001pt;font-size:11pt;font-family:Calibri,sans-serif">           
          <token>1000000000000012695</token></p>
        <p class="MsoNormal" style="margin:0in 0in
          0.0001pt;font-size:11pt;font-family:Calibri,sans-serif">   
               </executionResult></p>
        <p class="MsoNormal" style="margin:0in 0in
          0.0001pt;font-size:11pt;font-family:Calibri,sans-serif">        
          <objectName>CN=Jorn
          Lande,OU=Mapple,DC=demoidm,DC=com</objectName></p>
        <p class="MsoNormal" style="margin:0in 0in
          0.0001pt;font-size:11pt;font-family:Calibri,sans-serif">        
<resourceOid>02c7a73e-d7dd-43dd-9ae1-80d40cadd05d</resourceOid></p>
        <p class="MsoNormal" style="margin:0in 0in
          0.0001pt;font-size:11pt;font-family:Calibri,sans-serif">        
          <resourceName>Mapple AD</resourceName></p>
        <p class="MsoNormal" style="margin:0in 0in
          0.0001pt;font-size:11pt;font-family:Calibri,sans-serif">     
          </operation></p>
        <p class="MsoNormal" style="margin:0in 0in
          0.0001pt;font-size:11pt;font-family:Calibri,sans-serif">     
          <status>partial_error</status></p>
        <p class="MsoNormal" style="margin:0in 0in
          0.0001pt;font-size:11pt;font-family:Calibri,sans-serif">     
          <initiatorRef oid="23b530a2-85c7-495a-8657-dfeb4019f731"</p>
        <p class="MsoNormal" style="margin:0in 0in
          0.0001pt;font-size:11pt;font-family:Calibri,sans-serif">                   
          relation="org:default"</p>
        <p class="MsoNormal" style="margin:0in 0in
          0.0001pt;font-size:11pt;font-family:Calibri,sans-serif">                   
          type="c:UserType"/></p>
        <p class="MsoNormal" style="margin:0in 0in
          0.0001pt;font-size:11pt;font-family:Calibri,sans-serif">     
          <taskRef oid="a4abae28-fb89-4421-8e52-7960f39ed260"</p>
        <p class="MsoNormal" style="margin:0in 0in
          0.0001pt;font-size:11pt;font-family:Calibri,sans-serif">              
          relation="org:default"</p>
        <p class="MsoNormal" style="margin:0in 0in
          0.0001pt;font-size:11pt;font-family:Calibri,sans-serif">              
          type="c:TaskType"/></p>
        <p class="MsoNormal" style="margin:0in 0in
          0.0001pt;font-size:11pt;font-family:Calibri,sans-serif">     
          <channel><a
            href="http://midpoint.evolveum.com/xml/ns/public/gui/channels-3#user"
            target="_blank" moz-do-not-send="true">http://midpoint.evolveum.com/xml/ns/public/gui/channels-3#user</a></channel></p>
        <p class="MsoNormal" style="margin:0in 0in
          0.0001pt;font-size:11pt;font-family:Calibri,sans-serif">  
          </operationExecution></p>
        <p class="MsoNormal" style="margin:0in 0in
          0.0001pt;font-size:11pt;font-family:Calibri,sans-serif"> </p>
        <p class="MsoNormal" style="margin:0in 0in
          0.0001pt;font-size:11pt;font-family:Calibri,sans-serif">Am I
          doing something wrong?</p>
        <p class="MsoNormal" style="margin:0in 0in
          0.0001pt;font-size:11pt;font-family:Calibri,sans-serif"><br>
        </p>
        <p class="MsoNormal" style="margin:0in 0in
          0.0001pt;font-size:11pt;font-family:Calibri,sans-serif">Thank
          you</p>
        <p class="MsoNormal" style="margin:0in 0in
          0.0001pt;font-size:11pt;font-family:Calibri,sans-serif">Jésica
          Collado</p>
      </div>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <pre class="moz-quote-pre" wrap="">_______________________________________________
midPoint mailing list
<a class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>
<a class="moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
    </blockquote>
    <pre class="moz-signature" cols="72">-- 
Ivan Noris
Senior Identity Engineer
evolveum.com
</pre>
  </body>
</html>