<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p>Hi Alcides,</p>
<p>I think the removal of group(s) will work in this scenario if the
AD attribute/association in the resource schema handling is set to
be tolerant=false.</p>
<p>Be sure this is what you want as tolerant=false means midPoint
will remove all values not given by midPoint.</p>
<p>Best regards,</p>
<p>Ivan<br>
</p>
<div class="moz-cite-prefix">On 16. 4. 2019 0:26, Alcides Carlos de
Moraes Neto wrote:<br>
</div>
<blockquote type="cite"
cite="mid:CAMLLNmmEhsD7SieJoEZSDizKntwOxafjWxCimOgmpeqNhU66gQ@mail.gmail.com">
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div>Hello list,</div>
<div><br>
</div>
<div>We have working user and role association to AD users
and groups. However, if we give users an assignment with
activation expiration date in midpoint, they are not
removed from the AD group when the date comes. The
assignment shows as expired, but they are not removed from
the AD group that the role projects to, even when
recomputing.</div>
<div><br>
</div>
<div>Even removing the expired assignment will not remove
the user from the list.</div>
<div><br>
</div>
<div>Also, when trying to modify any of the activation
parameters from these assignments, we're getting a NPE:</div>
<div>java.lang.NullPointerException: null<br>
com.evolveum.midpoint.prism.util.ItemDeltaItem.findIdi(ItemDeltaItem.java:218)<br>
com.evolveum.midpoint.repo.common.expression.ExpressionUtil.resolvePath(ExpressionUtil.java:232)<br>
com.evolveum.midpoint.model.common.mapping.MappingImpl.parseSource(MappingImpl.java:874)<br>
<br>
</div>
</div>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<pre class="moz-quote-pre" wrap="">_______________________________________________
midPoint mailing list
<a class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>
<a class="moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<pre class="moz-signature" cols="72">--
Ivan Noris
Senior Identity Engineer
evolveum.com
</pre>
</body>
</html>