<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Hi Joshua,</p>
<p>it seem to be an error in your XML structure. <condition>
should look like this:</p>
<pre style="background-color:#2b2b2b;color:#a9b7c6;font-family:'JetBrains Mono',monospace;font-size:9,8pt;"><span style="color:#e8bf6a;"><condition>
</span><span style="color:#e8bf6a;"> <expression>
</span><span style="color:#e8bf6a;"> <script>
</span><span style="color:#e8bf6a;"> <code>...</span><span style="background-color:#364135;"></span><span style="color:#e8bf6a;"></code>
</span><span style="color:#e8bf6a;"> </script>
</span><span style="color:#e8bf6a;"> </expression>
</span><span style="color:#e8bf6a;"></condition>
</span><span style="color:#e8bf6a;"></span></pre>
<p>Hope that helps.</p>
<p>Marc</p>
<p><br>
</p>
<pre style="background-color:#2b2b2b;color:#a9b7c6;font-family:'JetBrains Mono',monospace;font-size:9,8pt;"><span style="color:#e8bf6a;"></span></pre>
<div class="moz-cite-prefix">Am 23.09.21 um 11:35 schrieb Joshua
Williams via midPoint:<br>
</div>
<blockquote type="cite"
cite="mid:77EFEE92-32F2-4516-8B3B-66A8E1B1A478@globalnaz.org">
<pre class="moz-quote-pre" wrap="">Good morning!
We have some users who are standard midpoint users and we have some users pulled from Active Directory. When I want to give a Role to a user, I have to use one MetaRole to write standard users to LDAP and I have to use another MetaRole to write the AD users to LDAP. The reason is the AD users require SASL Passthrough on the LDAP server, so the password data written is different between the two user groups.
Right now I have two Roles - Role_Standard.xml and Role_AD.xml. It would be nice to have one Role with a condition that uses the proper MetaRole to write to LDAP.
All AD users have “ad-user” in the organization attribute in midPoint, so it should be fairly straightforward (I would think). But it isn’t working.
I am trying to use an assignment to call the proper MetaRole. Here is what I have:
<!-- If user is AD, then this role is used to put them in the proper groups and
configure SASL Passthrough -->
<assignment>
<targetRef oid="68e686f4-df63-11eb-a318-00ff83f6b50b" type="RoleType"/>
<condition>
<script>
<code>basic.stringify(organization) == “ad-user"</code>
</script>
</condition>
</assignment>
</role>
</objects>
I am fairly new to MidPoint. I have googled and searched, but haven’t been able to find a solution. The Role will not import. Trying to import this particular version, I get “script has no definition.”
Do you have any suggestions for how to do the condition properly in a Role?
Thank you for your time.
Josh
_______________________________________________
midPoint mailing list
<a class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>
<a class="moz-txt-link-freetext" href="https://lists.evolveum.com/mailman/listinfo/midpoint">https://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<pre class="moz-signature" cols="72">--
Marc Füller
Consultant
DAASI International GmbH
Europaplatz 3
D-72072 Tübingen
Germany
phone: +49 7071 407109-0
fax: +49 7071 407109-9
email: <a class="moz-txt-link-abbreviated" href="mailto:marc.fueller@daasi.de">marc.fueller@daasi.de</a>
web: <a class="moz-txt-link-abbreviated" href="http://www.daasi.de">www.daasi.de</a>
Sitz der Gesellschaft: Tübingen
Registergericht: Amtsgericht Stuttgart, HRB 382175
Geschäftsleitung: Peter Gietz</pre>
</body>
</html>