<div dir="ltr">It is all self contained within a VM (including the openldap server) and it is completely for development purposes with no real data.<div><br></div><div><resource xmlns="<a href="http://midpoint.evolveum.com/xml/ns/public/common/common-3">http://midpoint.evolveum.com/xml/ns/public/common/common-3</a>" xmlns:c="<a href="http://midpoint.evolveum.com/xml/ns/public/common/common-3">http://midpoint.evolveum.com/xml/ns/public/common/common-3</a>" xmlns:icfs="<a href="http://midpoint.evolveum.com/xml/ns/public/connector/icf-1/resource-schema-3">http://midpoint.evolveum.com/xml/ns/public/connector/icf-1/resource-schema-3</a>" xmlns:org="<a href="http://midpoint.evolveum.com/xml/ns/public/common/org-3">http://midpoint.evolveum.com/xml/ns/public/common/org-3</a>" xmlns:q="<a href="http://prism.evolveum.com/xml/ns/public/query-3">http://prism.evolveum.com/xml/ns/public/query-3</a>" xmlns:ri="<a href="http://midpoint.evolveum.com/xml/ns/public/resource/instance-3">http://midpoint.evolveum.com/xml/ns/public/resource/instance-3</a>" xmlns:t="<a href="http://prism.evolveum.com/xml/ns/public/types-3">http://prism.evolveum.com/xml/ns/public/types-3</a>" oid="ebd0bf7b-7e80-4175-ba5e-4fd5de2ecd62" version="211"><br>    <name>LDAP Server (OpenLDAP) over new LDAPConn.</name><br>    <description>LDAP resource using new LDAP Connector based on Apache Directory API. It contains configuration&#13;<br>        for connecting to an OpenLDAP instance running on the localhost.</description><br>    <metadata><br>        <createTimestamp>2019-06-13T11:04:21.220-04:00</createTimestamp><br>        <creatorRef oid="00000000-0000-0000-0000-000000000002" relation="org:default" type="c:UserType"/><br>        <createChannel><a href="http://midpoint.evolveum.com/xml/ns/public/model/channels-3#objectImport">http://midpoint.evolveum.com/xml/ns/public/model/channels-3#objectImport</a></createChannel><br>        <modifyTimestamp>2019-07-09T14:36:32.360-04:00</modifyTimestamp><br>        <modifierRef oid="00000000-0000-0000-0000-000000000002" relation="org:default" type="c:UserType"/><br>        <modifyChannel><a href="http://midpoint.evolveum.com/xml/ns/public/gui/channels-3#user">http://midpoint.evolveum.com/xml/ns/public/gui/channels-3#user</a></modifyChannel><br>    </metadata><br>    <operationExecution id="61"><br>        <timestamp>2019-07-09T10:16:31.392-04:00</timestamp><br>        <operation><br>            <objectDelta><br>                <t:changeType>modify</t:changeType><br>                <t:objectType>c:ResourceType</t:objectType><br>            </objectDelta><br>            <executionResult><br>                <operation>com.evolveum.midpoint.model.impl.lens.ChangeExecutor.executeDelta</operation><br>                <status>success</status><br>                <token>1000000000000013517</token><br>            </executionResult><br>            <objectName>LDAP Server (OpenLDAP) over new LDAPConn.</objectName><br>        </operation><br>        <status>success</status><br>        <initiatorRef oid="00000000-0000-0000-0000-000000000002" relation="org:default" type="c:UserType"/><br>        <channel><a href="http://midpoint.evolveum.com/xml/ns/public/gui/channels-3#user">http://midpoint.evolveum.com/xml/ns/public/gui/channels-3#user</a></channel><br>    </operationExecution><br>    <operationExecution id="62"><br>        <timestamp>2019-07-09T10:19:38.385-04:00</timestamp><br>        <operation><br>            <objectDelta><br>                <t:changeType>modify</t:changeType><br>                <t:objectType>c:ResourceType</t:objectType><br>            </objectDelta><br>            <executionResult><br>                <operation>com.evolveum.midpoint.model.impl.lens.ChangeExecutor.executeDelta</operation><br>                <status>success</status><br>                <token>1000000000000014483</token><br>            </executionResult><br>            <objectName>LDAP Server (OpenLDAP) over new LDAPConn.</objectName><br>        </operation><br>        <status>success</status><br>        <initiatorRef oid="00000000-0000-0000-0000-000000000002" relation="org:default" type="c:UserType"/><br>        <channel><a href="http://midpoint.evolveum.com/xml/ns/public/gui/channels-3#user">http://midpoint.evolveum.com/xml/ns/public/gui/channels-3#user</a></channel><br>    </operationExecution><br>    <operationExecution id="63"><br>        <timestamp>2019-07-09T10:44:16.315-04:00</timestamp><br>        <operation><br>            <objectDelta><br>                <t:changeType>modify</t:changeType><br>                <t:objectType>c:ResourceType</t:objectType><br>            </objectDelta><br>            <executionResult><br>                <operation>com.evolveum.midpoint.model.impl.lens.ChangeExecutor.executeDelta</operation><br>                <status>success</status><br>                <token>1000000000000017283</token><br>            </executionResult><br>            <objectName>LDAP Server (OpenLDAP) over new LDAPConn.</objectName><br>        </operation><br>        <status>success</status><br>        <initiatorRef oid="00000000-0000-0000-0000-000000000002" relation="org:default" type="c:UserType"/><br>        <channel><a href="http://midpoint.evolveum.com/xml/ns/public/gui/channels-3#user">http://midpoint.evolveum.com/xml/ns/public/gui/channels-3#user</a></channel><br>    </operationExecution><br>    <operationExecution id="64"><br>        <timestamp>2019-07-09T14:33:38.675-04:00</timestamp><br>        <operation><br>            <objectDelta><br>                <t:changeType>modify</t:changeType><br>                <t:objectType>c:ResourceType</t:objectType><br>            </objectDelta><br>            <executionResult><br>                <operation>com.evolveum.midpoint.model.impl.lens.ChangeExecutor.executeDelta</operation><br>                <status>success</status><br>                <token>1000000000000025502</token><br>            </executionResult><br>            <objectName>LDAP Server (OpenLDAP) over new LDAPConn.</objectName><br>        </operation><br>        <status>success</status><br>        <initiatorRef oid="00000000-0000-0000-0000-000000000002" relation="org:default" type="c:UserType"/><br>        <channel><a href="http://midpoint.evolveum.com/xml/ns/public/gui/channels-3#user">http://midpoint.evolveum.com/xml/ns/public/gui/channels-3#user</a></channel><br>    </operationExecution><br>    <operationExecution id="65"><br>        <timestamp>2019-07-09T14:36:32.463-04:00</timestamp><br>        <operation><br>            <objectDelta><br>                <t:changeType>modify</t:changeType><br>                <t:objectType>c:ResourceType</t:objectType><br>            </objectDelta><br>            <executionResult><br>                <operation>com.evolveum.midpoint.model.impl.lens.ChangeExecutor.executeDelta</operation><br>                <status>success</status><br>                <token>1000000000000025802</token><br>            </executionResult><br>            <objectName>LDAP Server (OpenLDAP) over new LDAPConn.</objectName><br>        </operation><br>        <status>success</status><br>        <initiatorRef oid="00000000-0000-0000-0000-000000000002" relation="org:default" type="c:UserType"/><br>        <channel><a href="http://midpoint.evolveum.com/xml/ns/public/gui/channels-3#user">http://midpoint.evolveum.com/xml/ns/public/gui/channels-3#user</a></channel><br>    </operationExecution><br>    <operationalState><br>        <lastAvailabilityStatus>up</lastAvailabilityStatus><br>    </operationalState><br>    <connectorRef oid="98adc7e0-4f3c-4162-92e3-65f0b7b68be5" relation="org:default" type="c:ConnectorType"/><br>    <connectorConfiguration xmlns:icfc="<a href="http://midpoint.evolveum.com/xml/ns/public/connector/icf-1/connector-schema-3">http://midpoint.evolveum.com/xml/ns/public/connector/icf-1/connector-schema-3</a>"><br>        <icfc:resultsHandlerConfiguration><br>            <icfc:enableNormalizingResultsHandler>false</icfc:enableNormalizingResultsHandler><br>            <icfc:enableFilteredResultsHandler>false</icfc:enableFilteredResultsHandler><br>            <icfc:filteredResultsHandlerInValidationMode>false</icfc:filteredResultsHandlerInValidationMode><br>            <icfc:enableAttributesToGetSearchResultsHandler>false</icfc:enableAttributesToGetSearchResultsHandler><br>        </icfc:resultsHandlerConfiguration><br>        <icfc:configurationProperties xmlns:gen772="<a href="http://midpoint.evolveum.com/xml/ns/public/connector/icf-1/bundle/com.evolveum.polygon.connector-ldap/com.evolveum.polygon.connector.ldap.LdapConnector">http://midpoint.evolveum.com/xml/ns/public/connector/icf-1/bundle/com.evolveum.polygon.connector-ldap/com.evolveum.polygon.connector.ldap.LdapConnector</a>"><br>            <gen772:host>localhost</gen772:host><br>            <gen772:port>389</gen772:port><br>            <gen772:bindDn>cn=ldapadm,dc=dutest,dc=edu</gen772:bindDn><br>            <gen772:bindPassword><br>                <t:encryptedData><br>                    <t:encryptionMethod><br>                        <t:algorithm><a href="http://www.w3.org/2001/04/xmlenc#aes128-cbc">http://www.w3.org/2001/04/xmlenc#aes128-cbc</a></t:algorithm><br>                    </t:encryptionMethod><br>                    <t:keyInfo><br>                        <t:keyName>2iM5OxZ1GxxcCoz0Mlg9k7pcZbo=</t:keyName><br>                    </t:keyInfo><br>                    <t:cipherData><br>                        <t:cipherValue>P0iv29QX/Pnfd7r6flte5xvErerPnLfX5zC5c4ZsIQg=</t:cipherValue><br>                    </t:cipherData><br>                </t:encryptedData><br>            </gen772:bindPassword><br>            <gen772:baseContext>dc=dutest,dc=edu</gen772:baseContext><br>            <gen772:passwordHashAlgorithm>SSHA</gen772:passwordHashAlgorithm><br>            <gen772:pagingStrategy>spr</gen772:pagingStrategy><br>            <gen772:vlvSortAttribute>uid,cn,ou,dc</gen772:vlvSortAttribute><br>            <gen772:vlvSortOrderingRule>2.5.13.3</gen772:vlvSortOrderingRule><br>            <gen772:operationalAttributes>memberOf</gen772:operationalAttributes><br>            <gen772:operationalAttributes>createTimestamp</gen772:operationalAttributes><br>        </icfc:configurationProperties><br>    </connectorConfiguration><br>    <schema><br>        <cachingMetadata><br>            <retrievalTimestamp>2019-07-09T09:55:41.500-04:00</retrievalTimestamp><br>            <serialNumber>b211f89a77a8abdb-516cd9350e1d3c6f</serialNumber><br>        </cachingMetadata><br>        <generationConstraints><br>            <generateObjectClass>ri:inetOrgPerson</generateObjectClass><br>            <generateObjectClass>ri:groupOfNames</generateObjectClass><br>            <generateObjectClass>ri:organizationalUnit</generateObjectClass><br>        </generationConstraints><br>        <definition><br>            <xsd:schema xmlns:a="<a href="http://prism.evolveum.com/xml/ns/public/annotation-3">http://prism.evolveum.com/xml/ns/public/annotation-3</a>" xmlns:ra="<a href="http://midpoint.evolveum.com/xml/ns/public/resource/annotation-3">http://midpoint.evolveum.com/xml/ns/public/resource/annotation-3</a>" xmlns:tns="<a href="http://midpoint.evolveum.com/xml/ns/public/resource/instance-3">http://midpoint.evolveum.com/xml/ns/public/resource/instance-3</a>" xmlns:xsd="<a href="http://www.w3.org/2001/XMLSchema">http://www.w3.org/2001/XMLSchema</a>" elementFormDefault="qualified" targetNamespace="<a href="http://midpoint.evolveum.com/xml/ns/public/resource/instance-3">http://midpoint.evolveum.com/xml/ns/public/resource/instance-3</a>"><br>                <xsd:import namespace="<a href="http://prism.evolveum.com/xml/ns/public/annotation-3">http://prism.evolveum.com/xml/ns/public/annotation-3</a>"/><br>                <xsd:import namespace="<a href="http://midpoint.evolveum.com/xml/ns/public/resource/annotation-3">http://midpoint.evolveum.com/xml/ns/public/resource/annotation-3</a>"/><br>                <xsd:complexType name="organizationalUnit"><br>                    <xsd:annotation><br>                        <xsd:appinfo><br>                            <ra:resourceObject/><br>                            <ra:identifier>ri:entryUUID</ra:identifier><br>                            <ra:secondaryIdentifier>ri:dn</ra:secondaryIdentifier><br>                            <ra:displayNameAttribute>ri:dn</ra:displayNameAttribute><br>                            <ra:namingAttribute>ri:dn</ra:namingAttribute><br>                            <ra:nativeObjectClass>organizationalUnit</ra:nativeObjectClass><br>                        </xsd:appinfo><br>                    </xsd:annotation><br>                    <xsd:sequence><br>                        <xsd:element minOccurs="0" name="memberOf" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>120</a:displayOrder><br>                                    <ra:nativeAttributeName>memberOf</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>memberOf</ra:frameworkAttributeName><br>                                    <ra:returnedByDefault>false</ra:returnedByDefault><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" minOccurs="0" name="facsimileTelephoneNumber" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>130</a:displayOrder><br>                                    <ra:nativeAttributeName>facsimileTelephoneNumber</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>facsimileTelephoneNumber</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" minOccurs="0" name="internationaliSDNNumber" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>140</a:displayOrder><br>                                    <ra:nativeAttributeName>internationaliSDNNumber</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>internationaliSDNNumber</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" minOccurs="0" name="postOfficeBox" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>150</a:displayOrder><br>                                    <a:matchingRule xmlns:qn420="<a href="http://prism.evolveum.com/xml/ns/public/matching-rule-3">http://prism.evolveum.com/xml/ns/public/matching-rule-3</a>">qn420:stringIgnoreCase</a:matchingRule><br>                                    <ra:nativeAttributeName>postOfficeBox</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>postOfficeBox</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" minOccurs="0" name="telephoneNumber" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>160</a:displayOrder><br>                                    <ra:nativeAttributeName>telephoneNumber</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>telephoneNumber</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" minOccurs="0" name="l" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>170</a:displayOrder><br>                                    <a:matchingRule xmlns:qn532="<a href="http://prism.evolveum.com/xml/ns/public/matching-rule-3">http://prism.evolveum.com/xml/ns/public/matching-rule-3</a>">qn532:stringIgnoreCase</a:matchingRule><br>                                    <ra:nativeAttributeName>l</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>l</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" minOccurs="0" name="searchGuide" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>180</a:displayOrder><br>                                    <ra:nativeAttributeName>searchGuide</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>searchGuide</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" minOccurs="0" name="description" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>190</a:displayOrder><br>                                    <a:matchingRule xmlns:qn784="<a href="http://prism.evolveum.com/xml/ns/public/matching-rule-3">http://prism.evolveum.com/xml/ns/public/matching-rule-3</a>">qn784:stringIgnoreCase</a:matchingRule><br>                                    <ra:nativeAttributeName>description</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>description</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" minOccurs="0" name="businessCategory" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>200</a:displayOrder><br>                                    <a:matchingRule xmlns:qn236="<a href="http://prism.evolveum.com/xml/ns/public/matching-rule-3">http://prism.evolveum.com/xml/ns/public/matching-rule-3</a>">qn236:stringIgnoreCase</a:matchingRule><br>                                    <ra:nativeAttributeName>businessCategory</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>businessCategory</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element name="dn" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>110</a:displayOrder><br>                                    <a:matchingRule xmlns:qn407="<a href="http://prism.evolveum.com/xml/ns/public/matching-rule-3">http://prism.evolveum.com/xml/ns/public/matching-rule-3</a>">qn407:distinguishedName</a:matchingRule><br>                                    <ra:nativeAttributeName>dn</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>__NAME__</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" minOccurs="0" name="telexNumber" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>210</a:displayOrder><br>                                    <ra:nativeAttributeName>telexNumber</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>telexNumber</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" minOccurs="0" name="postalCode" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>220</a:displayOrder><br>                                    <a:matchingRule xmlns:qn147="<a href="http://prism.evolveum.com/xml/ns/public/matching-rule-3">http://prism.evolveum.com/xml/ns/public/matching-rule-3</a>">qn147:stringIgnoreCase</a:matchingRule><br>                                    <ra:nativeAttributeName>postalCode</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>postalCode</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element minOccurs="0" name="createTimestamp" type="xsd:dateTime"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>230</a:displayOrder><br>                                    <a:access>read</a:access><br>                                    <ra:nativeAttributeName>createTimestamp</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>createTimestamp</ra:frameworkAttributeName><br>                                    <ra:returnedByDefault>false</ra:returnedByDefault><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" minOccurs="0" name="st" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>240</a:displayOrder><br>                                    <a:matchingRule xmlns:qn655="<a href="http://prism.evolveum.com/xml/ns/public/matching-rule-3">http://prism.evolveum.com/xml/ns/public/matching-rule-3</a>">qn655:stringIgnoreCase</a:matchingRule><br>                                    <ra:nativeAttributeName>st</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>st</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" minOccurs="0" name="teletexTerminalIdentifier" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>250</a:displayOrder><br>                                    <ra:nativeAttributeName>teletexTerminalIdentifier</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>teletexTerminalIdentifier</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" name="ou" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>260</a:displayOrder><br>                                    <a:matchingRule xmlns:qn897="<a href="http://prism.evolveum.com/xml/ns/public/matching-rule-3">http://prism.evolveum.com/xml/ns/public/matching-rule-3</a>">qn897:stringIgnoreCase</a:matchingRule><br>                                    <ra:nativeAttributeName>ou</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>ou</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" minOccurs="0" name="physicalDeliveryOfficeName" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>270</a:displayOrder><br>                                    <a:matchingRule xmlns:qn429="<a href="http://prism.evolveum.com/xml/ns/public/matching-rule-3">http://prism.evolveum.com/xml/ns/public/matching-rule-3</a>">qn429:stringIgnoreCase</a:matchingRule><br>                                    <ra:nativeAttributeName>physicalDeliveryOfficeName</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>physicalDeliveryOfficeName</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" minOccurs="0" name="street" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>280</a:displayOrder><br>                                    <a:matchingRule xmlns:qn256="<a href="http://prism.evolveum.com/xml/ns/public/matching-rule-3">http://prism.evolveum.com/xml/ns/public/matching-rule-3</a>">qn256:stringIgnoreCase</a:matchingRule><br>                                    <ra:nativeAttributeName>street</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>street</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" minOccurs="0" name="seeAlso" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>290</a:displayOrder><br>                                    <a:matchingRule xmlns:qn260="<a href="http://prism.evolveum.com/xml/ns/public/matching-rule-3">http://prism.evolveum.com/xml/ns/public/matching-rule-3</a>">qn260:distinguishedName</a:matchingRule><br>                                    <ra:nativeAttributeName>seeAlso</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>seeAlso</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" minOccurs="0" name="registeredAddress" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>300</a:displayOrder><br>                                    <ra:nativeAttributeName>registeredAddress</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>registeredAddress</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" minOccurs="0" name="destinationIndicator" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>310</a:displayOrder><br>                                    <a:matchingRule xmlns:qn393="<a href="http://prism.evolveum.com/xml/ns/public/matching-rule-3">http://prism.evolveum.com/xml/ns/public/matching-rule-3</a>">qn393:stringIgnoreCase</a:matchingRule><br>                                    <ra:nativeAttributeName>destinationIndicator</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>destinationIndicator</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" minOccurs="0" name="postalAddress" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>320</a:displayOrder><br>                                    <ra:nativeAttributeName>postalAddress</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>postalAddress</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" minOccurs="0" name="x121Address" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>330</a:displayOrder><br>                                    <ra:nativeAttributeName>x121Address</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>x121Address</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element minOccurs="0" name="preferredDeliveryMethod" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>340</a:displayOrder><br>                                    <ra:nativeAttributeName>preferredDeliveryMethod</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>preferredDeliveryMethod</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element minOccurs="0" name="entryUUID" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>100</a:displayOrder><br>                                    <a:access>read</a:access><br>                                    <a:matchingRule xmlns:qn998="<a href="http://prism.evolveum.com/xml/ns/public/matching-rule-3">http://prism.evolveum.com/xml/ns/public/matching-rule-3</a>">qn998:uuid</a:matchingRule><br>                                    <ra:nativeAttributeName>entryUUID</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>__UID__</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                    </xsd:sequence><br>                </xsd:complexType><br>                <xsd:complexType name="groupOfNames"><br>                    <xsd:annotation><br>                        <xsd:appinfo><br>                            <ra:resourceObject/><br>                            <ra:identifier>ri:entryUUID</ra:identifier><br>                            <ra:secondaryIdentifier>ri:dn</ra:secondaryIdentifier><br>                            <ra:displayNameAttribute>ri:dn</ra:displayNameAttribute><br>                            <ra:namingAttribute>ri:dn</ra:namingAttribute><br>                            <ra:nativeObjectClass>groupOfNames</ra:nativeObjectClass><br>                        </xsd:appinfo><br>                    </xsd:annotation><br>                    <xsd:sequence><br>                        <xsd:element minOccurs="0" name="createTimestamp" type="xsd:dateTime"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>120</a:displayOrder><br>                                    <a:access>read</a:access><br>                                    <ra:nativeAttributeName>createTimestamp</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>createTimestamp</ra:frameworkAttributeName><br>                                    <ra:returnedByDefault>false</ra:returnedByDefault><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element minOccurs="0" name="memberOf" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>130</a:displayOrder><br>                                    <ra:nativeAttributeName>memberOf</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>memberOf</ra:frameworkAttributeName><br>                                    <ra:returnedByDefault>false</ra:returnedByDefault><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" minOccurs="0" name="ou" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>140</a:displayOrder><br>                                    <a:matchingRule xmlns:qn837="<a href="http://prism.evolveum.com/xml/ns/public/matching-rule-3">http://prism.evolveum.com/xml/ns/public/matching-rule-3</a>">qn837:stringIgnoreCase</a:matchingRule><br>                                    <ra:nativeAttributeName>ou</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>ou</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" name="cn" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>150</a:displayOrder><br>                                    <a:matchingRule xmlns:qn177="<a href="http://prism.evolveum.com/xml/ns/public/matching-rule-3">http://prism.evolveum.com/xml/ns/public/matching-rule-3</a>">qn177:stringIgnoreCase</a:matchingRule><br>                                    <ra:nativeAttributeName>cn</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>cn</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" minOccurs="0" name="o" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>160</a:displayOrder><br>                                    <a:matchingRule xmlns:qn211="<a href="http://prism.evolveum.com/xml/ns/public/matching-rule-3">http://prism.evolveum.com/xml/ns/public/matching-rule-3</a>">qn211:stringIgnoreCase</a:matchingRule><br>                                    <ra:nativeAttributeName>o</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>o</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" name="member" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>170</a:displayOrder><br>                                    <a:matchingRule xmlns:qn555="<a href="http://prism.evolveum.com/xml/ns/public/matching-rule-3">http://prism.evolveum.com/xml/ns/public/matching-rule-3</a>">qn555:distinguishedName</a:matchingRule><br>                                    <ra:nativeAttributeName>member</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>member</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" minOccurs="0" name="owner" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>180</a:displayOrder><br>                                    <a:matchingRule xmlns:qn482="<a href="http://prism.evolveum.com/xml/ns/public/matching-rule-3">http://prism.evolveum.com/xml/ns/public/matching-rule-3</a>">qn482:distinguishedName</a:matchingRule><br>                                    <ra:nativeAttributeName>owner</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>owner</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" minOccurs="0" name="seeAlso" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>190</a:displayOrder><br>                                    <a:matchingRule xmlns:qn789="<a href="http://prism.evolveum.com/xml/ns/public/matching-rule-3">http://prism.evolveum.com/xml/ns/public/matching-rule-3</a>">qn789:distinguishedName</a:matchingRule><br>                                    <ra:nativeAttributeName>seeAlso</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>seeAlso</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" minOccurs="0" name="description" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>200</a:displayOrder><br>                                    <a:matchingRule xmlns:qn215="<a href="http://prism.evolveum.com/xml/ns/public/matching-rule-3">http://prism.evolveum.com/xml/ns/public/matching-rule-3</a>">qn215:stringIgnoreCase</a:matchingRule><br>                                    <ra:nativeAttributeName>description</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>description</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" minOccurs="0" name="businessCategory" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>210</a:displayOrder><br>                                    <a:matchingRule xmlns:qn53="<a href="http://prism.evolveum.com/xml/ns/public/matching-rule-3">http://prism.evolveum.com/xml/ns/public/matching-rule-3</a>">qn53:stringIgnoreCase</a:matchingRule><br>                                    <ra:nativeAttributeName>businessCategory</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>businessCategory</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element name="dn" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>110</a:displayOrder><br>                                    <a:matchingRule xmlns:qn159="<a href="http://prism.evolveum.com/xml/ns/public/matching-rule-3">http://prism.evolveum.com/xml/ns/public/matching-rule-3</a>">qn159:distinguishedName</a:matchingRule><br>                                    <ra:nativeAttributeName>dn</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>__NAME__</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element minOccurs="0" name="entryUUID" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>100</a:displayOrder><br>                                    <a:access>read</a:access><br>                                    <a:matchingRule xmlns:qn438="<a href="http://prism.evolveum.com/xml/ns/public/matching-rule-3">http://prism.evolveum.com/xml/ns/public/matching-rule-3</a>">qn438:uuid</a:matchingRule><br>                                    <ra:nativeAttributeName>entryUUID</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>__UID__</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                    </xsd:sequence><br>                </xsd:complexType><br>                <xsd:complexType name="inetOrgPerson"><br>                    <xsd:annotation><br>                        <xsd:appinfo><br>                            <ra:resourceObject/><br>                            <ra:identifier>ri:entryUUID</ra:identifier><br>                            <ra:secondaryIdentifier>ri:dn</ra:secondaryIdentifier><br>                            <ra:displayNameAttribute>ri:dn</ra:displayNameAttribute><br>                            <ra:namingAttribute>ri:dn</ra:namingAttribute><br>                            <ra:nativeObjectClass>inetOrgPerson</ra:nativeObjectClass><br>                        </xsd:appinfo><br>                    </xsd:annotation><br>                    <xsd:sequence><br>                        <xsd:element maxOccurs="unbounded" minOccurs="0" name="initials" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>120</a:displayOrder><br>                                    <a:matchingRule xmlns:qn546="<a href="http://prism.evolveum.com/xml/ns/public/matching-rule-3">http://prism.evolveum.com/xml/ns/public/matching-rule-3</a>">qn546:stringIgnoreCase</a:matchingRule><br>                                    <ra:nativeAttributeName>initials</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>initials</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element minOccurs="0" name="memberOf" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>130</a:displayOrder><br>                                    <ra:nativeAttributeName>memberOf</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>memberOf</ra:frameworkAttributeName><br>                                    <ra:returnedByDefault>false</ra:returnedByDefault><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" minOccurs="0" name="homePhone" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>140</a:displayOrder><br>                                    <ra:nativeAttributeName>homePhone</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>homePhone</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" minOccurs="0" name="audio" type="xsd:base64Binary"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>150</a:displayOrder><br>                                    <ra:nativeAttributeName>audio</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>audio</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" minOccurs="0" name="mail" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>160</a:displayOrder><br>                                    <a:matchingRule xmlns:qn84="<a href="http://prism.evolveum.com/xml/ns/public/matching-rule-3">http://prism.evolveum.com/xml/ns/public/matching-rule-3</a>">qn84:stringIgnoreCase</a:matchingRule><br>                                    <ra:nativeAttributeName>mail</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>mail</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" minOccurs="0" name="carLicense" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>170</a:displayOrder><br>                                    <a:matchingRule xmlns:qn909="<a href="http://prism.evolveum.com/xml/ns/public/matching-rule-3">http://prism.evolveum.com/xml/ns/public/matching-rule-3</a>">qn909:stringIgnoreCase</a:matchingRule><br>                                    <ra:nativeAttributeName>carLicense</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>carLicense</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" minOccurs="0" name="departmentNumber" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>180</a:displayOrder><br>                                    <a:matchingRule xmlns:qn627="<a href="http://prism.evolveum.com/xml/ns/public/matching-rule-3">http://prism.evolveum.com/xml/ns/public/matching-rule-3</a>">qn627:stringIgnoreCase</a:matchingRule><br>                                    <ra:nativeAttributeName>departmentNumber</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>departmentNumber</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" minOccurs="0" name="manager" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>190</a:displayOrder><br>                                    <a:matchingRule xmlns:qn865="<a href="http://prism.evolveum.com/xml/ns/public/matching-rule-3">http://prism.evolveum.com/xml/ns/public/matching-rule-3</a>">qn865:distinguishedName</a:matchingRule><br>                                    <ra:nativeAttributeName>manager</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>manager</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" minOccurs="0" name="businessCategory" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>200</a:displayOrder><br>                                    <a:matchingRule xmlns:qn347="<a href="http://prism.evolveum.com/xml/ns/public/matching-rule-3">http://prism.evolveum.com/xml/ns/public/matching-rule-3</a>">qn347:stringIgnoreCase</a:matchingRule><br>                                    <ra:nativeAttributeName>businessCategory</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>businessCategory</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" minOccurs="0" name="homePostalAddress" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>210</a:displayOrder><br>                                    <ra:nativeAttributeName>homePostalAddress</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>homePostalAddress</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" minOccurs="0" name="secretary" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>220</a:displayOrder><br>                                    <a:matchingRule xmlns:qn777="<a href="http://prism.evolveum.com/xml/ns/public/matching-rule-3">http://prism.evolveum.com/xml/ns/public/matching-rule-3</a>">qn777:distinguishedName</a:matchingRule><br>                                    <ra:nativeAttributeName>secretary</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>secretary</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" minOccurs="0" name="photo" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>230</a:displayOrder><br>                                    <ra:nativeAttributeName>photo</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>photo</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" minOccurs="0" name="labeledURI" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>240</a:displayOrder><br>                                    <ra:nativeAttributeName>labeledURI</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>labeledURI</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element minOccurs="0" name="displayName" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>250</a:displayOrder><br>                                    <a:matchingRule xmlns:qn440="<a href="http://prism.evolveum.com/xml/ns/public/matching-rule-3">http://prism.evolveum.com/xml/ns/public/matching-rule-3</a>">qn440:stringIgnoreCase</a:matchingRule><br>                                    <ra:nativeAttributeName>displayName</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>displayName</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" minOccurs="0" name="pager" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>260</a:displayOrder><br>                                    <ra:nativeAttributeName>pager</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>pager</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" minOccurs="0" name="roomNumber" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>270</a:displayOrder><br>                                    <a:matchingRule xmlns:qn312="<a href="http://prism.evolveum.com/xml/ns/public/matching-rule-3">http://prism.evolveum.com/xml/ns/public/matching-rule-3</a>">qn312:stringIgnoreCase</a:matchingRule><br>                                    <ra:nativeAttributeName>roomNumber</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>roomNumber</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" minOccurs="0" name="physicalDeliveryOfficeName" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>280</a:displayOrder><br>                                    <a:matchingRule xmlns:qn897="<a href="http://prism.evolveum.com/xml/ns/public/matching-rule-3">http://prism.evolveum.com/xml/ns/public/matching-rule-3</a>">qn897:stringIgnoreCase</a:matchingRule><br>                                    <ra:nativeAttributeName>physicalDeliveryOfficeName</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>physicalDeliveryOfficeName</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" minOccurs="0" name="uid" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>290</a:displayOrder><br>                                    <a:matchingRule xmlns:qn254="<a href="http://prism.evolveum.com/xml/ns/public/matching-rule-3">http://prism.evolveum.com/xml/ns/public/matching-rule-3</a>">qn254:stringIgnoreCase</a:matchingRule><br>                                    <ra:nativeAttributeName>uid</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>uid</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" minOccurs="0" name="seeAlso" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>300</a:displayOrder><br>                                    <a:matchingRule xmlns:qn179="<a href="http://prism.evolveum.com/xml/ns/public/matching-rule-3">http://prism.evolveum.com/xml/ns/public/matching-rule-3</a>">qn179:distinguishedName</a:matchingRule><br>                                    <ra:nativeAttributeName>seeAlso</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>seeAlso</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" minOccurs="0" name="destinationIndicator" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>310</a:displayOrder><br>                                    <a:matchingRule xmlns:qn197="<a href="http://prism.evolveum.com/xml/ns/public/matching-rule-3">http://prism.evolveum.com/xml/ns/public/matching-rule-3</a>">qn197:stringIgnoreCase</a:matchingRule><br>                                    <ra:nativeAttributeName>destinationIndicator</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>destinationIndicator</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" minOccurs="0" name="postalAddress" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>320</a:displayOrder><br>                                    <ra:nativeAttributeName>postalAddress</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>postalAddress</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element minOccurs="0" name="preferredLanguage" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>330</a:displayOrder><br>                                    <a:matchingRule xmlns:qn275="<a href="http://prism.evolveum.com/xml/ns/public/matching-rule-3">http://prism.evolveum.com/xml/ns/public/matching-rule-3</a>">qn275:stringIgnoreCase</a:matchingRule><br>                                    <ra:nativeAttributeName>preferredLanguage</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>preferredLanguage</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element minOccurs="0" name="preferredDeliveryMethod" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>340</a:displayOrder><br>                                    <ra:nativeAttributeName>preferredDeliveryMethod</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>preferredDeliveryMethod</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" minOccurs="0" name="facsimileTelephoneNumber" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>350</a:displayOrder><br>                                    <ra:nativeAttributeName>facsimileTelephoneNumber</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>facsimileTelephoneNumber</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" minOccurs="0" name="employeeType" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>360</a:displayOrder><br>                                    <a:matchingRule xmlns:qn310="<a href="http://prism.evolveum.com/xml/ns/public/matching-rule-3">http://prism.evolveum.com/xml/ns/public/matching-rule-3</a>">qn310:stringIgnoreCase</a:matchingRule><br>                                    <ra:nativeAttributeName>employeeType</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>employeeType</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" minOccurs="0" name="internationaliSDNNumber" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>370</a:displayOrder><br>                                    <ra:nativeAttributeName>internationaliSDNNumber</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>internationaliSDNNumber</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" minOccurs="0" name="postOfficeBox" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>380</a:displayOrder><br>                                    <a:matchingRule xmlns:qn235="<a href="http://prism.evolveum.com/xml/ns/public/matching-rule-3">http://prism.evolveum.com/xml/ns/public/matching-rule-3</a>">qn235:stringIgnoreCase</a:matchingRule><br>                                    <ra:nativeAttributeName>postOfficeBox</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>postOfficeBox</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" minOccurs="0" name="telephoneNumber" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>390</a:displayOrder><br>                                    <ra:nativeAttributeName>telephoneNumber</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>telephoneNumber</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" minOccurs="0" name="l" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>400</a:displayOrder><br>                                    <a:matchingRule xmlns:qn989="<a href="http://prism.evolveum.com/xml/ns/public/matching-rule-3">http://prism.evolveum.com/xml/ns/public/matching-rule-3</a>">qn989:stringIgnoreCase</a:matchingRule><br>                                    <ra:nativeAttributeName>l</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>l</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element minOccurs="0" name="employeeNumber" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>410</a:displayOrder><br>                                    <a:matchingRule xmlns:qn412="<a href="http://prism.evolveum.com/xml/ns/public/matching-rule-3">http://prism.evolveum.com/xml/ns/public/matching-rule-3</a>">qn412:stringIgnoreCase</a:matchingRule><br>                                    <ra:nativeAttributeName>employeeNumber</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>employeeNumber</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" minOccurs="0" name="jpegPhoto" type="xsd:base64Binary"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>420</a:displayOrder><br>                                    <ra:nativeAttributeName>jpegPhoto</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>jpegPhoto</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" minOccurs="0" name="o" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>430</a:displayOrder><br>                                    <a:matchingRule xmlns:qn245="<a href="http://prism.evolveum.com/xml/ns/public/matching-rule-3">http://prism.evolveum.com/xml/ns/public/matching-rule-3</a>">qn245:stringIgnoreCase</a:matchingRule><br>                                    <ra:nativeAttributeName>o</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>o</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" minOccurs="0" name="userPKCS12" type="xsd:base64Binary"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>440</a:displayOrder><br>                                    <ra:nativeAttributeName>userPKCS12</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>userPKCS12</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" minOccurs="0" name="description" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>450</a:displayOrder><br>                                    <a:matchingRule xmlns:qn400="<a href="http://prism.evolveum.com/xml/ns/public/matching-rule-3">http://prism.evolveum.com/xml/ns/public/matching-rule-3</a>">qn400:stringIgnoreCase</a:matchingRule><br>                                    <ra:nativeAttributeName>description</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>description</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element name="dn" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>110</a:displayOrder><br>                                    <a:matchingRule xmlns:qn434="<a href="http://prism.evolveum.com/xml/ns/public/matching-rule-3">http://prism.evolveum.com/xml/ns/public/matching-rule-3</a>">qn434:distinguishedName</a:matchingRule><br>                                    <ra:nativeAttributeName>dn</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>__NAME__</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" name="sn" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>460</a:displayOrder><br>                                    <a:matchingRule xmlns:qn702="<a href="http://prism.evolveum.com/xml/ns/public/matching-rule-3">http://prism.evolveum.com/xml/ns/public/matching-rule-3</a>">qn702:stringIgnoreCase</a:matchingRule><br>                                    <ra:nativeAttributeName>sn</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>sn</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" minOccurs="0" name="givenName" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>470</a:displayOrder><br>                                    <a:matchingRule xmlns:qn338="<a href="http://prism.evolveum.com/xml/ns/public/matching-rule-3">http://prism.evolveum.com/xml/ns/public/matching-rule-3</a>">qn338:stringIgnoreCase</a:matchingRule><br>                                    <ra:nativeAttributeName>givenName</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>givenName</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" minOccurs="0" name="telexNumber" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>480</a:displayOrder><br>                                    <ra:nativeAttributeName>telexNumber</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>telexNumber</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" minOccurs="0" name="postalCode" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>490</a:displayOrder><br>                                    <a:matchingRule xmlns:qn677="<a href="http://prism.evolveum.com/xml/ns/public/matching-rule-3">http://prism.evolveum.com/xml/ns/public/matching-rule-3</a>">qn677:stringIgnoreCase</a:matchingRule><br>                                    <ra:nativeAttributeName>postalCode</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>postalCode</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element minOccurs="0" name="createTimestamp" type="xsd:dateTime"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>500</a:displayOrder><br>                                    <a:access>read</a:access><br>                                    <ra:nativeAttributeName>createTimestamp</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>createTimestamp</ra:frameworkAttributeName><br>                                    <ra:returnedByDefault>false</ra:returnedByDefault><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" minOccurs="0" name="userSMIMECertificate" type="xsd:base64Binary"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>510</a:displayOrder><br>                                    <ra:nativeAttributeName>userSMIMECertificate</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>userSMIMECertificate</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" minOccurs="0" name="userCertificate" type="xsd:base64Binary"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>520</a:displayOrder><br>                                    <ra:nativeAttributeName>userCertificate</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>userCertificate</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" minOccurs="0" name="st" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>530</a:displayOrder><br>                                    <a:matchingRule xmlns:qn65="<a href="http://prism.evolveum.com/xml/ns/public/matching-rule-3">http://prism.evolveum.com/xml/ns/public/matching-rule-3</a>">qn65:stringIgnoreCase</a:matchingRule><br>                                    <ra:nativeAttributeName>st</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>st</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" minOccurs="0" name="teletexTerminalIdentifier" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>540</a:displayOrder><br>                                    <ra:nativeAttributeName>teletexTerminalIdentifier</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>teletexTerminalIdentifier</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" minOccurs="0" name="ou" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>550</a:displayOrder><br>                                    <a:matchingRule xmlns:qn530="<a href="http://prism.evolveum.com/xml/ns/public/matching-rule-3">http://prism.evolveum.com/xml/ns/public/matching-rule-3</a>">qn530:stringIgnoreCase</a:matchingRule><br>                                    <ra:nativeAttributeName>ou</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>ou</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" minOccurs="0" name="street" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>560</a:displayOrder><br>                                    <a:matchingRule xmlns:qn154="<a href="http://prism.evolveum.com/xml/ns/public/matching-rule-3">http://prism.evolveum.com/xml/ns/public/matching-rule-3</a>">qn154:stringIgnoreCase</a:matchingRule><br>                                    <ra:nativeAttributeName>street</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>street</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" name="cn" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>570</a:displayOrder><br>                                    <a:matchingRule xmlns:qn274="<a href="http://prism.evolveum.com/xml/ns/public/matching-rule-3">http://prism.evolveum.com/xml/ns/public/matching-rule-3</a>">qn274:stringIgnoreCase</a:matchingRule><br>                                    <ra:nativeAttributeName>cn</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>cn</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" minOccurs="0" name="registeredAddress" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>580</a:displayOrder><br>                                    <ra:nativeAttributeName>registeredAddress</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>registeredAddress</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" minOccurs="0" name="x121Address" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>590</a:displayOrder><br>                                    <ra:nativeAttributeName>x121Address</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>x121Address</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" minOccurs="0" name="title" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>600</a:displayOrder><br>                                    <a:matchingRule xmlns:qn164="<a href="http://prism.evolveum.com/xml/ns/public/matching-rule-3">http://prism.evolveum.com/xml/ns/public/matching-rule-3</a>">qn164:stringIgnoreCase</a:matchingRule><br>                                    <ra:nativeAttributeName>title</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>title</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" minOccurs="0" name="x500UniqueIdentifier" type="xsd:base64Binary"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>610</a:displayOrder><br>                                    <ra:nativeAttributeName>x500UniqueIdentifier</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>x500UniqueIdentifier</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element maxOccurs="unbounded" minOccurs="0" name="mobile" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>620</a:displayOrder><br>                                    <ra:nativeAttributeName>mobile</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>mobile</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                        <xsd:element minOccurs="0" name="entryUUID" type="xsd:string"><br>                            <xsd:annotation><br>                                <xsd:appinfo><br>                                    <a:displayOrder>100</a:displayOrder><br>                                    <a:access>read</a:access><br>                                    <a:matchingRule xmlns:qn372="<a href="http://prism.evolveum.com/xml/ns/public/matching-rule-3">http://prism.evolveum.com/xml/ns/public/matching-rule-3</a>">qn372:uuid</a:matchingRule><br>                                    <ra:nativeAttributeName>entryUUID</ra:nativeAttributeName><br>                                    <ra:frameworkAttributeName>__UID__</ra:frameworkAttributeName><br>                                </xsd:appinfo><br>                            </xsd:annotation><br>                        </xsd:element><br>                    </xsd:sequence><br>                </xsd:complexType><br>            </xsd:schema><br>        </definition><br>    </schema><br>    <schemaHandling><br>        <objectType id="5"><br>            <kind>generic</kind><br>            <intent>ou</intent><br>            <displayName>Organizational Unit</displayName><br>            <default>false</default><br>            <objectClass>ri:organizationalUnit</objectClass><br>            <attribute id="9"><br>                <c:ref>ri:dn</c:ref><br>                <matchingRule xmlns:mr="<a href="http://prism.evolveum.com/xml/ns/public/matching-rule-3">http://prism.evolveum.com/xml/ns/public/matching-rule-3</a>">mr:stringIgnoreCase</matchingRule><br>                <tolerant>false</tolerant><br>                <exclusiveStrong>false</exclusiveStrong><br>                <outbound><br>                    <authoritative>false</authoritative><br>                    <exclusive>false</exclusive><br>                    <strength>normal</strength><br>                    <source><br>                        <c:path>$focus/name</c:path><br>                    </source><br>                    <expression><br>                        <script xmlns:xsi="<a href="http://www.w3.org/2001/XMLSchema-instance">http://www.w3.org/2001/XMLSchema-instance</a>" xsi:type="c:ScriptExpressionEvaluatorType"><br>                            <code><br><br>                                import javax.naming.ldap.Rdn<br>                                import javax.naming.ldap.LdapName<br>                                import com.evolveum.midpoint.xml.ns._public.common.common_3.*;<br><br>                                dn = new LdapName('ou=Orgs,dc=dutest,dc=edu')<br>                                parents = new ArrayList()<br>                                currentOrg = focus<br>                                while (currentOrg != null) {<br>                                parents.add(currentOrg)<br>                                // see com.evolveum.midpoint.model.impl.expr.MidpointFunctionsImpl<br>                                currentOrg = midpoint.getParentOrgByOrgType(currentOrg, 'functional')<br>                                }<br><br>                                <a href="http://log.info">log.info</a>("parents = {}", parents)<br><br>                                for (int i = parents.size() -1 ; i &gt;= 0; i--) {<br>                                dn.add(new Rdn('ou', parents.get(i).name.toString()))<br>                                }<br><br>                                <a href="http://log.info">log.info</a>("dn = {}", dn)<br><br>                                return dn.toString();<br><br>                            </code><br>                        </script><br>                    </expression><br>                </outbound><br>            </attribute><br>            <attribute id="10"><br>                <c:ref>ri:ou</c:ref><br>                <matchingRule xmlns:mr="<a href="http://prism.evolveum.com/xml/ns/public/matching-rule-3">http://prism.evolveum.com/xml/ns/public/matching-rule-3</a>">mr:stringIgnoreCase</matchingRule><br>            </attribute><br>        </objectType><br>        <objectType id="6"><br>            <kind>entitlement</kind><br>            <intent>group</intent><br>            <displayName>Group</displayName><br>            <default>true</default><br>            <objectClass>ri:groupOfNames</objectClass><br>        </objectType><br>        <objectType id="7"><br>            <kind>entitlement</kind><br>            <intent>ldapProject</intent><br>            <displayName>LDAP project groups</displayName><br>            <default>false</default><br>            <objectClass>ri:groupOfNames</objectClass><br>            <attribute id="11"><br>                <c:ref>ri:dn</c:ref><br>                <matchingRule xmlns:mr="<a href="http://prism.evolveum.com/xml/ns/public/matching-rule-3">http://prism.evolveum.com/xml/ns/public/matching-rule-3</a>">mr:stringIgnoreCase</matchingRule><br>                <outbound><br>                    <source><br>                        <c:path>$focus/name</c:path><br>                    </source><br>                    <expression><br>                        <script xmlns:xsi="<a href="http://www.w3.org/2001/XMLSchema-instance">http://www.w3.org/2001/XMLSchema-instance</a>" xsi:type="c:ScriptExpressionEvaluatorType"><br>                            <code><br>                                import javax.naming.ldap.Rdn<br>                                import javax.naming.ldap.LdapName<br><br>                                dn = new LdapName('ou=Projects,dc=example,dc=com')<br>                                dn.add(new Rdn('cn', name.toString()))<br>                                return dn.toString()<br>                            </code><br>                        </script><br>                    </expression><br>                </outbound><br>            </attribute><br>            <attribute id="12"><br>                <c:ref>ri:cn</c:ref><br>                <matchingRule xmlns:mr="<a href="http://prism.evolveum.com/xml/ns/public/matching-rule-3">http://prism.evolveum.com/xml/ns/public/matching-rule-3</a>">mr:stringIgnoreCase</matchingRule><br>                <outbound><br>                    <strength>weak</strength><br>                    <source><br>                        <c:path>$focus/name</c:path><br>                    </source><br>                </outbound><br>            </attribute><br>            <attribute id="13"><br>                <c:ref>ri:entryUUID</c:ref><br>                <matchingRule xmlns:mr="<a href="http://prism.evolveum.com/xml/ns/public/matching-rule-3">http://prism.evolveum.com/xml/ns/public/matching-rule-3</a>">mr:stringIgnoreCase</matchingRule><br>            </attribute><br>            <attribute id="14"><br>                <c:ref>ri:description</c:ref><br>                <tolerant>false</tolerant><br>                <exclusiveStrong>false</exclusiveStrong><br>                <outbound><br>                    <authoritative>false</authoritative><br>                    <exclusive>false</exclusive><br>                    <strength>normal</strength><br>                    <source><br>                        <c:path>description</c:path><br>                    </source><br>                </outbound><br>            </attribute><br>        </objectType><br>        <objectType id="8"><br>            <intent>default</intent><br>            <displayName>Default Account</displayName><br>            <default>true</default><br>            <objectClass>ri:inetOrgPerson</objectClass><br>            <attribute id="15"><br>                <c:ref>ri:dn</c:ref><br>                <displayName>Distinguished Name</displayName><br>                <limitations><br>                    <minOccurs>0</minOccurs><br>                </limitations><br>                <tolerant>false</tolerant><br>                <exclusiveStrong>false</exclusiveStrong><br>                <outbound><br>                    <authoritative>false</authoritative><br>                    <exclusive>false</exclusive><br>                    <strength>normal</strength><br>                    <source><br>                        <c:path>$user/name</c:path><br>                    </source><br>                    <expression><br>                        <script xmlns:xsi="<a href="http://www.w3.org/2001/XMLSchema-instance">http://www.w3.org/2001/XMLSchema-instance</a>" xsi:type="c:ScriptExpressionEvaluatorType"><br>                            <code>'uid=' + name + ',ou=People,dc=dutest,dc=edu'</code><br>                        </script><br>                    </expression><br>                </outbound><br>            </attribute><br>            <attribute id="16"><br>                <c:ref>ri:entryUUID</c:ref><br>                <displayName>Entry UUID</displayName><br>                <limitations><br>                    <access><br>                        <read>true</read><br>                    </access><br>                </limitations><br>            </attribute><br>            <attribute id="17"><br>                <c:ref>ri:cn</c:ref><br>                <displayName>Common Name</displayName><br>                <limitations><br>                    <minOccurs>0</minOccurs><br>                    <maxOccurs>1</maxOccurs><br>                    <access><br>                        <read>true</read><br>                        <add>true</add><br>                        <modify>true</modify><br>                    </access><br>                </limitations><br>                <outbound><br>                    <source><br>                        <c:path>$user/fullName</c:path><br>                    </source><br>                </outbound><br>                <inbound id="26"><br>                    <strength>weak</strength><br>                    <target><br>                        <c:path>$user/fullName</c:path><br>                    </target><br>                </inbound><br>            </attribute><br>            <attribute id="18"><br>                <c:ref>ri:sn</c:ref><br>                <displayName>Surname</displayName><br>                <limitations><br>                    <minOccurs>0</minOccurs><br>                    <maxOccurs>1</maxOccurs><br>                </limitations><br>                <outbound><br>                    <source><br>                        <c:path>familyName</c:path><br>                    </source><br>                </outbound><br>                <inbound id="27"><br>                    <strength>weak</strength><br>                    <target><br>                        <c:path>familyName</c:path><br>                    </target><br>                </inbound><br>            </attribute><br>            <attribute id="19"><br>                <c:ref>ri:givenName</c:ref><br>                <displayName>Given Name</displayName><br>                <limitations><br>                    <maxOccurs>1</maxOccurs><br>                </limitations><br>                <outbound><br>                    <source><br>                        <c:path>$c:user/c:givenName</c:path><br>                    </source><br>                </outbound><br>                <inbound id="28"><br>                    <strength>weak</strength><br>                    <target><br>                        <c:path>$c:user/c:givenName</c:path><br>                    </target><br>                </inbound><br>            </attribute><br>            <attribute id="20"><br>                <c:ref>ri:uid</c:ref><br>                <displayName>Login Name</displayName><br>                <limitations><br>                    <maxOccurs>1</maxOccurs><br>                    <access><br>                        <read>true</read><br>                        <add>true</add><br>                    </access><br>                </limitations><br>                <outbound><br>                    <strength>weak</strength><br>                    <source><br>                        <c:path>$user/name</c:path><br>                    </source><br>                </outbound><br>                <inbound id="29"><br>                    <strength>weak</strength><br>                    <target><br>                        <c:path>$c:user/c:name</c:path><br>                    </target><br>                </inbound><br>            </attribute><br>            <attribute id="21"><br>                <c:ref>ri:description</c:ref><br>                <limitations><br>                    <maxOccurs>1</maxOccurs><br>                </limitations><br>                <outbound><br>                    <strength>weak</strength><br>                    <expression><br>                        <description>Expression that assigns a fixed description value if there is no other description present.</description><br>                        <value>Managed by midPoint</value><br>                    </expression><br>                </outbound><br>            </attribute><br>            <attribute id="22"><br>                <c:ref>ri:l</c:ref><br>                <inbound id="30"><br>                    <target><br>                        <c:path>$user/locality</c:path><br>                    </target><br>                </inbound><br>            </attribute><br>            <attribute id="23"><br>                <c:ref>ri:telephoneNumber</c:ref><br>                <outbound><br>                    <source><br>                        <c:path>$user/telephoneNumber</c:path><br>                    </source><br>                </outbound><br>                <inbound id="31"><br>                    <target><br>                        <c:path>$user/telephoneNumber</c:path><br>                    </target><br>                </inbound><br>            </attribute><br>            <attribute id="24"><br>                <c:ref>ri:employeeNumber</c:ref><br>                <outbound><br>                    <strength>strong</strength><br>                    <source><br>                        <c:path>$user/employeeNumber</c:path><br>                    </source><br>                </outbound><br>                <inbound id="32"><br>                    <strength>weak</strength><br>                    <target><br>                        <c:path>$user/employeeNumber</c:path><br>                    </target><br>                </inbound><br>            </attribute><br>            <attribute id="25"><br>                <c:ref>ri:employeeType</c:ref><br>                <limitations><br>                    <maxOccurs>1</maxOccurs><br>                </limitations><br>                <tolerant>false</tolerant><br>                <exclusiveStrong>false</exclusiveStrong><br>                <outbound><br>                    <authoritative>false</authoritative><br>                    <exclusive>false</exclusive><br>                    <strength>strong</strength><br>                    <source><br>                        <c:path>$user/subtype</c:path><br>                    </source><br>                </outbound><br>                <inbound id="33"><br>                    <strength>weak</strength><br>                    <target><br>                        <c:path>$user/subtype</c:path><br>                    </target><br>                </inbound><br>            </attribute><br>            <association id="34"><br>                <c:ref>ri:ldapGroups</c:ref><br>                <displayName>Group Membership</displayName><br>                <matchingRule xmlns:mr="<a href="http://prism.evolveum.com/xml/ns/public/matching-rule-3">http://prism.evolveum.com/xml/ns/public/matching-rule-3</a>">mr:stringIgnoreCase</matchingRule><br>                <tolerant>true</tolerant><br>                <exclusiveStrong>false</exclusiveStrong><br>                <kind>entitlement</kind><br>                <intent>group</intent><br>                <intent>ldapProject</intent><br>                <direction>objectToSubject</direction><br>                <associationAttribute>ri:member</associationAttribute><br>                <valueAttribute>ri:dn</valueAttribute><br>                <explicitReferentialIntegrity>true</explicitReferentialIntegrity><br>            </association><br>            <protected><br>                <filter><br>                    <q:equal><br>                        <q:matching><a href="http://prism.evolveum.com/xml/ns/public/matching-rule-3#distinguishedName">http://prism.evolveum.com/xml/ns/public/matching-rule-3#distinguishedName</a></q:matching><br>                        <q:path>attributes/ri:dn</q:path><br>                        <q:value>cn=idm,ou=Administrators,dc=example,dc=com</q:value><br>                    </q:equal><br>                </filter><br>            </protected><br>            <activation><br>                <administrativeStatus><br>                    <outbound id="35"/><br>                    <inbound id="36"><br>                        <strength>weak</strength><br>                        <expression><br>                            <asIs xmlns:xsi="<a href="http://www.w3.org/2001/XMLSchema-instance">http://www.w3.org/2001/XMLSchema-instance</a>" xsi:type="c:AsIsExpressionEvaluatorType"/><br>                        </expression><br>                    </inbound><br>                </administrativeStatus><br>            </activation><br>            <credentials><br>                <password xmlns:xsi="<a href="http://www.w3.org/2001/XMLSchema-instance">http://www.w3.org/2001/XMLSchema-instance</a>" xsi:type="c:ResourcePasswordDefinitionType"><br>                    <outbound><br>                        <expression><br>                            <asIs xsi:type="c:AsIsExpressionEvaluatorType"/><br>                        </expression><br>                    </outbound><br>                    <inbound><br>                        <strength>weak</strength><br>                        <expression><br>                            <generate xsi:type="c:GenerateExpressionEvaluatorType"/><br>                        </expression><br>                    </inbound><br>                </password><br>            </credentials><br>        </objectType><br>    </schemaHandling><br>    <capabilities><br>        <cachingMetadata><br>            <retrievalTimestamp>2019-07-09T09:55:41.499-04:00</retrievalTimestamp><br>            <serialNumber>2c2412bc12c77af5-94fc8f82d674a2f2</serialNumber><br>        </cachingMetadata><br>        <native xmlns:cap="<a href="http://midpoint.evolveum.com/xml/ns/public/resource/capabilities-3">http://midpoint.evolveum.com/xml/ns/public/resource/capabilities-3</a>" xmlns:xsi="<a href="http://www.w3.org/2001/XMLSchema-instance">http://www.w3.org/2001/XMLSchema-instance</a>" xsi:type="c:CapabilityCollectionType"><br>            <cap:schema/><br>            <cap:liveSync/><br>            <cap:testConnection/><br>            <cap:create/><br>            <cap:update><br>                <cap:delta>true</cap:delta><br>            </cap:update><br>            <cap:delete/><br>            <cap:script><br>                <cap:host><br>                    <cap:type>connector</cap:type><br>                </cap:host><br>            </cap:script><br>            <cap:addRemoveAttributeValues/><br>            <cap:credentials><br>                <cap:password><br>                    <cap:returnedByDefault>false</cap:returnedByDefault><br>                </cap:password><br>            </cap:credentials><br>            <cap:auxiliaryObjectClasses/><br>            <cap:pagedSearch/><br>            <cap:read><br>                <cap:returnDefaultAttributesOption>true</cap:returnDefaultAttributesOption><br>            </cap:read><br>        </native><br>        <configured xmlns:cap="<a href="http://midpoint.evolveum.com/xml/ns/public/resource/capabilities-3">http://midpoint.evolveum.com/xml/ns/public/resource/capabilities-3</a>" xmlns:xsi="<a href="http://www.w3.org/2001/XMLSchema-instance">http://www.w3.org/2001/XMLSchema-instance</a>" xsi:type="c:CapabilityCollectionType"><br>            <cap:liveSync><br>                <cap:enabled>true</cap:enabled><br>            </cap:liveSync><br>            <cap:testConnection><br>                <cap:enabled>true</cap:enabled><br>            </cap:testConnection><br>            <cap:create><br>                <cap:enabled>true</cap:enabled><br>            </cap:create><br>            <cap:update><br>                <cap:enabled>true</cap:enabled><br>                <cap:delta>true</cap:delta><br>            </cap:update><br>            <cap:delete><br>                <cap:enabled>true</cap:enabled><br>            </cap:delete><br>            <cap:script><br>                <cap:enabled>true</cap:enabled><br>                <cap:host><br>                    <cap:type>connector</cap:type><br>                </cap:host><br>            </cap:script><br>            <cap:addRemoveAttributeValues><br>                <cap:enabled>true</cap:enabled><br>            </cap:addRemoveAttributeValues><br>            <cap:credentials><br>                <cap:enabled>true</cap:enabled><br>                <cap:password><br>                    <cap:enabled>true</cap:enabled><br>                    <cap:returnedByDefault>false</cap:returnedByDefault><br>                </cap:password><br>            </cap:credentials><br>            <cap:auxiliaryObjectClasses><br>                <cap:enabled>true</cap:enabled><br>            </cap:auxiliaryObjectClasses><br>            <cap:read><br>                <cap:enabled>true</cap:enabled><br>                <cap:returnDefaultAttributesOption>true</cap:returnDefaultAttributesOption><br>            </cap:read><br>            <cap:activation><br>                <cap:enabled>true</cap:enabled><br>                <cap:status><br>                    <cap:enabled>false</cap:enabled><br>                    <cap:returnedByDefault>false</cap:returnedByDefault><br>                    <cap:ignoreAttribute>true</cap:ignoreAttribute><br>                </cap:status><br>                <cap:validFrom><br>                    <cap:enabled>false</cap:enabled><br>                    <cap:returnedByDefault>false</cap:returnedByDefault><br>                </cap:validFrom><br>                <cap:validTo><br>                    <cap:enabled>false</cap:enabled><br>                    <cap:returnedByDefault>false</cap:returnedByDefault><br>                </cap:validTo><br>                <cap:lockoutStatus><br>                    <cap:enabled>false</cap:enabled><br>                    <cap:returnedByDefault>false</cap:returnedByDefault><br>                    <cap:ignoreAttribute>true</cap:ignoreAttribute><br>                </cap:lockoutStatus><br>            </cap:activation><br>        </configured><br>    </capabilities><br>    <synchronization><br>        <objectSynchronization><br>            <name>sync account</name><br>            <objectClass>ri:inetOrgPerson</objectClass><br>            <kind>account</kind><br>            <intent>default</intent><br>            <enabled>true</enabled><br>            <correlation><br>                <q:description>Correlation expression is a search query.&#13;<br>                    Following search queury will look for users that have "name"&#13;<br>                    equal to the "uid" attribute of the account. Simply speaking,&#13;<br>                    it will look for match in usernames in the IDM and the resource.&#13;<br>                    The correlation rule always looks for users, so it will not match&#13;<br>                    any other object type.</q:description><br>                <q:equal><br>                    <q:path>c:name</q:path><br>                    <expression><br>                        <path>declare namespace ri='<a href="http://midpoint.evolveum.com/xml/ns/public/resource/instance-3">http://midpoint.evolveum.com/xml/ns/public/resource/instance-3</a>'; $account/attributes/ri:uid</path><br>                    </expression><br>                </q:equal><br>            </correlation><br>            <reconcile>false</reconcile><br>            <opportunistic>true</opportunistic><br>            <reaction><br>                <situation>linked</situation><br>                <synchronize>true</synchronize><br>            </reaction><br>            <reaction><br>                <situation>deleted</situation><br>                <reconcile>false</reconcile><br>                <action><br>                    <handlerUri><a href="http://midpoint.evolveum.com/xml/ns/public/model/action-3#deleteFocus">http://midpoint.evolveum.com/xml/ns/public/model/action-3#deleteFocus</a></handlerUri><br>                </action><br>            </reaction><br>            <reaction><br>                <situation>unlinked</situation><br>                <action><br>                    <handlerUri><a href="http://midpoint.evolveum.com/xml/ns/public/model/action-3#link">http://midpoint.evolveum.com/xml/ns/public/model/action-3#link</a></handlerUri><br>                </action><br>            </reaction><br>            <reaction><br>                <situation>unmatched</situation><br>                <action><br>                    <handlerUri><a href="http://midpoint.evolveum.com/xml/ns/public/model/action-3#addUser">http://midpoint.evolveum.com/xml/ns/public/model/action-3#addUser</a></handlerUri><br>                </action><br>            </reaction><br>        </objectSynchronization><br>        <objectSynchronization><br>            <name>sync group</name><br>            <objectClass>ri:groupOfNames</objectClass><br>            <kind>entitlement</kind><br>            <intent>ldapProject</intent><br>            <focusType>c:OrgType</focusType><br>            <enabled>true</enabled><br>            <correlation><br>                <q:description><br>                    Correlation expression is a search query.<br>                    Following search queury will look for users that have "name"<br>                    equal to the "uid" attribute of the account. Simply speaking,<br>                    it will look for match in usernames in the IDM and the resource.<br>                    The correlation rule always looks for users, so it will not match<br>                    any other object type.<br>                </q:description><br>                <q:equal><br>                    <q:matching>polyStringNorm</q:matching><br>                    <q:path>c:name</q:path><br>                    <expression><br>                        <path>declare namespace ri='<a href="http://midpoint.evolveum.com/xml/ns/public/resource/instance-3">http://midpoint.evolveum.com/xml/ns/public/resource/instance-3</a>'; $shadow/attributes/ri:cn</path><br>                    </expression><br>                </q:equal><br>            </correlation><br>            <reconcile>false</reconcile><br>            <reaction><br>                <situation>linked</situation><br>                <synchronize>true</synchronize><br>            </reaction><br>            <reaction><br>                <situation>deleted</situation><br>                <action><br>                    <handlerUri><a href="http://midpoint.evolveum.com/xml/ns/public/model/action-3#unlink">http://midpoint.evolveum.com/xml/ns/public/model/action-3#unlink</a></handlerUri><br>                </action><br>            </reaction><br>            <reaction><br>                <situation>unlinked</situation><br>                <action><br>                    <handlerUri><a href="http://midpoint.evolveum.com/xml/ns/public/model/action-3#link">http://midpoint.evolveum.com/xml/ns/public/model/action-3#link</a></handlerUri><br>                </action><br>            </reaction><br>        </objectSynchronization><br>        <objectSynchronization><br>            <name>sync</name><br>            <objectClass>ri:organizationalUnit</objectClass><br>            <kind>generic</kind><br>            <intent>ou</intent><br>            <enabled>true</enabled><br>            <correlation><br>                <q:equal><br>                    <q:path>c:name</q:path><br>                    <expression><br>                        <path>$account/attributes/ri:ou</path><br>                    </expression><br>                </q:equal><br>            </correlation><br>            <reconcile>false</reconcile><br>            <reaction><br>                <situation>linked</situation><br>                <synchronize>true</synchronize><br>            </reaction><br>            <reaction><br>                <situation>deleted</situation><br>                <synchronize>true</synchronize><br>                <action><br>                    <handlerUri><a href="http://midpoint.evolveum.com/xml/ns/public/model/action-3#unlink">http://midpoint.evolveum.com/xml/ns/public/model/action-3#unlink</a></handlerUri><br>                </action><br>            </reaction><br>            <reaction><br>                <situation>unlinked</situation><br>                <synchronize>true</synchronize><br>                <action><br>                    <handlerUri><a href="http://midpoint.evolveum.com/xml/ns/public/model/action-3#link">http://midpoint.evolveum.com/xml/ns/public/model/action-3#link</a></handlerUri><br>                </action><br>            </reaction><br>            <reaction><br>                <situation>unmatched</situation><br>            </reaction><br>        </objectSynchronization><br>    </synchronization><br></resource><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, Jul 9, 2019 at 3:25 PM <<a href="mailto:midpoint-request@lists.evolveum.com">midpoint-request@lists.evolveum.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Send midPoint mailing list submissions to<br>
        <a href="mailto:midpoint@lists.evolveum.com" target="_blank">midpoint@lists.evolveum.com</a><br>
<br>
To subscribe or unsubscribe via the World Wide Web, visit<br>
        <a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
or, via email, send a message with subject or body 'help' to<br>
        <a href="mailto:midpoint-request@lists.evolveum.com" target="_blank">midpoint-request@lists.evolveum.com</a><br>
<br>
You can reach the person managing the list at<br>
        <a href="mailto:midpoint-owner@lists.evolveum.com" target="_blank">midpoint-owner@lists.evolveum.com</a><br>
<br>
When replying, please edit your Subject line so it is more specific<br>
than "Re: Contents of midPoint digest..."<br>
<br>
<br>
Today's Topics:<br>
<br>
   1. Re: Multi-value attribute in LDAP Connector (Pavol Mederly)<br>
<br>
<br>
----------------------------------------------------------------------<br>
<br>
Message: 1<br>
Date: Tue, 9 Jul 2019 21:25:48 +0200<br>
From: Pavol Mederly <<a href="mailto:mederly@evolveum.com" target="_blank">mederly@evolveum.com</a>><br>
To: <a href="mailto:midpoint@lists.evolveum.com" target="_blank">midpoint@lists.evolveum.com</a><br>
Subject: Re: [midPoint] Multi-value attribute in LDAP Connector<br>
Message-ID: <<a href="mailto:e9930e4b-19fa-51ae-749a-5ff06f6dfb91@evolveum.com" target="_blank">e9930e4b-19fa-51ae-749a-5ff06f6dfb91@evolveum.com</a>><br>
Content-Type: text/plain; charset="utf-8"; Format="flowed"<br>
<br>
Hello Keith,<br>
<br>
this must be something wrong with the schema. Could you please export <br>
your OpenLDAP resource XML object and sent it here? (without any <br>
sensitive information, of course)<br>
<br>
Best regards,<br>
<br>
Pavol Mederly<br>
Software developer<br>
<a href="http://evolveum.com" rel="noreferrer" target="_blank">evolveum.com</a><br>
<br>
On 09.07.2019 20:41, Keith LeValley wrote:<br>
> I have a basic demo environment setup, a CSV connector pushing users <br>
> into Midpoint and an LDAP connector live syncing users to an openldap <br>
> server.  It is working well except when I introduce multi-value <br>
> attributes.  In this case it is roles, subtype -> employeeType.  After <br>
> a user is in the system and I add a role from the CSV feed it simply <br>
> rotates which value to display in LDAP, if I delete the user and <br>
> re-import starting off with a multi-valued attribute I get the <br>
> following error:<br>
><br>
> Operation<br>
>     operation.com.evolveum.midpoint.model.impl.lens.projector.Projector.projectProjection<br>
> Message<br>
>     Attempt to replace 2 values to a single-valued item<br>
>     attributes/employeeType; values: [PPV(String:Staff),<br>
>     PPV(String:Alumni)]<br>
> Parameters<br>
>     projection        [resource:ebd0bf7b-7e80-4175-ba5e-4fd5de2ecd62(LDAP<br>
>     Server (OpenLDAP) over new LDAPConn.)(default)]<br>
><br>
> Error<br>
>     Attempt to replace 2 values to a single-valued item<br>
>     attributes/employeeType; values: [PPV(String:Staff),<br>
>     PPV(String:Alumni)]<br>
>     show<br>
>     com.evolveum.midpoint.util.exception.SchemaException: Attempt to<br>
>     replace 2 values to a single-valued item attributes/employeeType;<br>
>     values: [PPV(String:Staff), PPV(String:Alumni)] at<br>
>     com.evolveum.midpoint.prism.delta.ItemDelta.validate(ItemDelta.java:1004)<br>
>     at<br>
>     com.evolveum.midpoint.prism.delta.ItemDelta.validate(ItemDelta.java:991)<br>
>     at<br>
>     com.evolveum.midpoint.model.impl.lens.projector.ConsolidationProcessor.consolidateItem(ConsolidationProcessor.java:489)<br>
>     at<br>
>     com.evolveum.midpoint.model.impl.lens.projector.ConsolidationProcessor.consolidateAttribute(ConsolidationProcessor.java:324)<br>
>     at<br>
>     com.evolveum.midpoint.model.impl.lens.projector.ConsolidationProcessor.consolidateAttributes(ConsolidationProcessor.java:295)<br>
>     at<br>
>     com.evolveum.midpoint.model.impl.lens.projector.ConsolidationProcessor.consolidateValuesToModifyDelta(ConsolidationProcessor.java:201)<br>
>     at<br>
>     com.evolveum.midpoint.model.impl.lens.projector.ConsolidationProcessor.consolidateValuesModifyProjection(ConsolidationProcessor.java:599)<br>
>     at<br>
>     com.evolveum.midpoint.model.impl.lens.projector.ConsolidationProcessor.consolidateValues(ConsolidationProcessor.java:131)<br>
>     at<br>
>     com.evolveum.midpoint.model.impl.lens.projector.ProjectionValuesProcessor.processProjections(ProjectionValuesProcessor.java:232)<br>
>     at<br>
>     com.evolveum.midpoint.model.impl.lens.projector.ProjectionValuesProcessor.process(ProjectionValuesProcessor.java:138)<br>
>     at<br>
>     com.evolveum.midpoint.model.impl.lens.projector.Projector.lambda$projectProjection$3(Projector.java:353)<br>
>     at<br>
>     com.evolveum.midpoint.model.impl.lens.ClockworkMedic.partialExecute(ClockworkMedic.java:174)<br>
>     at<br>
>     com.evolveum.midpoint.model.impl.lens.ClockworkMedic.partialExecute(ClockworkMedic.java:154)<br>
>     at<br>
>     com.evolveum.midpoint.model.impl.lens.projector.Projector.projectProjection(Projector.java:350)<br>
>     at<br>
>     com.evolveum.midpoint.model.impl.lens.projector.Projector.lambda$projectInternal$2(Projector.java:253)<br>
>     at<br>
>     com.evolveum.midpoint.model.impl.lens.ClockworkMedic.partialExecute(ClockworkMedic.java:174)<br>
>     at<br>
>     com.evolveum.midpoint.model.impl.lens.ClockworkMedic.partialExecute(ClockworkMedic.java:154)<br>
>     at<br>
>     com.evolveum.midpoint.model.impl.lens.projector.Projector.projectInternal(Projector.java:252)<br>
>     at<br>
>     com.evolveum.midpoint.model.impl.lens.projector.Projector.project(Projector.java:101)<br>
>     at<br>
>     com.evolveum.midpoint.model.impl.lens.Clockwork.click(Clockwork.java:455)<br>
>     at<br>
>     com.evolveum.midpoint.model.impl.lens.Clockwork.run(Clockwork.java:213)<br>
>     at<br>
>     com.evolveum.midpoint.model.impl.sync.SynchronizationServiceImpl.reactToChange(SynchronizationServiceImpl.java:809)<br>
>     at<br>
>     com.evolveum.midpoint.model.impl.sync.SynchronizationServiceImpl.notifyChange(SynchronizationServiceImpl.java:203)<br>
>     at<br>
>     com.evolveum.midpoint.provisioning.impl.ChangeNotificationDispatcherImpl.notifyChange(ChangeNotificationDispatcherImpl.java:152)<br>
>     at<br>
>     com.evolveum.midpoint.model.impl.sync.SynchronizeAccountResultHandler.handleObjectInternal(SynchronizeAccountResultHandler.java:198)<br>
>     at<br>
>     com.evolveum.midpoint.model.impl.sync.SynchronizeAccountResultHandler.handleObject(SynchronizeAccountResultHandler.java:121)<br>
>     at<br>
>     com.evolveum.midpoint.repo.common.task.AbstractSearchIterativeResultHandler.processRequest(AbstractSearchIterativeResultHandler.java:325)<br>
>     at<br>
>     com.evolveum.midpoint.repo.common.task.AbstractSearchIterativeResultHandler.handle(AbstractSearchIterativeResultHandler.java:183)<br>
>     at<br>
>     com.evolveum.midpoint.model.impl.importer.ImportAccountsFromResourceTaskHandler.importSingleShadow(ImportAccountsFromResourceTaskHandler.java:313)<br>
>     at<br>
>     com.evolveum.midpoint.model.impl.controller.ModelController.importFromResource(ModelController.java:1534)<br>
>     at sun.reflect.GeneratedMethodAccessor1312.invoke(Unknown Source)<br>
>     at<br>
>     sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)<br>
>     at java.lang.reflect.Method.invoke(Method.java:498) at<br>
>     org.apache.wicket.proxy.LazyInitProxyFactory$JdkHandler.invoke(LazyInitProxyFactory.java:508)<br>
>     at com.sun.proxy.$Proxy202.importFromResource(Unknown Source) at<br>
>     com.evolveum.midpoint.web.page.admin.resources.ResourceContentPanel.importResourceObject(ResourceContentPanel.java:977)<br>
>     at<br>
>     com.evolveum.midpoint.web.page.admin.resources.ResourceContentPanel$13$1.onSubmit(ResourceContentPanel.java:878)<br>
>     at<br>
>     com.evolveum.midpoint.web.component.data.column.InlineMenuButtonColumn.buttonMenuItemClickPerformed(InlineMenuButtonColumn.java:153)<br>
>     at<br>
>     com.evolveum.midpoint.web.component.data.column.InlineMenuButtonColumn.access$400(InlineMenuButtonColumn.java:50)<br>
>     at<br>
>     com.evolveum.midpoint.web.component.data.column.InlineMenuButtonColumn$1.lambda$createButton$76db38be$1(InlineMenuButtonColumn.java:121)<br>
>     at<br>
>     com.evolveum.midpoint.web.component.data.MultiButtonPanel$1.onClick(MultiButtonPanel.java:77)<br>
>     at<br>
>     org.apache.wicket.ajax.markup.html.AjaxLink$1.onEvent(AjaxLink.java:85)<br>
>     at<br>
>     org.apache.wicket.ajax.AjaxEventBehavior.respond(AjaxEventBehavior.java:155)<br>
>     at<br>
>     org.apache.wicket.ajax.AbstractDefaultAjaxBehavior.onRequest(AbstractDefaultAjaxBehavior.java:601)<br>
>     at sun.reflect.GeneratedMethodAccessor454.invoke(Unknown Source)<br>
>     at<br>
>     sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)<br>
>     at java.lang.reflect.Method.invoke(Method.java:498) at<br>
>     org.apache.wicket.RequestListenerInterface.internalInvoke(RequestListenerInterface.java:258)<br>
>     at<br>
>     org.apache.wicket.RequestListenerInterface.invoke(RequestListenerInterface.java:241)<br>
>     at<br>
>     org.apache.wicket.core.request.handler.ListenerInterfaceRequestHandler.invokeListener(ListenerInterfaceRequestHandler.java:248)<br>
>     at<br>
>     org.apache.wicket.core.request.handler.ListenerInterfaceRequestHandler.respond(ListenerInterfaceRequestHandler.java:234)<br>
>     at<br>
>     org.apache.wicket.request.cycle.RequestCycle$HandlerExecutor.respond(RequestCycle.java:895)<br>
>     at<br>
>     org.apache.wicket.request.RequestHandlerStack.execute(RequestHandlerStack.java:64)<br>
>     at<br>
>     org.apache.wicket.request.cycle.RequestCycle.execute(RequestCycle.java:265)<br>
>     at<br>
>     org.apache.wicket.request.cycle.RequestCycle.processRequest(RequestCycle.java:222)<br>
>     at<br>
>     org.apache.wicket.request.cycle.RequestCycle.processRequestAndDetach(RequestCycle.java:293)<br>
>     at<br>
>     org.apache.wicket.protocol.http.WicketFilter.processRequestCycle(WicketFilter.java:261)<br>
>     at<br>
>     org.apache.wicket.protocol.http.WicketFilter.processRequest(WicketFilter.java:203)<br>
>     at<br>
>     org.apache.wicket.protocol.http.WicketFilter.doFilter(WicketFilter.java:284)<br>
>     at<br>
>     org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)<br>
>     at<br>
>     org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)<br>
>     at<br>
>     com.evolveum.midpoint.web.util.MidPointProfilingServletFilter.doFilter(MidPointProfilingServletFilter.java:87)<br>
>     at<br>
>     org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)<br>
>     at<br>
>     org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)<br>
>     at<br>
>     org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:320)<br>
>     at<br>
>     org.springframework.security.web.access.intercept.FilterSecurityInterceptor.invoke(FilterSecurityInterceptor.java:127)<br>
>     at<br>
>     org.springframework.security.web.access.intercept.FilterSecurityInterceptor.doFilter(FilterSecurityInterceptor.java:91)<br>
>     at<br>
>     org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)<br>
>     at<br>
>     org.springframework.security.web.access.ExceptionTranslationFilter.doFilter(ExceptionTranslationFilter.java:119)<br>
>     at<br>
>     org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)<br>
>     at<br>
>     org.springframework.security.web.session.SessionManagementFilter.doFilter(SessionManagementFilter.java:137)<br>
>     at<br>
>     org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)<br>
>     at<br>
>     org.springframework.security.web.authentication.AnonymousAuthenticationFilter.doFilter(AnonymousAuthenticationFilter.java:111)<br>
>     at<br>
>     org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)<br>
>     at<br>
>     org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestFilter.doFilter(SecurityContextHolderAwareRequestFilter.java:170)<br>
>     at<br>
>     org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)<br>
>     at<br>
>     org.springframework.security.web.savedrequest.RequestCacheAwareFilter.doFilter(RequestCacheAwareFilter.java:63)<br>
>     at<br>
>     org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)<br>
>     at<br>
>     org.springframework.security.web.session.ConcurrentSessionFilter.doFilter(ConcurrentSessionFilter.java:155)<br>
>     at<br>
>     org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)<br>
>     at<br>
>     org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter.doFilter(AbstractAuthenticationProcessingFilter.java:200)<br>
>     at<br>
>     org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)<br>
>     at<br>
>     org.springframework.security.web.authentication.logout.LogoutFilter.doFilter(LogoutFilter.java:116)<br>
>     at<br>
>     org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)<br>
>     at<br>
>     org.springframework.security.web.csrf.CsrfFilter.doFilterInternal(CsrfFilter.java:100)<br>
>     at<br>
>     org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107)<br>
>     at<br>
>     org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)<br>
>     at<br>
>     org.springframework.security.web.context.SecurityContextPersistenceFilter.doFilter(SecurityContextPersistenceFilter.java:105)<br>
>     at<br>
>     org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)<br>
>     at<br>
>     org.springframework.security.web.context.request.async.WebAsyncManagerIntegrationFilter.doFilterInternal(WebAsyncManagerIntegrationFilter.java:56)<br>
>     at<br>
>     org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107)<br>
>     at<br>
>     org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)<br>
>     at<br>
>     org.springframework.security.web.FilterChainProxy.doFilterInternal(FilterChainProxy.java:215)<br>
>     at<br>
>     org.springframework.security.web.FilterChainProxy.doFilter(FilterChainProxy.java:178)<br>
>     at<br>
>     org.springframework.web.filter.DelegatingFilterProxy.invokeDelegate(DelegatingFilterProxy.java:357)<br>
>     at<br>
>     org.springframework.web.filter.DelegatingFilterProxy.doFilter(DelegatingFilterProxy.java:270)<br>
>     at<br>
>     org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)<br>
>     at<br>
>     org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)<br>
>     at<br>
>     org.springframework.web.filter.RequestContextFilter.doFilterInternal(RequestContextFilter.java:99)<br>
>     at<br>
>     org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107)<br>
>     at<br>
>     org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)<br>
>     at<br>
>     org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)<br>
>     at<br>
>     org.springframework.web.filter.HttpPutFormContentFilter.doFilterInternal(HttpPutFormContentFilter.java:109)<br>
>     at<br>
>     org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107)<br>
>     at<br>
>     org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)<br>
>     at<br>
>     org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)<br>
>     at<br>
>     org.springframework.web.filter.HiddenHttpMethodFilter.doFilterInternal(HiddenHttpMethodFilter.java:93)<br>
>     at<br>
>     org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107)<br>
>     at<br>
>     org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)<br>
>     at<br>
>     org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)<br>
>     at<br>
>     org.springframework.web.filter.CharacterEncodingFilter.doFilterInternal(CharacterEncodingFilter.java:200)<br>
>     at<br>
>     org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107)<br>
>     at<br>
>     org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)<br>
>     at<br>
>     org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)<br>
>     at<br>
>     org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:198)<br>
>     at<br>
>     org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:96)<br>
>     at<br>
>     org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:496)<br>
>     at<br>
>     org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:140)<br>
>     at<br>
>     org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:81)<br>
>     at<br>
>     org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:87)<br>
>     at<br>
>     com.evolveum.midpoint.web.boot.TomcatRootValve.invoke(TomcatRootValve.java:64)<br>
>     at<br>
>     org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:342)<br>
>     at<br>
>     org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:803)<br>
>     at<br>
>     org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:66)<br>
>     at<br>
>     org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:790)<br>
>     at<br>
>     <a href="http://org.apache.tomcat.util.net" target="_blank">org.apache.tomcat.util.net</a>.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1468)<br>
>     at<br>
>     <a href="http://org.apache.tomcat.util.net" target="_blank">org.apache.tomcat.util.net</a>.SocketProcessorBase.run(SocketProcessorBase.java:49)<br>
>     at<br>
>     java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)<br>
>     at<br>
>     java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)<br>
>     at<br>
>     org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)<br>
>     at java.lang.Thread.run(Thread.java:748)<br>
><br>
> I have confirmed that the value is in fact multi-valued in ldap and I <br>
> can assign multiple values.  The schema is set to maxoccur="unbound" <br>
> for the attribute.  Not sure if anyone else has run into this issue?  <br>
> It seems like a really simple fix, but it has stumped me to this point <br>
> and any help would be greatly appreciated.<br>
><br>
><br>
> -- <br>
> Keith LeValley<br>
> Identity Services Architect, Davenport University<br>
> <a href="mailto:klevalley2@davenport.edu" target="_blank">klevalley2@davenport.edu</a><br>
> <mailto:<a href="mailto:klevalley2@davenport.edu" target="_blank">klevalley2@davenport.edu</a>><br>
><br>
> _______________________________________________<br>
> midPoint mailing list<br>
> <a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
> <a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
-------------- next part --------------<br>
An HTML attachment was scrubbed...<br>
URL: <<a href="http://lists.evolveum.com/pipermail/midpoint/attachments/20190709/3429ae3e/attachment.html" rel="noreferrer" target="_blank">http://lists.evolveum.com/pipermail/midpoint/attachments/20190709/3429ae3e/attachment.html</a>><br>
<br>
------------------------------<br>
<br>
Subject: Digest Footer<br>
<br>
_______________________________________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
<br>
<br>
------------------------------<br>
<br>
End of midPoint Digest, Vol 87, Issue 8<br>
***************************************<br>
</blockquote></div><br clear="all"><div><br></div>-- <br><div dir="ltr" class="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div dir="ltr"><div dir="ltr">Keith LeValley<br><div><font face="arial, helvetica, sans-serif">Identity Services Architect</font>, Davenport University</div><div>phone:  (616) 732-1102</div><div><a href="mailto:klevalley2@davenport.edu" target="_blank">klevalley2@davenport.edu<br></a></div></div></div></div></div></div></div></div></div>