<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p>Hello Jarosław,</p>
<p>you'd need to configure "synchronization" section for your LDAP
resource. MidPoint needs to know how to link existing
(conflicting) LDAP object with midPoint role.</p>
<p>Best regards,<br>
</p>
<pre class="moz-signature" cols="72">Pavol Mederly
Software developer
evolveum.com
</pre>
<div class="moz-cite-prefix">On 14.11.2019 13:59, Skrzek Jaroslaw
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:71510f6a0834484f8bfe3a84b002d227@eex002.multi.loc">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<meta name="Generator" content="Microsoft Word 15 (filtered
medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.Stylwiadomocie-mail17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 70.85pt 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1">
<p class="MsoNormal"><span style="color:#1F497D" lang="EN-GB">Hi,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D" lang="EN-GB">I’d
like to add users to an existing ldap group using midpoint.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D" lang="EN-GB">I
have a metarole<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D" lang="EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB"><role
xmlns=<a class="moz-txt-link-rfc2396E" href="http://midpoint.evolveum.com/xml/ns/public/common/common-3">"http://midpoint.evolveum.com/xml/ns/public/common/common-3"</a>
xmlns:c=<a class="moz-txt-link-rfc2396E" href="http://midpoint.evolveum.com/xml/ns/public/common/common-3">"http://midpoint.evolveum.com/xml/ns/public/common/common-3"</a>
xmlns:icfs=<a class="moz-txt-link-rfc2396E" href="http://midpoint.evolveum.com/xml/ns/public/connector/icf-1/resource-schema-3">"http://midpoint.evolveum.com/xml/ns/public/connector/icf-1/resource-schema-3"</a>
xmlns:org=<a class="moz-txt-link-rfc2396E" href="http://midpoint.evolveum.com/xml/ns/public/common/org-3">"http://midpoint.evolveum.com/xml/ns/public/common/org-3"</a>
xmlns:q=<a class="moz-txt-link-rfc2396E" href="http://prism.evolveum.com/xml/ns/public/query-3">"http://prism.evolveum.com/xml/ns/public/query-3"</a>
xmlns:ri=<a class="moz-txt-link-rfc2396E" href="http://midpoint.evolveum.com/xml/ns/public/resource/instance-3">"http://midpoint.evolveum.com/xml/ns/public/resource/instance-3"</a>
xmlns:t=<a class="moz-txt-link-rfc2396E" href="http://prism.evolveum.com/xml/ns/public/types-3">"http://prism.evolveum.com/xml/ns/public/types-3"</a>
oid="8dc821c4-b7ef-4092-a1b3-1a6ff437b0ed" version="11"><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<name>Metarole for groups</name><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<inducement id="5"><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<construction><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<resourceRef oid="8a83b1a4-be18-11e6-ae84-7301fdab1d7c"
relation="org:default" type="c:ResourceType"><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<!-- OpenLDAP TEST --><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
</resourceRef><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<kind>entitlement</kind><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<intent>Group</intent><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
</construction><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
</inducement><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<inducement id="6"><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<construction><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<resourceRef oid="8a83b1a4-be18-11e6-ae84-7301fdab1d7c"
relation="org:default" type="c:ResourceType"><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<!-- OpenLDAP TEST --><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
</resourceRef><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<kind>account</kind><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<intent>default</intent><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<association id="7"><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<c:ref>ri:group</c:ref><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<outbound><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<expression><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<associationFromLink
xmlns:xsi=<a class="moz-txt-link-rfc2396E" href="http://www.w3.org/2001/XMLSchema-instance">"http://www.w3.org/2001/XMLSchema-instance"</a>
xsi:type="c:AssociationFromLinkExpressionEvaluatorType"><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<projectionDiscriminator
xsi:type="c:ShadowDiscriminatorType"><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<kind>entitlement</kind><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<intent>Group</intent><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
</projectionDiscriminator><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
</associationFromLink><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
</expression><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
</outbound><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
</association><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
</construction><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<order>2</order><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
</inducement><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB"></role><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D" lang="EN-GB">The
association in the resource config:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D" lang="EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB"><association
id="15"><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<c:ref>ri:group</c:ref><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<displayName>LDAP Group Membership</displayName><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<kind>entitlement</kind><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<intent>Group</intent><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<direction>objectToSubject</direction><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<associationAttribute>ri:member</associationAttribute><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<valueAttribute>ri:dn</valueAttribute><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<shortcutAssociationAttribute>ri:memberOf</shortcutAssociationAttribute><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<shortcutValueAttribute>ri:dn</shortcutValueAttribute><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
</association><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D" lang="EN-GB">And
a corresponding object type:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D" lang="EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB"><objectType
id="16"><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<kind>entitlement</kind><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<intent>Group</intent><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<default>true</default><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<objectClass>ri:groupOfNames</objectClass><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<baseContext><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<objectClass>ri:organizationalUnit</objectClass><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<filter><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<q:equal><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<q:path>attributes/dn</q:path><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<q:value>ou=groups,dc=test1,dc=test2,dc=test3,dc=test4</q:value><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
</q:equal><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
</filter><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
</baseContext><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<attribute id="21"><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<c:ref>ri:member</c:ref><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<matchingRule
xmlns:mr=<a class="moz-txt-link-rfc2396E" href="http://prism.evolveum.com/xml/ns/public/matching-rule-3">"http://prism.evolveum.com/xml/ns/public/matching-rule-3"</a>>mr:distinguishedName</matchingRule><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<outbound><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<strength>strong</strength><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<expression><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<value>cn=dummy,o=whatever</value><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
</expression><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
</outbound><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
</attribute><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<attribute id="22"><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<c:ref>ri:cn</c:ref><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<matchingRule
xmlns:mr=<a class="moz-txt-link-rfc2396E" href="http://prism.evolveum.com/xml/ns/public/matching-rule-3">"http://prism.evolveum.com/xml/ns/public/matching-rule-3"</a>>mr:stringIgnoreCase</matchingRule><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<outbound><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<strength>weak</strength><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<source><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<c:path>$focus/identifier</c:path><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
</source><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
</outbound><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
</attribute><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<attribute id="23"><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<c:ref>ri:description</c:ref><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<outbound><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<source><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<c:path>description</c:path><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
</source><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
</outbound><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
</attribute><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<attribute id="20"><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<c:ref>ri:dn</c:ref><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<matchingRule
xmlns:mr=<a class="moz-txt-link-rfc2396E" href="http://prism.evolveum.com/xml/ns/public/matching-rule-3">"http://prism.evolveum.com/xml/ns/public/matching-rule-3"</a>>mr:distinguishedName</matchingRule><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<tolerant>true</tolerant><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<exclusiveStrong>false</exclusiveStrong><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<outbound><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<source><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<c:path>$focus/identifier</c:path><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
</source><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<expression><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<script
xmlns:xsi=<a class="moz-txt-link-rfc2396E" href="http://www.w3.org/2001/XMLSchema-instance">"http://www.w3.org/2001/XMLSchema-instance"</a>
xsi:type="c:ScriptExpressionEvaluatorType"><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<code><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
import
javax.naming.ldap.Rdn<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
import
javax.naming.ldap.LdapName<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
dn = new
LdapName('ou=groups,dc=test1,dc=test2,dc=test3,dc=test4')<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
dn.add(new
Rdn('cn', identifier.toString()))<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
return
dn.toString()<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
</code><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
</script><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
</expression><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
</outbound><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
</attribute><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<activation><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<administrativeStatus><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<outbound id="9"><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<strength>weak</strength><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<expression><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
<c:path
xmlns:xsi=<a class="moz-txt-link-rfc2396E" href="http://www.w3.org/2001/XMLSchema-instance">"http://www.w3.org/2001/XMLSchema-instance"</a>
xsi:type="t:ItemPathType">$focusExists</c:path><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
</expression><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
</outbound><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
</administrativeStatus><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
</activation><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB">
</objectType><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D" lang="EN-GB">The
metarole is assigned to a custom role and the custom role is
assigned to an user. Unfortunately that works only if a
group doesn’t exist in LDAP. When it does exist, I get the
error:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D" lang="EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">com.evolveum.midpoint.util.exception.ObjectAlreadyExistsException:
Error processing account(no ID, type 'Group',
<a class="moz-txt-link-freetext" href="resource:8a83b1a4-be18-11e6-ae84-7301fdab1d7c(OpenLDAP">resource:8a83b1a4-be18-11e6-ae84-7301fdab1d7c(OpenLDAP</a>
TEST)): constraint violation: Found conflicting existing
object with attribute {.../resource/instance-3}dn = [
cn=pre-test3,ou=groups,dc=test1,dc= test2,dc= test3,dc=
test4 ]:
shadow:f14ebe2c-61f6-4069-8ca2-1b41324fed3b(cn=pre-test3,ou=groups,dc=
test1,dc= test2,dc= test3,dc= test4)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D" lang="EN-GB">What
can be wrong with that?<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:Consolas" lang="EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span
style="color:black;mso-fareast-language:PL">Pozdrawiam /
Best regards</span><span
style="color:#1F497D;mso-fareast-language:PL"><br>
<i> <br>
</i></span><b><i><span
style="color:black;mso-fareast-language:PL">Jarosław
Skrzek</span></i></b><b><i><span
style="color:#1F497D;mso-fareast-language:PL"><o:p></o:p></span></i></b></p>
<p class="MsoNormal" style="text-autospace:none"><i><span
style="color:black;mso-fareast-language:PL">Senior
Software Engineer</span></i><i><span
style="color:black;mso-fareast-language:PL"><o:p></o:p></span></i></p>
<p class="MsoNormal" style="text-autospace:none"><i><span
style="font-size:10.0pt;color:#1F497D;mso-fareast-language:PL"><o:p> </o:p></span></i></p>
<p class="MsoNormal" style="text-autospace:none"><i><span
style="font-size:10.0pt;color:black;mso-fareast-language:PL"
lang="EN-US">GSM: +48 601 308 901
<o:p></o:p></span></i></p>
<p class="MsoNormal" style="text-autospace:none"><i><span
style="font-size:10.0pt;color:black;mso-fareast-language:PL"
lang="EN-US">e-mail:
</span></i><span
style="color:#1F497D;mso-fareast-language:PL"><a
href="mailto:jaroslaw.skrzek@exence.com"
moz-do-not-send="true"><i><span
style="font-size:10.0pt;color:blue" lang="EN-US">jaroslaw.skrzek@exence.com</span></i></a></span><i><span
style="font-size:10.0pt;color:#1F497D;mso-fareast-language:PL"
lang="EN-US"><o:p></o:p></span></i></p>
<p class="MsoNormal"
style="margin-top:6.0pt;text-autospace:none"><b><span
style="font-size:10.0pt;color:black;mso-fareast-language:PL">Exence
S.A.
</span></b><span
style="font-size:10.0pt;color:#1F497D;mso-fareast-language:PL">|
</span><span
style="font-size:10.0pt;color:black;mso-fareast-language:PL">ul.
Szwedzka 5, Bielany Wrocławskie
</span><span
style="font-size:10.0pt;color:#1F497D;mso-fareast-language:PL">|</span><span
style="font-size:10.0pt;color:black;mso-fareast-language:PL">
55-040 Kobierzyce<o:p></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span
style="font-size:10.0pt;color:black;mso-fareast-language:PL"
lang="EN-GB">tel.: +48 71 782 06 00 | fax: +48 71 782 06 01</span><span
style="font-size:10.0pt;color:#1F497D;mso-fareast-language:PL"
lang="EN-GB"><o:p></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span
style="color:#1F497D;mso-fareast-language:PL"><a
href="https://www.exence.com/" moz-do-not-send="true"><span
style="font-size:10.0pt;color:blue" lang="DE">https://www.exence.com</span></a></span><span
style="font-size:10.0pt;color:#1F497D;mso-fareast-language:PL" lang="DE">
| e-mail: </span><span
style="color:#1F497D;mso-fareast-language:PL"><a
href="mailto:office@exence.com" moz-do-not-send="true"><span
style="font-size:10.0pt;color:blue" lang="DE">office@exence.com</span></a></span><span
style="font-size:10.0pt;color:#1F497D;mso-fareast-language:PL" lang="DE">
</span><span
style="font-size:10.0pt;color:black;mso-fareast-language:PL"
lang="DE"><o:p></o:p></span></p>
<p class="MsoNormal"
style="margin-top:6.0pt;text-autospace:none"><span
style="font-size:10.0pt;color:black;mso-fareast-language:PL">Sąd
Rejonowy we Wrocławiu dla Wrocławia-Fabrycznej, VI Wydział
Gospodarczy KRS nr 0000413027<o:p></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span
style="font-size:10.0pt;color:black;mso-fareast-language:PL">Kapitał
zakładowy: 208.400,00 zł, opłacony w całości; NIP:
899-273-40-56,
</span><span style="color:#1F497D;mso-fareast-language:PL"> </span><span
style="font-size:10.0pt;color:black;mso-fareast-language:PL">REGON:
021834967<o:p></o:p></span></p>
<p class="MsoNormal"
style="margin-top:6.0pt;text-autospace:none"><span
style="font-size:7.0pt;color:#1F497D;mso-fareast-language:PL"></span><i><span
style="font-size:8.0pt;color:#1F497D;mso-fareast-language:PL">Niniejsza
wiadomość może zawierać informacje poufne i/lub prawnie
chronione. Jeśli nie są Państwo właściwym jej adresatem
(lub otrzymali Państwo tą wiadomość przez pomyłkę) prosimy
poinformować o tym fakcie nadawcę i usunąć otrzymaną
wiadomość. Kopiowanie, ujawnianie lub rozpowszechnianie
informacji bez zgody jej nadawcy jest zabronione. <o:p></o:p></span></i></p>
<p class="MsoNormal"
style="margin-top:6.0pt;text-align:justify;text-autospace:none">
<i><span
style="font-size:8.0pt;color:#1F497D;mso-fareast-language:PL"
lang="EN-US">This e-mail may contain confidential and/or
privileged information. If you are not the intended
recipient (or have received this e-mail by mistake) please
notify the sender immediately and destroy this e-mail. Any
unauthorized copying, disclosure or distribution of the
material in this e-mail is strictly forbidden.
</span></i><i><span style="font-size:8.0pt;color:#1F497D"
lang="EN-US"><o:p></o:p></span></i></p>
<p class="MsoNormal"><span lang="EN-GB"><o:p> </o:p></span></p>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<pre class="moz-quote-pre" wrap="">_______________________________________________
midPoint mailing list
<a class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>
<a class="moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
</body>
</html>