<div dir="ltr"><div>Hello Michael,</div><div><br></div><div>Thank you, I tried using midpoint.executeChanges(delta) instead of midpoint.executeChanges(delta, null), it works the same. it modifies the shadow but does not update the LDAP account as expected.</div><div><br></div><div>I rechecked that if I manually modify the shadow through the GUI, the LDAP account is actually updated, below is the log for this action.</div><div><br></div><div>What I find weird is that my deltabuilder code in the password mapping <b>seems to be executed twice</b> when I edit the password. You can see in the logs in my previous message that my "deltadebug" appears twice, and <b>I have two clockwork summary</b> for the same attributes/pwdReset of the Shadow while only one clockwork summary is displayed for the password value.</div><div><br></div><div>What could explain this? Could this be a bug? I am running Midpoint LTS 4.0.3.</div><div><br></div><div>Log when I manually edit the pwdReset attribute of the shadow through the GUI : </div><div><br></div><div><p class="MsoNormal">2021-04-09 11:39:42,872 [MODEL] [pool-3-thread-151] DEBUG (com.evolveum.midpoint.model.impl.lens.Clockwork):<u></u><u></u></p><p class="MsoNormal">###[ CLOCKWORK SUMMARY ]######################################<u></u><u></u></p><p class="MsoNormal">Channel: <a href="http://midpoint.evolveum.com/xml/ns/public/gui/channels-3#user" target="_blank">http://midpoint.evolveum.com/xml/ns/public/gui/channels-3#user</a><u></u><u></u></p><p class="MsoNormal">Triggered by projection primary delta<u></u><u></u></p><p class="MsoNormal"> ObjectDelta(ShadowType:574a2c41-b0ea-45a1-b006-3e0f980165f7,MODIFY: PropertyDeltaImpl(attributes / {.../resource/instance-3}pwdReset, REPLACE))<u></u><u></u></p><p class="MsoNormal">Focus: focus(user:a0d85100-354e-450d-9ad1-8d2028d8336c(myuser))<u></u><u></u></p><p class="MsoNormal">Projections (1):<u></u><u></u></p><p class="MsoNormal"> account(ID {.../resource/instance-3}entryUUID = [ a4407a92-56fa-103a-868e-afc68d38775e ], type 'default', resource:xxx(LDAP)): KEEP<u></u><u></u></p><p class="MsoNormal">Executed:<u></u><u></u></p><p class="MsoNormal"> ObjectDelta(UserType:a0d85100-354e-450d-9ad1-8d2028d8336c,MODIFY: PropertyDeltaImpl(metadata / {.../common/common-3}lastProvisioningTimestamp, REPLACE), PropertyDeltaImpl(metadata / {.../common/common-3}modifyChannel, REPLACE), PropertyDeltaImpl(metadata / {.../common/common-3}modifyTimestamp, REPLACE), ReferenceDeltaImpl(metadata / {.../common/common-3}modifierRef, REPLACE), ReferenceDeltaImpl(metadata / {.../common/common-3}modifyTaskRef, REPLACE), ReferenceDeltaImpl(metadata / {.../common/common-3}modifyApproverRef, REPLACE), PropertyDeltaImpl(metadata / {.../common/common-3}modifyApprovalComment, REPLACE)): SUCCESS<u></u><u></u></p><p class="MsoNormal"> ObjectDelta(ShadowType:574a2c41-b0ea-45a1-b006-3e0f980165f7,MODIFY: PropertyDeltaImpl(attributes / {.../resource/instance-3}pwdReset, REPLACE), PropertyDeltaImpl(metadata / {.../common/common-3}modifyChannel, REPLACE), PropertyDeltaImpl(metadata / {.../common/common-3}modifyTimestamp, REPLACE), ReferenceDeltaImpl(metadata / {.../common/common-3}modifierRef, REPLACE), ReferenceDeltaImpl(metadata / {.../common/common-3}modifyTaskRef, REPLACE), ReferenceDeltaImpl(metadata / {.../common/common-3}modifyApproverRef, REPLACE), PropertyDeltaImpl(metadata / {.../common/common-3}modifyApprovalComment, REPLACE)): SUCCESS<u></u><u></u></p><p class="MsoNormal">##############################################################</p></div><div><br></div><div>-Frederic</div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Fri, Apr 9, 2021 at 11:00 AM Gruber, Michael via midPoint <<a href="mailto:midpoint@lists.evolveum.com">midpoint@lists.evolveum.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div lang="DE">
<div class="gmail-m_-2662245941225955488WordSection1">
<p class="MsoNormal"><span style="font-size:11pt;font-family:Arial,sans-serif;color:rgb(74,74,74)">Hi,<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Arial,sans-serif;color:rgb(74,74,74)"><u></u> <u></u></span></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:11pt;font-family:Arial,sans-serif;color:rgb(74,74,74)">we use something like this:<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:11pt;font-family:Arial,sans-serif;color:rgb(74,74,74)"><u></u> <u></u></span></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:11pt;font-family:Arial,sans-serif;color:rgb(74,74,74)">//get resource, e.g.:<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:11pt;font-family:Arial,sans-serif;color:rgb(74,74,74)">Def resLDAP = midpoint.searchObjectByName(ResourceType.class, "LDAP");<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:11pt;font-family:Arial,sans-serif;color:rgb(74,74,74)">def deltasShadow = []<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:11pt;font-family:Arial,sans-serif;color:rgb(74,74,74)">//”person” is the objectclass<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:11pt;font-family:Arial,sans-serif;color:rgb(74,74,74)">def attrdef = midpoint.getAttributeDefinition(resLDAP.asPrismObject(), "person", "pwdReset")<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:11pt;font-family:Arial,sans-serif;color:rgb(74,74,74)">def deltaPwdReset = midpoint.deltaFor(ShadowType.class).item(ItemPath.create(ShadowType.F_ATTRIBUTES, attrdef.itemName), attrdef).replace("TRUE").asObjectDelta(shadowLDAP.oid);<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Arial,sans-serif;color:rgb(74,74,74)">deltasShadow.add(deltaPwdReset)<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:11pt;font-family:Arial,sans-serif;color:rgb(74,74,74)">def deltasRes = midpoint.executeChanges(deltasShadow);<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:11pt;font-family:Arial,sans-serif;color:rgb(74,74,74)"><u></u> <u></u></span></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:11pt;font-family:Arial,sans-serif;color:rgb(74,74,74)">best regards, Michael<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:11pt;font-family:Arial,sans-serif;color:rgb(74,74,74)"><u></u> <u></u></span></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:11pt;font-family:Arial,sans-serif;color:rgb(74,74,74)"><u></u> <u></u></span></p>
<p class="MsoNormal"><b><span style="font-size:11pt;font-family:Calibri,sans-serif">Von:</span></b><span style="font-size:11pt;font-family:Calibri,sans-serif"> midPoint <<a href="mailto:midpoint-bounces@lists.evolveum.com" target="_blank">midpoint-bounces@lists.evolveum.com</a>>
<b>Im Auftrag von </b>Arnošt Starosta - AMI Praha a.s. via midPoint<br>
<b>Gesendet:</b> Donnerstag, 8. April 2021 18:47<br>
<b>An:</b> midPoint General Discussion <<a href="mailto:midpoint@lists.evolveum.com" target="_blank">midpoint@lists.evolveum.com</a>><br>
<b>Cc:</b> Arnošt Starosta - AMI Praha a.s. <<a href="mailto:arnost.starosta@ami.cz" target="_blank">arnost.starosta@ami.cz</a>>; Pavol Mederly <<a href="mailto:mederly@evolveum.com" target="_blank">mederly@evolveum.com</a>><br>
<b>Betreff:</b> Re: [midPoint] DeltaBuilder for ShadowType - add an attribute value to the resource - Undefined or dynamic path error<u></u><u></u></span></p>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<div>
<p class="MsoNormal">Hi Frederic,<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">I used this hand made PrismPropertyDefinition definition for a ShadowType query, may help in delta builder as well.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<div>
<p class="MsoNormal">def sAMQName = new QName('<a href="http://midpoint.evolveum.com/xml/ns/public/resource/instance-3" target="_blank">http://midpoint.evolveum.com/xml/ns/public/resource/instance-3</a>', 'sAMAccountName')<br>
def sAMDef = new PrismPropertyDefinitionImpl(sAMQName, DOMUtil.XSD_STRING, midpoint.prismContext)<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">...<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"> .item(ItemPath.create('attributes', 'sAMAccountName'), sAMDef)<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
</div>
<div>
<p class="MsoNormal">arnost<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<div>
<p class="MsoNormal">čt 8. 4. 2021 v 18:26 odesílatel Frédéric Lohier via midPoint <<a href="mailto:midpoint@lists.evolveum.com" target="_blank">midpoint@lists.evolveum.com</a>> napsal:<u></u><u></u></p>
</div>
<blockquote style="border-top:none;border-right:none;border-bottom:none;border-left:1pt solid rgb(204,204,204);padding:0cm 0cm 0cm 6pt;margin-left:4.8pt;margin-right:0cm">
<div>
<div>
<div style="margin-top:12pt;margin-bottom:12pt">
<div>
<div>
<div>
<p><span style="font-size:9.5pt;font-family:Arial,sans-serif">Hello Pavol,<u></u><u></u></span></p>
<p><span style="font-size:9.5pt;font-family:Arial,sans-serif"> <u></u><u></u></span></p>
<p><span style="font-size:9.5pt;font-family:Arial,sans-serif">Thank you for the suggested workaround and the jira issue, but I could not make it work. The closest I got was :<u></u><u></u></span></p>
<p><span style="font-size:9.5pt;font-family:Arial,sans-serif"> <u></u><u></u></span></p>
<p style="line-height:14.25pt;background:rgb(30,30,30)">
<span style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)">def delta = DeltaBuilder.deltaFor(ShadowType.class, prismContext)</span><span style="font-size:9.5pt;font-family:Arial,sans-serif"><u></u><u></u></span></p>
<p style="text-indent:35.4pt;line-height:14.25pt;background:rgb(30,30,30)">
<span style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)">.item(ItemPath.create(ShadowType.F_ATTRIBUTES, "pwdReset"), pwdResetDefinition)</span><span style="font-size:9.5pt;font-family:Arial,sans-serif"><u></u><u></u></span></p>
<p style="text-indent:35.4pt;line-height:14.25pt;background:rgb(30,30,30)">
<span style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)">.replace("TRUE")</span><span style="font-size:9.5pt;font-family:Arial,sans-serif"><u></u><u></u></span></p>
<p style="text-indent:35.4pt;line-height:14.25pt;background:rgb(30,30,30)">
<span style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)">.asObjectDelta(projection.getOid())</span><span style="font-size:9.5pt;font-family:Arial,sans-serif"><u></u><u></u></span></p>
<p><span style="font-size:9.5pt;font-family:Arial,sans-serif"> <u></u><u></u></span></p>
<p><span style="font-size:9.5pt;font-family:Arial,sans-serif">But, I don’t know how to get the ResourceAttributeDefinition for my pwdResetDefinition variable.<u></u><u></u></span></p>
<p><span style="font-size:9.5pt;font-family:Arial,sans-serif"> <u></u><u></u></span></p>
<p><span style="font-size:9.5pt;font-family:Arial,sans-serif">As I workaround, I tried to modify the user’s credentials/password/forceChange attribute and add a mapping to the ri :pwdReset attribute but I also could not make it work. The deltabuilder in the
credential mapping works, I can see that the user’s forceChange attribute is set to TRUE when I edit the password throught the GUI, <b>but this change is not synced to the resource</b>.<u></u><u></u></span></p>
<p><span style="font-size:9.5pt;font-family:Arial,sans-serif"> <u></u><u></u></span></p>
<p><span style="font-size:9.5pt;font-family:Arial,sans-serif">How could this behaviour be explained? What am I missing?<u></u><u></u></span></p>
<p><span style="font-size:9.5pt;font-family:Arial,sans-serif"> <u></u><u></u></span></p>
<p><span style="font-size:9.5pt;font-family:Arial,sans-serif">I checked that my pwdReset outbound mapping works : if I manually set the forceChange attribute through the GUI, then the resource’s pwdReset attribute is set to TRUE.<u></u><u></u></span></p>
<p><span style="font-size:9.5pt;font-family:Arial,sans-serif"> <u></u><u></u></span></p>
<p><span style="font-size:9.5pt;font-family:Arial,sans-serif">For reference, the aforementioned mappings :<u></u><u></u></span></p>
<p><span style="font-size:9.5pt;font-family:Arial,sans-serif"> <u></u><u></u></span></p>
<p><span style="font-size:9.5pt;font-family:Arial,sans-serif"> <u></u><u></u></span></p>
<p style="line-height:14.25pt;background:rgb(30,30,30)">
<span style="font-size:10.5pt;font-family:Consolas;color:gray"><</span><span style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">credentials</span><span style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span style="font-size:9.5pt;font-family:Arial,sans-serif"><u></u><u></u></span></p>
<p style="line-height:14.25pt;background:rgb(30,30,30)">
<span style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> </span><span style="font-size:10.5pt;font-family:Consolas;color:gray"><</span><span style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">password</span><span style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span style="font-size:9.5pt;font-family:Arial,sans-serif"><u></u><u></u></span></p>
<p style="line-height:14.25pt;background:rgb(30,30,30)">
<span style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> </span><span style="font-size:10.5pt;font-family:Consolas;color:gray"><</span><span style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">outbound</span><span style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span style="font-size:9.5pt;font-family:Arial,sans-serif"><u></u><u></u></span></p>
<p style="line-height:14.25pt;background:rgb(30,30,30)">
<span style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> </span><span style="font-size:10.5pt;font-family:Consolas;color:gray"><</span><span style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">name</span><span style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)">Password and pwdReset (to
force the password reset by user)</span><span style="font-size:10.5pt;font-family:Consolas;color:gray"></</span><span style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">name</span><span style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span style="font-size:9.5pt;font-family:Arial,sans-serif"><u></u><u></u></span></p>
<p style="line-height:14.25pt;background:rgb(30,30,30)">
<span style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> </span><span style="font-size:10.5pt;font-family:Consolas;color:gray"><</span><span style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">strength</span><span style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)">strong</span><span style="font-size:10.5pt;font-family:Consolas;color:gray"></</span><span style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">strength</span><span style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span style="font-size:9.5pt;font-family:Arial,sans-serif"><u></u><u></u></span></p>
<p style="line-height:14.25pt;background:rgb(30,30,30)">
<span style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> </span><span style="font-size:10.5pt;font-family:Consolas;color:gray"><</span><span style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">channel</span><span style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"><a href="http://midpoint.evolveum.com/xml/ns/public/gui/channels-3#user%3C/channel" target="_blank"><span style="color:rgb(66,133,244)">http://midpoint.evolveum.com/xml/ns/public/gui/channels-3#user</span><span style="font-size:11pt;font-family:Calibri,sans-serif;color:gray"></</span><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(86,156,214)">c</span><span style="color:rgb(86,156,214)">hanne</span><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(86,156,214)">l</span></a></span><span style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span style="font-size:9.5pt;font-family:Arial,sans-serif"><u></u><u></u></span></p>
<p style="line-height:14.25pt;background:rgb(30,30,30)">
<span style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> </span><span style="font-size:10.5pt;font-family:Consolas;color:gray"><</span><span style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">expression</span><span style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span style="font-size:9.5pt;font-family:Arial,sans-serif"><u></u><u></u></span></p>
<p style="line-height:14.25pt;background:rgb(30,30,30)">
<span style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> </span><span style="font-size:10.5pt;font-family:Consolas;color:gray"><</span><span style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">script</span><span style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span style="font-size:9.5pt;font-family:Arial,sans-serif"><u></u><u></u></span></p>
<p style="line-height:14.25pt;background:rgb(30,30,30)">
<span style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> </span><span style="font-size:10.5pt;font-family:Consolas;color:gray"><</span><span style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">code</span><span style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span style="font-size:9.5pt;font-family:Arial,sans-serif"><u></u><u></u></span></p>
<p style="line-height:14.25pt;background:rgb(30,30,30)">
<span style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> // If password modification comes from an Midpoint admin (channel #user), then we set the credentials/password/forceChange user’s attribute to true, which will then be
synced to the Open LDAP pwdReset attribute (this will force the user to reset his password)</span><span style="font-size:9.5pt;font-family:Arial,sans-serif"><u></u><u></u></span></p>
<p style="line-height:14.25pt;background:rgb(30,30,30)">
<span style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> </span><span style="font-size:9.5pt;font-family:Arial,sans-serif"><u></u><u></u></span></p>
<p style="line-height:14.25pt;background:rgb(30,30,30)">
<span style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> import com.evolveum.midpoint.prism.impl.delta.builder.*</span><span style="font-size:9.5pt;font-family:Arial,sans-serif"><u></u><u></u></span></p>
<p style="line-height:14.25pt;background:rgb(30,30,30)">
<span style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> import com.evolveum.midpoint.xml.ns._public.common.common_3.*</span><span style="font-size:9.5pt;font-family:Arial,sans-serif"><u></u><u></u></span></p>
<p style="line-height:14.25pt;background:rgb(30,30,30)">
<span style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> import com.evolveum.prism.xml.ns._public.types_3.*</span><span style="font-size:9.5pt;font-family:Arial,sans-serif"><u></u><u></u></span></p>
<p style="line-height:14.25pt;background:rgb(30,30,30)">
<span style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> </span><span style="font-size:9.5pt;font-family:Arial,sans-serif"><u></u><u></u></span></p>
<p style="line-height:14.25pt;background:rgb(30,30,30)">
<span style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> def prismContext = midpoint.getPrismContext()</span><span style="font-size:9.5pt;font-family:Arial,sans-serif"><u></u><u></u></span></p>
<p style="line-height:14.25pt;background:rgb(30,30,30)">
<span style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> def delta = DeltaBuilder.deltaFor(UserType.class, prismContext)</span><span style="font-size:9.5pt;font-family:Arial,sans-serif"><u></u><u></u></span></p>
<p style="line-height:14.25pt;background:rgb(30,30,30)">
<span style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> .item(UserType.F_CREDENTIALS, CredentialsType.F_PASSWORD, PasswordType.F_FORCE_CHANGE)</span><span style="font-size:9.5pt;font-family:Arial,sans-serif"><u></u><u></u></span></p>
<p style="line-height:14.25pt;background:rgb(30,30,30)">
<span style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> .replace("TRUE")</span><span style="font-size:9.5pt;font-family:Arial,sans-serif"><u></u><u></u></span></p>
<p style="line-height:14.25pt;background:rgb(30,30,30)">
<span style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> .asObjectDelta(focus.getOid())</span><span style="font-size:9.5pt;font-family:Arial,sans-serif"><u></u><u></u></span></p>
<p style="line-height:14.25pt;background:rgb(30,30,30)">
<span style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> midpoint.modifyObject(delta, null)</span><span style="font-size:9.5pt;font-family:Arial,sans-serif"><u></u><u></u></span></p>
<p style="line-height:14.25pt;background:rgb(30,30,30)">
<span style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> </span><span style="font-size:9.5pt;font-family:Arial,sans-serif"><u></u><u></u></span></p>
<p style="line-height:14.25pt;background:rgb(30,30,30)">
<span style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> // Then we return the password value anyway</span><span style="font-size:9.5pt;font-family:Arial,sans-serif"><u></u><u></u></span></p>
<p style="line-height:14.25pt;background:rgb(30,30,30)">
<span style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> return input</span><span style="font-size:9.5pt;font-family:Arial,sans-serif"><u></u><u></u></span></p>
<p style="line-height:14.25pt;background:rgb(30,30,30)">
<span style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> </span><span style="font-size:10.5pt;font-family:Consolas;color:gray"></</span><span style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">code</span><span style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span style="font-size:9.5pt;font-family:Arial,sans-serif"><u></u><u></u></span></p>
<p style="line-height:14.25pt;background:rgb(30,30,30)">
<span style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> </span><span style="font-size:10.5pt;font-family:Consolas;color:gray"></</span><span style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">script</span><span style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span style="font-size:9.5pt;font-family:Arial,sans-serif"><u></u><u></u></span></p>
<p style="line-height:14.25pt;background:rgb(30,30,30)">
<span style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> </span><span style="font-size:10.5pt;font-family:Consolas;color:gray"></</span><span style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">expression</span><span style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span style="font-size:9.5pt;font-family:Arial,sans-serif"><u></u><u></u></span></p>
<p style="line-height:14.25pt;background:rgb(30,30,30)">
<span style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> </span><span style="font-size:10.5pt;font-family:Consolas;color:gray"></</span><span style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">outbound</span><span style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span style="font-size:9.5pt;font-family:Arial,sans-serif"><u></u><u></u></span></p>
<p style="line-height:14.25pt;background:rgb(30,30,30)">
<span style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> </span><span style="font-size:10.5pt;font-family:Consolas;color:gray"><</span><span style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">outbound</span><span style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span style="font-size:9.5pt;font-family:Arial,sans-serif"><u></u><u></u></span></p>
<p style="line-height:14.25pt;background:rgb(30,30,30)">
<span style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> </span><span style="font-size:10.5pt;font-family:Consolas;color:gray"><</span><span style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">name</span><span style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> Simple
password mapping</span><span style="font-size:10.5pt;font-family:Consolas;color:gray"></</span><span style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">name</span><span style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span style="font-size:9.5pt;font-family:Arial,sans-serif"><u></u><u></u></span></p>
<p style="line-height:14.25pt;background:rgb(30,30,30)">
<span style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> </span><span style="font-size:10.5pt;font-family:Consolas;color:gray"><</span><span style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">description</span><span style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)">We
apply this mapping every time, except if the modification is done on the Midpoint GUI (by an IDM admin)</span><span style="font-size:10.5pt;font-family:Consolas;color:gray"></</span><span style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">description</span><span style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span style="font-size:9.5pt;font-family:Arial,sans-serif"><u></u><u></u></span></p>
<p style="line-height:14.25pt;background:rgb(30,30,30)">
<span style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> </span><span style="font-size:10.5pt;font-family:Consolas;color:gray"><</span><span style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">strength</span><span style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)">strong</span><span style="font-size:10.5pt;font-family:Consolas;color:gray"></</span><span style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">strength</span><span style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span style="font-size:9.5pt;font-family:Arial,sans-serif"><u></u><u></u></span></p>
<p style="line-height:14.25pt;background:rgb(30,30,30)">
<span style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> </span><span style="font-size:10.5pt;font-family:Consolas;color:gray"><</span><span style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">exceptChannel</span><span style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"><a href="http://midpoint.evolveum.com/xml/ns/public/gui/channels-3#user%3C/exceptChannel" target="_blank"><span style="color:rgb(66,133,244)">http://midpoint.evolveum.com/xml/ns/public/gui/channels-3#user</span><span style="font-size:11pt;font-family:Calibri,sans-serif;color:gray"></</span><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(86,156,214)">exceptChannel</span></a></span><span style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span style="font-size:9.5pt;font-family:Arial,sans-serif"><u></u><u></u></span></p>
<p style="line-height:14.25pt;background:rgb(30,30,30)">
<span style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> </span><span style="font-size:10.5pt;font-family:Consolas;color:gray"></</span><span style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">outbound</span><span style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span style="font-size:9.5pt;font-family:Arial,sans-serif"><u></u><u></u></span></p>
<p style="line-height:14.25pt;background:rgb(30,30,30)">
<span style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> </span><span style="font-size:10.5pt;font-family:Consolas;color:gray"><</span><span style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">inbound</span><span style="font-size:10.5pt;font-family:Consolas;color:gray">/></span><span style="font-size:9.5pt;font-family:Arial,sans-serif"><u></u><u></u></span></p>
<p style="line-height:14.25pt;background:rgb(30,30,30)">
<span style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> </span><span style="font-size:10.5pt;font-family:Consolas;color:gray"></</span><span style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">password</span><span style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span style="font-size:9.5pt;font-family:Arial,sans-serif"><u></u><u></u></span></p>
<p style="line-height:14.25pt;background:rgb(30,30,30)">
<span style="font-size:10.5pt;font-family:Consolas;color:gray"></</span><span style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">credentials</span><span style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span style="font-size:9.5pt;font-family:Arial,sans-serif"><u></u><u></u></span></p>
<p><span style="font-size:9.5pt;font-family:Arial,sans-serif"> <u></u><u></u></span></p>
<p><span style="font-size:9.5pt;font-family:Arial,sans-serif"> <u></u><u></u></span></p>
<p style="line-height:14.25pt;background:rgb(30,30,30)">
<span style="font-size:10.5pt;font-family:Consolas;color:gray"><</span><span style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">attribute</span><span style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span style="font-size:9.5pt;font-family:Arial,sans-serif"><u></u><u></u></span></p>
<p style="line-height:14.25pt;background:rgb(30,30,30)">
<span style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> </span><span style="font-size:10.5pt;font-family:Consolas;color:gray"><</span><span style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">ref</span><span style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)">ri:pwdReset</span><span style="font-size:10.5pt;font-family:Consolas;color:gray"></</span><span style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">ref</span><span style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span style="font-size:9.5pt;font-family:Arial,sans-serif"><u></u><u></u></span></p>
<p style="line-height:14.25pt;background:rgb(30,30,30)">
<span style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> </span><span style="font-size:10.5pt;font-family:Consolas;color:gray"><</span><span style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">tolerant</span><span style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)">true</span><span style="font-size:10.5pt;font-family:Consolas;color:gray"></</span><span style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">tolerant</span><span style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span style="font-size:9.5pt;font-family:Arial,sans-serif"><u></u><u></u></span></p>
<p style="line-height:14.25pt;background:rgb(30,30,30)">
<span style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> </span><span style="font-size:10.5pt;font-family:Consolas;color:gray"><</span><span style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">outbound</span><span style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span style="font-size:9.5pt;font-family:Arial,sans-serif"><u></u><u></u></span></p>
<p style="line-height:14.25pt;background:rgb(30,30,30)">
<span style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> </span><span style="font-size:10.5pt;font-family:Consolas;color:gray"><</span><span style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">channel</span><span style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"><a href="http://midpoint.evolveum.com/xml/ns/public/gui/channels-3#user" target="_blank"><span style="color:rgb(66,133,244)">http://midpoint.evolveum.com/xml/ns/public/gui/channels-3#user</span></a></span><span style="font-size:10.5pt;font-family:Consolas;color:gray"></</span><span style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">channel</span><span style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span style="font-size:9.5pt;font-family:Arial,sans-serif"><u></u><u></u></span></p>
<p style="line-height:14.25pt;background:rgb(30,30,30)">
<span style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> </span><span style="font-size:10.5pt;font-family:Consolas;color:gray"><</span><span style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">strength</span><span style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)">strong</span><span style="font-size:10.5pt;font-family:Consolas;color:gray"></</span><span style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">strength</span><span style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span style="font-size:9.5pt;font-family:Arial,sans-serif"><u></u><u></u></span></p>
<p style="line-height:14.25pt;background:rgb(30,30,30)">
<span style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> </span><span style="font-size:10.5pt;font-family:Consolas;color:gray"><</span><span style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">source</span><span style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span style="font-size:9.5pt;font-family:Arial,sans-serif"><u></u><u></u></span></p>
<p style="line-height:14.25pt;background:rgb(30,30,30)">
<span style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> </span><span style="font-size:10.5pt;font-family:Consolas;color:gray"><</span><span style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">path</span><span style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)">$focus/credentials/password/forceChange</span><span style="font-size:10.5pt;font-family:Consolas;color:gray"></</span><span style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">path</span><span style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span style="font-size:9.5pt;font-family:Arial,sans-serif"><u></u><u></u></span></p>
<p style="line-height:14.25pt;background:rgb(30,30,30)">
<span style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> </span><span style="font-size:10.5pt;font-family:Consolas;color:gray"></</span><span style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">source</span><span style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span style="font-size:9.5pt;font-family:Arial,sans-serif"><u></u><u></u></span></p>
<p style="line-height:14.25pt;background:rgb(30,30,30)">
<span style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> </span><span style="font-size:10.5pt;font-family:Consolas;color:gray"></</span><span style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">outbound</span><span style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span style="font-size:9.5pt;font-family:Arial,sans-serif"><u></u><u></u></span></p>
<p style="line-height:14.25pt;background:rgb(30,30,30)">
<span style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> </span><span style="font-size:10.5pt;font-family:Consolas;color:gray"><</span><span style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">inbound</span><span style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span style="font-size:9.5pt;font-family:Arial,sans-serif"><u></u><u></u></span></p>
<p style="line-height:14.25pt;background:rgb(30,30,30)">
<span style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> </span><span style="font-size:10.5pt;font-family:Consolas;color:gray"><</span><span style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">exceptChannel</span><span style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"><a href="http://midpoint.evolveum.com/xml/ns/public/gui/channels-3#user" target="_blank"><span style="color:rgb(66,133,244)">http://midpoint.evolveum.com/xml/ns/public/gui/channels-3#user</span></a></span><span style="font-size:10.5pt;font-family:Consolas;color:gray"></</span><span style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">exceptChannel</span><span style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span style="font-size:9.5pt;font-family:Arial,sans-serif"><u></u><u></u></span></p>
<p style="line-height:14.25pt;background:rgb(30,30,30)">
<span style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> </span><span style="font-size:10.5pt;font-family:Consolas;color:gray"><</span><span style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">strength</span><span style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)">strong</span><span style="font-size:10.5pt;font-family:Consolas;color:gray"></</span><span style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">strength</span><span style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span style="font-size:9.5pt;font-family:Arial,sans-serif"><u></u><u></u></span></p>
<p style="line-height:14.25pt;background:rgb(30,30,30)">
<span style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> </span><span style="font-size:10.5pt;font-family:Consolas;color:gray"><</span><span style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">target</span><span style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span style="font-size:9.5pt;font-family:Arial,sans-serif"><u></u><u></u></span></p>
<p style="line-height:14.25pt;background:rgb(30,30,30)">
<span style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> </span><span style="font-size:10.5pt;font-family:Consolas;color:gray"><</span><span style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">path</span><span style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)">$focus/credentials/password/forceChange</span><span style="font-size:10.5pt;font-family:Consolas;color:gray"></</span><span style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">path</span><span style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span style="font-size:9.5pt;font-family:Arial,sans-serif"><u></u><u></u></span></p>
<p style="line-height:14.25pt;background:rgb(30,30,30)">
<span style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> </span><span style="font-size:10.5pt;font-family:Consolas;color:gray"></</span><span style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">target</span><span style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span style="font-size:9.5pt;font-family:Arial,sans-serif"><u></u><u></u></span></p>
<p style="line-height:14.25pt;background:rgb(30,30,30)">
<span style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> </span><span style="font-size:10.5pt;font-family:Consolas;color:gray"></</span><span style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">inbound</span><span style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span style="font-size:9.5pt;font-family:Arial,sans-serif"><u></u><u></u></span></p>
<p style="line-height:14.25pt;background:rgb(30,30,30)">
<span style="font-size:10.5pt;font-family:Consolas;color:gray"></</span><span style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">attribute</span><span style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span style="font-size:9.5pt;font-family:Arial,sans-serif"><u></u><u></u></span></p>
<p><span style="font-size:9.5pt;font-family:Arial,sans-serif"> <u></u><u></u></span></p>
<p><span style="font-size:9.5pt;font-family:Arial,sans-serif">Logs when I modify the password value of a user through the midpoint GUI (the delta I am building in the credentials mapping is mentioned as « debugdelta ») :<u></u><u></u></span></p>
<p><span style="font-size:9.5pt;font-family:Arial,sans-serif"> <u></u><u></u></span></p>
<p><span style="font-size:9.5pt;font-family:Arial,sans-serif">2021-04-08 18:08:45,012 [MODEL] [pool-3-thread-142] INFO (com.evolveum.midpoint.expression): - <b>debugdelta:</b> <b>ObjectDelta<UserType>(UserType:a0d85100-354e-450d-9ad1-8d2028d8336c,MODIFY):</b><u></u><u></u></span></p>
<p><span style="font-size:9.5pt;font-family:Arial,sans-serif"> <b>credentials/password/forceChange</b><u></u><u></u></span></p>
<p><b><span style="font-size:9.5pt;font-family:Arial,sans-serif"> ADD: TRUE</span></b><span style="font-size:9.5pt;font-family:Arial,sans-serif"><u></u><u></u></span></p>
<p><span style="font-size:9.5pt;font-family:Arial,sans-serif">2021-04-08 18:08:45,298 [MODEL] [pool-3-thread-142] DEBUG (com.evolveum.midpoint.model.impl.lens.Clockwork): Context rot: projection LensProjectionContext(ShadowType:574a2c41-b0ea-45a1-b006-3e0f980165f7
on resource:xxxx (Arobas - IDP LDAP)) rotten because of executable delta ObjectDelta(ShadowType:574a2c41-b0ea-45a1-b006-3e0f980165f7,MODIFY: PropertyDeltaImpl(attributes / {.../resource/instance-3}pwdReset, REPLACE))<u></u><u></u></span></p>
<p><span style="font-size:9.5pt;font-family:Arial,sans-serif">2021-04-08 18:08:45,298 [MODEL] [pool-3-thread-142] DEBUG (com.evolveum.midpoint.model.impl.lens.Clockwork): Context rot: context rotten because of focus execution delta ObjectDelta(UserType:a0d85100-354e-450d-9ad1-8d2028d8336c,MODIFY:
PropertyDeltaImpl(credentials/password / {.../common/common-3}forceChange, ADD), PropertyDeltaImpl(credentials/password/metadata / {.../common/common-3}modifyChannel, REPLACE), PropertyDeltaImpl(credentials/password/metadata / {.../common/common-3}modifyTimestamp,
REPLACE), ReferenceDeltaImpl(credentials/password/metadata / {.../common/common-3}modifierRef, REPLACE), ReferenceDeltaImpl(credentials/password/metadata / {.../common/common-3}modifyTaskRef, REPLACE))<u></u><u></u></span></p>
<p><span style="font-size:9.5pt;font-family:Arial,sans-serif">2021-04-08 18:08:45,400 [MODEL] [pool-3-thread-142] DEBUG (com.evolveum.midpoint.model.impl.lens.Clockwork):<u></u><u></u></span></p>
<p><span style="font-size:9.5pt;font-family:Arial,sans-serif">###[ CLOCKWORK SUMMARY ]######################################<u></u><u></u></span></p>
<p><span style="font-size:9.5pt;font-family:Arial,sans-serif">Channel: <a href="http://midpoint.evolveum.com/xml/ns/public/gui/channels-3#user" target="_blank"><span style="color:rgb(66,133,244)">http://midpoint.evolveum.com/xml/ns/public/gui/channels-3#user</span></a><u></u><u></u></span></p>
<p><span style="font-size:9.5pt;font-family:Arial,sans-serif">Triggered by focus primary delta<u></u><u></u></span></p>
<p><span style="font-size:9.5pt;font-family:Arial,sans-serif"> ObjectDelta(UserType:a0d85100-354e-450d-9ad1-8d2028d8336c,MODIFY: PropertyDeltaImpl(credentials/password / {.../common/common-3}<b>forceChange, ADD</b>))<u></u><u></u></span></p>
<p><span style="font-size:9.5pt;font-family:Arial,sans-serif">Focus: focus(user:a0d85100-354e-450d-9ad1-8d2028d8336c(admlutunp))<u></u><u></u></span></p>
<p><span style="font-size:9.5pt;font-family:Arial,sans-serif">Projections (1):<u></u><u></u></span></p>
<p><span style="font-size:9.5pt;font-family:Arial,sans-serif"> account(ID {.../resource/instance-3}entryUUID = [ a4407a92-56fa-103a-868e-afc68d38775e ], type 'default', resource:d0811790-1d80-11e4-86b2-3c970e467874(Arobas - IDP LDAP)): KEEP<u></u><u></u></span></p>
<p><span style="font-size:9.5pt;font-family:Arial,sans-serif">Executed:<u></u><u></u></span></p>
<p><span style="font-size:9.5pt;font-family:Arial,sans-serif"> ObjectDelta(UserType:a0d85100-354e-450d-9ad1-8d2028d8336c,MODIFY: PropertyDeltaImpl(credentials/password / {.../common/common-3}forceChange, ADD), PropertyDeltaImpl(credentials/password/metadata
/ {.../common/common-3}modifyChannel, REPLACE), PropertyDeltaImpl(credentials/password/metadata / {.../common/common-3}modifyTimestamp, REPLACE), ReferenceDeltaImpl(credentials/password/metadata / {.../common/common-3}modifierRef, REPLACE), ReferenceDeltaImpl(credentials/password/metadata
/ {.../common/common-3}modifyTaskRef, REPLACE), PropertyDeltaImpl(metadata / {.../common/common-3}lastProvisioningTimestamp, REPLACE), PropertyDeltaImpl(metadata / {.../common/common-3}modifyChannel, REPLACE), PropertyDeltaImpl(metadata / {.../common/common-3}modifyTimestamp,
REPLACE), ReferenceDeltaImpl(metadata / {.../common/common-3}modifierRef, REPLACE), ReferenceDeltaImpl(metadata / {.../common/common-3}modifyTaskRef, REPLACE), ReferenceDeltaImpl(metadata / {.../common/common-3}modifyApproverRef, REPLACE), PropertyDeltaImpl(metadata
/ {.../common/common-3}modifyApprovalComment, REPLACE)): SUCCESS<u></u><u></u></span></p>
<p><span style="font-size:9.5pt;font-family:Arial,sans-serif"> ObjectDelta(ShadowType:574a2c41-b0ea-45a1-b006-3e0f980165f7,MODIFY: PropertyDeltaImpl(attributes / {.../resource/instance-3}pwdReset, REPLACE), PropertyDeltaImpl(metadata / {.../common/common-3}modifyChannel,
REPLACE), PropertyDeltaImpl(metadata / {.../common/common-3}modifyTimestamp, REPLACE), ReferenceDeltaImpl(metadata / {.../common/common-3}modifierRef, REPLACE), ReferenceDeltaImpl(metadata / {.../common/common-3}modifyTaskRef, REPLACE), ReferenceDeltaImpl(metadata
/ {.../common/common-3}modifyApproverRef, REPLACE), PropertyDeltaImpl(metadata / {.../common/common-3}modifyApprovalComment, REPLACE)): SUCCESS<u></u><u></u></span></p>
<p><span style="font-size:9.5pt;font-family:Arial,sans-serif">##############################################################<u></u><u></u></span></p>
<p><span style="font-size:9.5pt;font-family:Arial,sans-serif">2021-04-08 18:08:45,465 [MODEL] [pool-3-thread-142] INFO (com.evolveum.midpoint.expression): - <b>debugdelta:</b> <b>ObjectDelta<UserType>(UserType:a0d85100-354e-450d-9ad1-8d2028d8336c,MODIFY):</b><u></u><u></u></span></p>
<p><b><span style="font-size:9.5pt;font-family:Arial,sans-serif"> credentials/password/forceChange</span></b><span style="font-size:9.5pt;font-family:Arial,sans-serif"><u></u><u></u></span></p>
<p><b><span style="font-size:9.5pt;font-family:Arial,sans-serif"> ADD: TRUE</span></b><span style="font-size:9.5pt;font-family:Arial,sans-serif"><u></u><u></u></span></p>
<p><span style="font-size:9.5pt;font-family:Arial,sans-serif">2021-04-08 18:08:45,623 [MODEL] [pool-3-thread-142] DEBUG (com.evolveum.midpoint.model.impl.lens.Clockwork): Context rot: context rotten because of focus execution delta ObjectDelta(UserType:a0d85100-354e-450d-9ad1-8d2028d8336c,MODIFY:
PropertyDeltaImpl(credentials/password / {.../common/common-3}forceChange, ADD), PropertyDeltaImpl(credentials/password/metadata / {.../common/common-3}modifyChannel, REPLACE), PropertyDeltaImpl(credentials/password/metadata / {.../common/common-3}modifyTimestamp,
REPLACE), ReferenceDeltaImpl(credentials/password/metadata / {.../common/common-3}modifierRef, REPLACE), ReferenceDeltaImpl(credentials/password/metadata / {.../common/common-3}modifyTaskRef, REPLACE))<u></u><u></u></span></p>
<p><span style="font-size:9.5pt;font-family:Arial,sans-serif">2021-04-08 18:08:45,679 [MODEL] [pool-3-thread-142] DEBUG (com.evolveum.midpoint.model.impl.lens.Clockwork):<u></u><u></u></span></p>
<p><span style="font-size:9.5pt;font-family:Arial,sans-serif">###[ CLOCKWORK SUMMARY ]######################################<u></u><u></u></span></p>
<p><span style="font-size:9.5pt;font-family:Arial,sans-serif">Channel: <a href="http://midpoint.evolveum.com/xml/ns/public/gui/channels-3#user" target="_blank"><span style="color:rgb(66,133,244)">http://midpoint.evolveum.com/xml/ns/public/gui/channels-3#user</span></a><u></u><u></u></span></p>
<p><span style="font-size:9.5pt;font-family:Arial,sans-serif">Triggered by focus primary delta<u></u><u></u></span></p>
<p><span style="font-size:9.5pt;font-family:Arial,sans-serif"> ObjectDelta(UserType:a0d85100-354e-450d-9ad1-8d2028d8336c,MODIFY: PropertyDeltaImpl(credentials/password / {.../common/common-3}<b>forceChange, ADD</b>))<u></u><u></u></span></p>
<p><span style="font-size:9.5pt;font-family:Arial,sans-serif">Focus: focus(user:a0d85100-354e-450d-9ad1-8d2028d8336c(admlutunp))<u></u><u></u></span></p>
<p><span style="font-size:9.5pt;font-family:Arial,sans-serif">Projections (1):<u></u><u></u></span></p>
<p><span style="font-size:9.5pt;font-family:Arial,sans-serif"> account(ID {.../resource/instance-3}entryUUID = [ a4407a92-56fa-103a-868e-afc68d38775e ], type 'default', resource:xxx(Arobas - IDP LDAP)): KEEP<u></u><u></u></span></p>
<p><span style="font-size:9.5pt;font-family:Arial,sans-serif">Executed:<u></u><u></u></span></p>
<p><span style="font-size:9.5pt;font-family:Arial,sans-serif"> ObjectDelta(UserType:a0d85100-354e-450d-9ad1-8d2028d8336c,MODIFY: PropertyDeltaImpl(credentials/password / {.../common/common-3}forceChange, ADD), PropertyDeltaImpl(credentials/password/metadata
/ {.../common/common-3}modifyChannel, REPLACE), PropertyDeltaImpl(credentials/password/metadata / {.../common/common-3}modifyTimestamp, REPLACE), ReferenceDeltaImpl(credentials/password/metadata / {.../common/common-3}modifierRef, REPLACE), ReferenceDeltaImpl(credentials/password/metadata
/ {.../common/common-3}modifyTaskRef, REPLACE), PropertyDeltaImpl(metadata / {.../common/common-3}modifyChannel, REPLACE), PropertyDeltaImpl(metadata / {.../common/common-3}modifyTimestamp, REPLACE), ReferenceDeltaImpl(metadata / {.../common/common-3}modifierRef,
REPLACE), ReferenceDeltaImpl(metadata / {.../common/common-3}modifyTaskRef, REPLACE), ReferenceDeltaImpl(metadata / {.../common/common-3}modifyApproverRef, REPLACE), PropertyDeltaImpl(metadata / {.../common/common-3}modifyApprovalComment, REPLACE)): SUCCESS<u></u><u></u></span></p>
<p><span style="font-size:9.5pt;font-family:Arial,sans-serif">##############################################################<u></u><u></u></span></p>
<p><span style="font-size:9.5pt;font-family:Arial,sans-serif">2021-04-08 18:08:45,929 [MODEL] [pool-3-thread-142] DEBUG (com.evolveum.midpoint.model.impl.lens.Clockwork): Context rot: context rotten because of focus execution delta ObjectDelta(UserType:a0d85100-354e-450d-9ad1-8d2028d8336c,MODIFY:
PropertyDeltaImpl(credentials/password / {.../common/common-3}value, REPLACE), PropertyDeltaImpl(credentials/password/metadata / {.../common/common-3}modifyChannel, REPLACE), PropertyDeltaImpl(credentials/password/metadata / {.../common/common-3}modifyTimestamp,
REPLACE), ReferenceDeltaImpl(credentials/password/metadata / {.../common/common-3}modifierRef, REPLACE), ReferenceDeltaImpl(credentials/password/metadata / {.../common/common-3}modifyTaskRef, REPLACE))<u></u><u></u></span></p>
<p><span style="font-size:9.5pt;font-family:Arial,sans-serif">2021-04-08 18:08:46,009 [MODEL] [pool-3-thread-142] DEBUG (com.evolveum.midpoint.model.impl.lens.Clockwork):<u></u><u></u></span></p>
<p><span style="font-size:9.5pt;font-family:Arial,sans-serif">###[ CLOCKWORK SUMMARY ]######################################<u></u><u></u></span></p>
<p><span style="font-size:9.5pt;font-family:Arial,sans-serif">Channel: <a href="http://midpoint.evolveum.com/xml/ns/public/gui/channels-3#user" target="_blank"><span style="color:rgb(66,133,244)">http://midpoint.evolveum.com/xml/ns/public/gui/channels-3#user</span></a><u></u><u></u></span></p>
<p><span style="font-size:9.5pt;font-family:Arial,sans-serif">Triggered by focus primary delta<u></u><u></u></span></p>
<p><span style="font-size:9.5pt;font-family:Arial,sans-serif"> ObjectDelta(UserType:a0d85100-354e-450d-9ad1-8d2028d8336c,MODIFY: PropertyDeltaImpl(credentials/password / {.../common/common-3}<b>value, REPLACE</b>))<u></u><u></u></span></p>
<p><span style="font-size:9.5pt;font-family:Arial,sans-serif">Focus: focus(user:a0d85100-354e-450d-9ad1-8d2028d8336c(admlutunp))<u></u><u></u></span></p>
<p><span style="font-size:9.5pt;font-family:Arial,sans-serif">Projections (1):<u></u><u></u></span></p>
<p><span style="font-size:9.5pt;font-family:Arial,sans-serif"> account(ID {.../resource/instance-3}entryUUID = [ a4407a92-56fa-103a-868e-afc68d38775e ], type 'default', resource:xxx(Arobas - IDP LDAP)): KEEP<u></u><u></u></span></p>
<p><span style="font-size:9.5pt;font-family:Arial,sans-serif">Executed:<u></u><u></u></span></p>
<p><span style="font-size:9.5pt;font-family:Arial,sans-serif"> ObjectDelta(UserType:a0d85100-354e-450d-9ad1-8d2028d8336c,MODIFY: PropertyDeltaImpl(credentials/password / {.../common/common-3}value, REPLACE), PropertyDeltaImpl(credentials/password/metadata
/ {.../common/common-3}modifyChannel, REPLACE), PropertyDeltaImpl(credentials/password/metadata / {.../common/common-3}modifyTimestamp, REPLACE), ReferenceDeltaImpl(credentials/password/metadata / {.../common/common-3}modifierRef, REPLACE), ReferenceDeltaImpl(credentials/password/metadata
/ {.../common/common-3}modifyTaskRef, REPLACE), PropertyDeltaImpl(metadata / {.../common/common-3}lastProvisioningTimestamp, REPLACE), PropertyDeltaImpl(metadata / {.../common/common-3}modifyChannel, REPLACE), PropertyDeltaImpl(metadata / {.../common/common-3}modifyTimestamp,
REPLACE), ReferenceDeltaImpl(metadata / {.../common/common-3}modifierRef, REPLACE), ReferenceDeltaImpl(metadata / {.../common/common-3}modifyTaskRef, REPLACE), ReferenceDeltaImpl(metadata / {.../common/common-3}modifyApproverRef, REPLACE), PropertyDeltaImpl(metadata
/ {.../common/common-3}modifyApprovalComment, REPLACE)): SUCCESS<u></u><u></u></span></p>
<p><span style="font-size:9.5pt;font-family:Arial,sans-serif"> ObjectDelta(ShadowType:574a2c41-b0ea-45a1-b006-3e0f980165f7,MODIFY: PropertyDeltaImpl(credentials/password / {.../common/common-3}value, REPLACE), PropertyDeltaImpl(credentials/password/metadata
/ {.../common/common-3}modifyChannel, REPLACE), PropertyDeltaImpl(credentials/password/metadata / {.../common/common-3}modifyTimestamp, REPLACE), ReferenceDeltaImpl(credentials/password/metadata / {.../common/common-3}modifierRef, REPLACE), ReferenceDeltaImpl(credentials/password/metadata
/ {.../common/common-3}modifyTaskRef, REPLACE), PropertyDeltaImpl(metadata / {.../common/common-3}modifyChannel, REPLACE), PropertyDeltaImpl(metadata / {.../common/common-3}modifyTimestamp, REPLACE), ReferenceDeltaImpl(metadata / {.../common/common-3}modifierRef,
REPLACE), ReferenceDeltaImpl(metadata / {.../common/common-3}modifyTaskRef, REPLACE), ReferenceDeltaImpl(metadata / {.../common/common-3}modifyApproverRef, REPLACE), PropertyDeltaImpl(metadata / {.../common/common-3}modifyApprovalComment, REPLACE)): SUCCESS<u></u><u></u></span></p>
<p><span style="font-size:9.5pt;font-family:Arial,sans-serif">##############################################################<u></u><u></u></span></p>
</div>
</div>
</div>
</div>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<div>
<p class="MsoNormal">On Thu, Apr 8, 2021, 08:32 Pavol Mederly via midPoint <<a href="mailto:midpoint@lists.evolveum.com" target="_blank">midpoint@lists.evolveum.com</a>> wrote:<u></u><u></u></p>
</div>
<blockquote style="border-top:none;border-right:none;border-bottom:none;border-left:1pt solid rgb(204,204,204);padding:0cm 0cm 0cm 6pt;margin-left:4.8pt;margin-right:0cm">
<div>
<p>Hello Frédéric,<u></u><u></u></p>
<p>unfortunately I have currently no time to analyze your specific problem, but the issue you see with the delta builder is an inherent limitation of that API. For more information and a suggested workaround please see
<a href="https://jira.evolveum.com/browse/MID-6981" target="_blank">https://jira.evolveum.com/browse/MID-6981</a>.<u></u><u></u></p>
<p>Best regards,<u></u><u></u></p>
<pre>-- <u></u><u></u></pre>
<pre>Pavol Mederly<u></u><u></u></pre>
<pre>Software developer<u></u><u></u></pre>
<pre><a href="http://evolveum.com" target="_blank">evolveum.com</a><u></u><u></u></pre>
<div>
<p class="MsoNormal">On 07/04/2021 17:27, Frédéric Lohier via midPoint wrote:<u></u><u></u></p>
</div>
<blockquote style="margin-top:5pt;margin-bottom:5pt">
<div>
<div>
<div>
<p class="MsoNormal">Hello,<u></u><u></u></p>
</div>
<div>
<div>
<p class="MsoNormal"><span lang="FR"> <u></u><u></u></span></p>
<p class="MsoNormal"><span lang="FR">Following up my last email « Set resource attribute pwdReset when password changed by Midpoint GUI by IDM admin », I think the password mapping using channels is
the way to go. <u></u><u></u></span></p>
<p class="MsoNormal"><span lang="FR">What I want to do now is to set this attribute in the password mapping context using groovy. This attribute exists in the resource schema as an operational attribute
and I can manualy set this attribute for a user through midpoint GUI (edit projection tab).<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="FR"> <u></u><u></u></span></p>
<p class="MsoNormal"><span lang="FR">My guess is that I have to « build a delta » for the correspondant shadow object. Am I right?<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="FR"> <u></u><u></u></span></p>
<p class="MsoNormal"><span lang="FR">I know the shadow OID thanks to the projection variable (projection.getOid()), I tried to build the delta using some examples around, but I get the error « Undefined
or dynamic path: pwdReset in: CTD ({.../common/common-3}ShadowType) ». Any idea of what I am doing wrong?<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="FR"> <u></u><u></u></span></p>
<p class="MsoNormal"><span lang="FR">The full password mapping :
<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="FR"> <u></u><u></u></span></p>
<p class="MsoNormal" style="line-height:14.25pt;background:rgb(30,30,30)">
<span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:gray"><</span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">credentials</span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span lang="FR"><u></u><u></u></span></p>
<p class="MsoNormal" style="line-height:14.25pt;background:rgb(30,30,30)">
<span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> </span>
<span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:gray"><</span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">password</span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span lang="FR"><u></u><u></u></span></p>
<p class="MsoNormal" style="line-height:14.25pt;background:rgb(30,30,30)">
<span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)">
</span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:gray"><</span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">outbound</span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span lang="FR"><u></u><u></u></span></p>
<p class="MsoNormal" style="line-height:14.25pt;background:rgb(30,30,30)">
<span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)">
</span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:gray"><</span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">name</span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)">Password and pwdReset (to
force the password reset by user)</span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:gray"></</span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">name</span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span lang="FR"><u></u><u></u></span></p>
<p class="MsoNormal" style="line-height:14.25pt;background:rgb(30,30,30)">
<span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> </span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:gray"><</span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">strength</span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)">strong</span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:gray"></</span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">strength</span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span lang="FR"><u></u><u></u></span></p>
<p class="MsoNormal" style="line-height:14.25pt;background:rgb(30,30,30)">
<span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> </span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:gray"><</span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">channel</span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"><a href="http://midpoint.evolveum.com/xml/ns/public/gui/channels-3#user%3C/channel" target="_blank">http://midpoint.evolveum.com/xml/ns/public/gui/channels-3#user<span style="font-size:11pt;font-family:Calibri,sans-serif;color:gray;text-decoration:none"></</span><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(86,156,214);text-decoration:none">c</span><span style="color:rgb(86,156,214);text-decoration:none">hanne</span><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(86,156,214);text-decoration:none">l</span></a></span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span lang="FR"><u></u><u></u></span></p>
<p class="MsoNormal" style="line-height:14.25pt;background:rgb(30,30,30)">
<span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> </span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:gray"><</span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">expression</span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span lang="FR"><u></u><u></u></span></p>
<p class="MsoNormal" style="line-height:14.25pt;background:rgb(30,30,30)">
<span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)">
</span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:gray"><</span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">script</span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span lang="FR"><u></u><u></u></span></p>
<p class="MsoNormal" style="line-height:14.25pt;background:rgb(30,30,30)">
<span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)">
</span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:gray"><</span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">code</span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span lang="FR"><u></u><u></u></span></p>
<p class="MsoNormal" style="line-height:14.25pt;background:rgb(30,30,30)">
<span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> // If password modification comes from an Midpoint admin (channel #user), then we set the Open LDAP pwdReset attribute to TRUE (this will force the user to reset
his password)</span><span lang="FR"><u></u><u></u></span></p>
<p class="MsoNormal" style="line-height:14.25pt;background:rgb(30,30,30)">
<span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> </span><span lang="FR"><u></u><u></u></span></p>
<p class="MsoNormal" style="line-height:14.25pt;background:rgb(30,30,30)">
<span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> import com.evolveum.midpoint.prism.impl.delta.builder.*</span><span lang="FR"><u></u><u></u></span></p>
<p class="MsoNormal" style="line-height:14.25pt;background:rgb(30,30,30)">
<span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> import com.evolveum.midpoint.xml.ns._public.common.common_3.*</span><span lang="FR"><u></u><u></u></span></p>
<p class="MsoNormal" style="line-height:14.25pt;background:rgb(30,30,30)">
<span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> import com.evolveum.prism.xml.ns._public.types_3.*</span><span lang="FR"><u></u><u></u></span></p>
<p class="MsoNormal" style="line-height:14.25pt;background:rgb(30,30,30)">
<span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> </span><span lang="FR"><u></u><u></u></span></p>
<p class="MsoNormal" style="line-height:14.25pt;background:rgb(30,30,30)">
<span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> def prismContext = midpoint.getPrismContext()</span><span lang="FR"><u></u><u></u></span></p>
<p class="MsoNormal" style="line-height:14.25pt;background:rgb(30,30,30)">
<span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> def shadowOid = projection.getOid()</span><span lang="FR"><u></u><u></u></span></p>
<p class="MsoNormal" style="line-height:14.25pt;background:rgb(30,30,30)">
<span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> def delta = DeltaBuilder.deltaFor(ShadowType.class, prismContext)</span><span lang="FR"><u></u><u></u></span></p>
<p class="MsoNormal" style="text-indent:35.4pt;line-height:14.25pt;background:rgb(30,30,30)">
<span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> .item(ShadowType.F_ATTRIBUTES, "pwdReset")</span><span lang="FR"><u></u><u></u></span></p>
<p class="MsoNormal" style="line-height:14.25pt;background:rgb(30,30,30)">
<span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> .add("TRUE")</span><span lang="FR"><u></u><u></u></span></p>
<p class="MsoNormal" style="line-height:14.25pt;background:rgb(30,30,30)">
<span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> .asObjectDelta(shadowOid)</span><span lang="FR"><u></u><u></u></span></p>
<p class="MsoNormal" style="line-height:14.25pt;background:rgb(30,30,30)">
<span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> midpoint.modifyObject(delta, null)</span><span lang="FR"><u></u><u></u></span></p>
<p class="MsoNormal" style="line-height:14.25pt;background:rgb(30,30,30)">
<span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> </span><span lang="FR"><u></u><u></u></span></p>
<p class="MsoNormal" style="line-height:14.25pt;background:rgb(30,30,30)">
<span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> // Then we return the password value anyway</span><span lang="FR"><u></u><u></u></span></p>
<p class="MsoNormal" style="line-height:14.25pt;background:rgb(30,30,30)">
<span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> return input</span><span lang="FR"><u></u><u></u></span></p>
<p class="MsoNormal" style="line-height:14.25pt;background:rgb(30,30,30)">
<span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)">
</span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:gray"></</span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">code</span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span lang="FR"><u></u><u></u></span></p>
<p class="MsoNormal" style="line-height:14.25pt;background:rgb(30,30,30)">
<span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)">
</span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:gray"></</span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">script</span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span lang="FR"><u></u><u></u></span></p>
<p class="MsoNormal" style="line-height:14.25pt;background:rgb(30,30,30)">
<span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> </span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:gray"></</span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">expression</span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span lang="FR"><u></u><u></u></span></p>
<p class="MsoNormal" style="line-height:14.25pt;background:rgb(30,30,30)">
<span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> </span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:gray"></</span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">outbound</span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span lang="FR"><u></u><u></u></span></p>
<p class="MsoNormal" style="line-height:14.25pt;background:rgb(30,30,30)">
<span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> </span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:gray"><</span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">outbound</span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span lang="FR"><u></u><u></u></span></p>
<p class="MsoNormal" style="line-height:14.25pt;background:rgb(30,30,30)">
<span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)">
</span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:gray"><</span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">name</span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)">
Simple password mapping</span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:gray"></</span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">name</span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span lang="FR"><u></u><u></u></span></p>
<p class="MsoNormal" style="line-height:14.25pt;background:rgb(30,30,30)">
<span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> </span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:gray"><</span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">description</span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)">We
apply this mapping every time, except if the modification is done on the Midpoint GUI (by an IDM admin)</span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:gray"></</span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">description</span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span lang="FR"><u></u><u></u></span></p>
<p class="MsoNormal" style="line-height:14.25pt;background:rgb(30,30,30)">
<span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> </span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:gray"><</span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">strength</span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)">strong</span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:gray"></</span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">strength</span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span lang="FR"><u></u><u></u></span></p>
<p class="MsoNormal" style="line-height:14.25pt;background:rgb(30,30,30)">
<span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> </span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:gray"><</span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">exceptChannel</span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"><a href="http://midpoint.evolveum.com/xml/ns/public/gui/channels-3#user%3C/exceptChannel" target="_blank">http://midpoint.evolveum.com/xml/ns/public/gui/channels-3#user<span style="font-size:11pt;font-family:Calibri,sans-serif;color:gray;text-decoration:none"></</span><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(86,156,214);text-decoration:none">exceptChannel</span></a></span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span lang="FR"><u></u><u></u></span></p>
<p class="MsoNormal" style="line-height:14.25pt;background:rgb(30,30,30)">
<span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> </span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:gray"></</span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">outbound</span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span lang="FR"><u></u><u></u></span></p>
<p class="MsoNormal" style="line-height:14.25pt;background:rgb(30,30,30)">
<span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> </span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:gray"><</span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">inbound</span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:gray">/></span><span lang="FR"><u></u><u></u></span></p>
<p class="MsoNormal" style="line-height:14.25pt;background:rgb(30,30,30)">
<span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> </span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:gray"></</span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">password</span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span lang="FR"><u></u><u></u></span></p>
<p class="MsoNormal" style="line-height:14.25pt;background:rgb(30,30,30)">
<span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:gray"></</span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(86,156,214)">credentials</span><span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:gray">></span><span lang="FR"><u></u><u></u></span></p>
<p class="MsoNormal" style="line-height:14.25pt;background:rgb(30,30,30)">
<span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> </span><span lang="FR"><u></u><u></u></span></p>
<p class="MsoNormal" style="line-height:14.25pt;background:rgb(30,30,30)">
<span lang="FR" style="font-size:10.5pt;font-family:Consolas;color:rgb(212,212,212)"> </span><span lang="FR"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="FR"> <u></u><u></u></span></p>
<p class="MsoNormal"><span lang="FR">Error :<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="FR"> <u></u><u></u></span></p>
<p class="MsoNormal"><span lang="FR">java.lang.IllegalArgumentException: Undefined or dynamic path: pwdReset in: CTD ({.../common/common-3}ShadowType)<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="FR"> at com.evolveum.midpoint.prism.impl.delta.builder.DeltaBuilder.item(DeltaBuilder.java:92)<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="FR"> at com.evolveum.midpoint.prism.impl.delta.builder.DeltaBuilder.item(DeltaBuilder.java:85)<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="FR"> at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="FR"> at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="FR"> at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="FR"> at java.base/java.lang.reflect.Method.invoke(Method.java:566)<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="FR"> at org.codehaus.groovy.runtime.callsite.PlainObjectMetaMethodSite.doInvoke(PlainObjectMetaMethodSite.java:43)<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="FR"> at org.codehaus.groovy.runtime.callsite.PojoMetaMethodSite$PojoCachedMethodSite.invoke(PojoMetaMethodSite.java:188)<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="FR"> at org.codehaus.groovy.runtime.callsite.PojoMetaMethodSite.call(PojoMetaMethodSite.java:53)<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="FR"> at org.codehaus.groovy.runtime.callsite.CallSiteArray.defaultCall(CallSiteArray.java:47)<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="FR"> at org.codehaus.groovy.runtime.callsite.AbstractCallSite.call(AbstractCallSite.java:115)<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="FR"> at org.codehaus.groovy.runtime.callsite.AbstractCallSite.call(AbstractCallSite.java:127)<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="FR"> at expression_in_mapping_'Password_and_pwdReset_(to_force_the_password_reset_by_user)'_in_password_mapping_in_projection_(account_(default)_on_resource_xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx(LDAP)).run(expression
in mapping 'Password_and_pwdReset_(to_force_the_password_reset_by_user)' in password mapping in projection (account (default) on resource: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx (LDAP)):13)<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="FR"> at com.evolveum.midpoint.model.common.expression.script.groovy.GroovyScriptEvaluator.evaluateScript(GroovyScriptEvaluator.java:203)<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="FR"> at com.evolveum.midpoint.model.common.expression.script.groovy.GroovyScriptEvaluator.evaluateScript(GroovyScriptEvaluator.java:50)<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="FR"> at com.evolveum.midpoint.model.common.expression.script.AbstractCachingScriptEvaluator.evaluate(AbstractCachingScriptEvaluator.java:76)<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="FR"> ... 36 common frames omitted<u></u><u></u></span></p>
</div>
</div>
</div>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
<pre>_______________________________________________<u></u><u></u></pre>
<pre>midPoint mailing list<u></u><u></u></pre>
<pre><a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><u></u><u></u></pre>
<pre><a href="https://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">https://lists.evolveum.com/mailman/listinfo/midpoint</a><u></u><u></u></pre>
</blockquote>
</div>
<p class="MsoNormal">_______________________________________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="https://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">https://lists.evolveum.com/mailman/listinfo/midpoint</a><u></u><u></u></p>
</blockquote>
</div>
<p class="MsoNormal">_______________________________________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="https://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">https://lists.evolveum.com/mailman/listinfo/midpoint</a><u></u><u></u></p>
</blockquote>
</div>
<p class="MsoNormal"><br clear="all">
<br>
-- <u></u><u></u></p>
<div>
<div>
<div>
<div>
<div>
<p><strong><span style="font-size:10pt;font-family:Arial,sans-serif;color:black">Arnošt Starosta</span></strong><span style="font-size:10pt;font-family:Arial,sans-serif;color:black"><br>
</span><span style="font-size:8.5pt;font-family:Arial,sans-serif;color:gray">solution architect</span><span style="font-size:10pt;font-family:Arial,sans-serif;color:black"><u></u><u></u></span></p>
</div>
<p><span style="font-size:8.5pt;font-family:Arial,sans-serif;color:black">gsm: [+420] 603 794 932<br>
e‑mail: <a href="mailto:arnost.starosta@ami.cz" target="_blank">arnost.starosta@ami.cz</a><u></u><u></u></span></p>
<p><strong><span style="font-size:8.5pt;font-family:Arial,sans-serif;color:black">AMI Praha a.s.</span></strong><span style="font-size:8.5pt;font-family:Arial,sans-serif;color:black"><br>
Pláničkova 11, 162 00 Praha 6<u></u><u></u></span></p>
<p><span style="font-size:8.5pt;font-family:Arial,sans-serif;color:black">tel.: [+420] 274 783 239 | web: <a href="https://www.ami.cz" target="_blank">www.ami.cz</a><u></u><u></u></span></p>
<p style="margin-top:15pt"><span style="font-size:7.5pt;font-family:Verdana,sans-serif;color:black"><img border="0" id="gmail-m_-2662245941225955488_x0000_i1025" src="http://www.ami.cz/images/podpis/ami_logo.gif" alt="AMI Praha a.s."><u></u><u></u></span></p>
<p><span style="font-size:8.5pt;font-family:Arial,sans-serif;color:rgb(170,170,170)">Textem tohoto e‑mailu podepisující neslibuje uzavřít ani neuzavírá za společnost AMI Praha a.s.<br>
jakoukoliv smlouvu. Každá smlouva, pokud bude uzavřena, musí mít výhradně písemnou formu.<br>
</span><span style="font-size:4.5pt;font-family:Arial,sans-serif;color:rgb(170,170,170)"> </span><span style="font-size:8.5pt;font-family:Arial,sans-serif;color:rgb(170,170,170)"><br>
Tento e‑mail je určen výhradně pro potřeby jeho adresáta/ů a může obsahovat důvěrné nebo osobní<br>
informace. Nejste‑li zamýšleným příjemcem, je zakázáno jakékoliv zveřejňování, zprostředkování<br>
nebo jiné použití těchto informací. Pokud jste obdrželi e‑mail neoprávněně, informujte o tom prosím<br>
odesílatele a vymažte neprodleně všechny kopie tohoto e‑mailu včetně všech jeho příloh. Nakládáním<br>
s neoprávněně získanými informacemi se vystavujete riziku právního postihu.<u></u><u></u></span></p>
</div>
</div>
</div>
</div>
</div>
<div>
<p><span style="font-family:Arial;font-size:11px"><br></span></p><p><span style="font-family:Arial;font-size:11px">WWK Lebensversicherung a. G., Vorstand: Jürgen Schrameier (V.), Rainer Gebhart (stv. V.), Dirk Fassott; Vorsitzender des Aufsichtsrats: Dr. Frank Schindelhauer, Sitz München, Registergericht München HR B 211; WWK Allgemeine Versicherung AG, Vorstand: Jürgen Schrameier (V.), Rainer Gebhart (stv. V.), Dirk Fassott; Vorsitzender des Aufsichtsrats: Prof. Dr. Peter Reiff, Sitz München, Registergericht München HR B 5553; WWK Vermögensverwaltungs und Dienstleistungs GmbH, Geschäftsführer: Karl Ruffing, Stefan Sedlmeir, Sitz München, Registergericht München HR B 76323; WWK IT GmbH, Geschäftsführer: Erik Trump, Sitz München, Registergericht München HR B 257638; WWK Pensionsfonds AG, Vorstand: Karl Ruffing, Heinrich Schüppert, Georg Steinlein; Vorsitzender des Aufsichtsrats: Dirk Fassott, Sitz München, Registergericht München HR B 146295; Hausanschrift: Marsstraße 37, 80335 München; WWK Investment S.A., Verwaltungsrat: Karl Ruffing (V.), Stefan Bauer, Christoph Kraiker (Hauck & Aufhäuser), Handelsregister: R.C. Luxembourg Nr. B 81 270, Sitz der Gesellschaft: 1c, rue Gabriel Lippmann, L-5365 Munsbach</span></p>
</div></div>
_______________________________________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="https://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">https://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
</blockquote></div></div>