<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"
"http://www.w3.org/TR/REC-html40/loose.dtd">
<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
<title></title>
</head>
<body style="font-family:Arial;font-size:14px">
<p>Solved!<br>
<br>
I can't use ri:trel_codigo because this attribute doesn´t exist in the XML configuration, the namespace/attribute used in the schemahandling is <ref>icfs:uid</ref><br>
So, I have tried <path>$projection/attributes/icfs:uid</path> and I have imported the role correctly.<br>
I am going the review the rest of import and export resources.<br>
<br>
Thank you very much for your help. Another thing done and learnt.<br>
Regards.<br>
<br>
<a href="mailto:midpoint-request@lists.evolveum.com">midpoint-request@lists.evolveum.com</a> escribió:</p>
<blockquote style="border-left:2px solid blue;margin-left:2px;padding-left:12px;" type="cite">
<p>Send midPoint mailing list submissions to<br>
<a href="mailto:midpoint@lists.evolveum.com">midpoint@lists.evolveum.com</a><br>
<br>
To subscribe or unsubscribe via the World Wide Web, visit<br>
<a href="https://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">https://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
or, via email, send a message with subject or body 'help' to<br>
<a href="mailto:midpoint-request@lists.evolveum.com">midpoint-request@lists.evolveum.com</a><br>
<br>
You can reach the person managing the list at<br>
<a href="mailto:midpoint-owner@lists.evolveum.com">midpoint-owner@lists.evolveum.com</a><br>
<br>
When replying, please edit your Subject line so it is more specific<br>
than "Re: Contents of midPoint digest..."<br>
<br>
<br>
Today's Topics:<br>
<br>
1. Re: Synchronizating roles between a database table and<br>
midPoint (Paulo Fernandes de Souza Junior)<br>
<br>
<br>
----------------------------------------------------------------------<br>
<br>
Message: 1<br>
Date: Fri, 11 Feb 2022 13:02:05 +0000<br>
From: Paulo Fernandes de Souza Junior <<a href="mailto:PFSJ@senado.leg.br">PFSJ@senado.leg.br</a>><br>
To: midPoint General Discussion <<a href="mailto:midpoint@lists.evolveum.com">midpoint@lists.evolveum.com</a>><br>
Subject: Re: [midPoint] Synchronizating roles between a database table<br>
and midPoint<br>
Message-ID: <<a href="mailto:1644584525084.10846@senado.leg.br">1644584525084.10846@senado.leg.br</a>><br>
Content-Type: text/plain; charset="iso-8859-1"<br>
<br>
In the schema handling I assign icfs:uid, which is associated with the primary key of the table (TREL_CODIGO) in the resource configuration, with the "name" attribute, so, both "uid" and "name" have the same value: TREL_CODIGO.<br>
<br>
On the other hand, I have tried this:<br>
<correlation><br>
<q:equal xmlns=""><br>
<q:path>name</q:path><br>
<expression><br>
<path>$projection/attributes/trel_codigo</path><br>
</expression><br>
</q:equal><br>
</correlation><br>
<br>
<br>
<br>
Try with <path>$projection/attributes/ri:trel_codigo</path><br>
<br>
<br>
Note the "ri:"<br>
<br>
<br>
<br>
Paulo Fernandes de Souza Júnior<br>
NQPPPS<br>
Senado Federal - PRODASEN<br>
Fone: 61 3303.3924<br>
<br>
<br>
________________________________<br>
De: midPoint <<a href="mailto:midpoint-bounces@lists.evolveum.com">midpoint-bounces@lists.evolveum.com</a>> em nome de MERCEDES ONCINA DELTELL via midPoint <<a href="mailto:midpoint@lists.evolveum.com">midpoint@lists.evolveum.com</a>><br>
Enviado: quinta-feira, 10 de fevereiro de 2022 17:50<br>
Para: <a href="mailto:midpoint@lists.evolveum.com">midpoint@lists.evolveum.com</a><br>
Cc: MERCEDES ONCINA DELTELL<br>
Assunto: Re: [midPoint] Synchronizating roles between a database table and midPoint<br>
<br>
<br>
In the schema handling I assign icfs:uid, which is associated with the primary key of the table (TREL_CODIGO) in the resource configuration, with the "name" attribute, so, both "uid" and "name" have the same value: TREL_CODIGO.<br>
<br>
On the other hand, I have tried this:<br>
<correlation><br>
<q:equal xmlns=""><br>
<q:path>name</q:path><br>
<expression><br>
<path>$projection/attributes/trel_codigo</path><br>
</expression><br>
</q:equal><br>
</correlation><br>
<br>
And I get the same error:<br>
Message: Could not import account shadow:b18c3e63-f2c5-461c-b6c0-27b91e0aa2bb(01)<br>
Error: No object class found for the shadow<br>
<br>
I admit that I don't really understand the variables that can be used inside the expression, I have seen $user, $focus and $projection, but I am not very sure when each one should be used.<br>
<br>
In the rest of the resources, I use $focus in the correlation expression, both for input and output resources and it runs fine.<br>
<br>
Thanks in advance.<br>
<br>
<br>
please check you correlation. In the path-Tag you need to refer to an<br>
attribute of the projection/account, not to an attribute of the focus<br>
object.<br>
<br>
You could try this:<br>
<br>
<correlation> <q:equal xmlns=""> <q:path>name</q:path> <expression> <path>$projection/attributes/<a href="ri:/TREL_CODIGO/" target="_blank">ri:/TREL_CODIGO/</a></path> </expression> </q:equal> </correlation><br>
<br>
<a href="mailto:midpoint-request@lists.evolveum.com">midpoint-request@lists.evolveum.com</a><mailto:<a href="mailto:midpoint-request@lists.evolveum.com>">midpoint-request@lists.evolveum.com></a> escribió:<br>
<br>
------------------------------<br>
<br>
Message: 2<br>
Date: Thu, 10 Feb 2022 14:14:51 +0100<br>
From: Mercedes Oncina Deltell <<a href="mailto:moncina@um.es">moncina@um.es</a><mailto:<a href="mailto:moncina@um.es>>">moncina@um.es>></a><br>
To: <a href="mailto:midpoint@lists.evolveum.com">midpoint@lists.evolveum.com</a><mailto:<a href="mailto:midpoint@lists.evolveum.com>">midpoint@lists.evolveum.com></a><br>
Subject: Re: [midPoint] Synchronizating roles between a database table<br>
and midPoint<br>
Message-ID: <<a href="mailto:7b623c6f-989c-1cd2-74ad-08e159063317@um.es">7b623c6f-989c-1cd2-74ad-08e159063317@um.es</a><mailto:<a href="mailto:7b623c6f-989c-1cd2-74ad-08e159063317@um.es>>">7b623c6f-989c-1cd2-74ad-08e159063317@um.es>></a><br>
Content-Type: text/plain; charset="utf-8"; Format="flowed"<br>
<br>
I have configured it as you wrote and I can see the entitlements from de<br>
resource in midPoint, but when I try to import them, I get the now<br>
familiar error:<br>
<br>
Message<br>
Could not import account shadow:b18c3e63-f2c5-461c-b6c0-27b91e0aa2bb(01)<br>
<br>
Error<br>
No object class found for the shadow<br>
<br>
My configuration is:<br>
<br>
/* <schemaHandling>*<br>
<objectType id="16"><br>
* <kind>entitlement</kind>**<br>
** <intent>default</intent>**<br>
** <default>true</default>**<br>
**<objectClass>ri:AccountObjectClass</objectClass>*<br>
<attribute id="17"><br>
<ref>icfs:uid</ref><br>
<tolerant>true</tolerant><br>
<inbound id="19"><br>
<authoritative>true</authoritative><br>
<exclusive>false</exclusive><br>
<strength>normal</strength><br>
<target><br>
<path>name</path><br>
</target><br>
</inbound><br>
</attribute><br>
<attribute id="18"><br>
<ref>ri:TREL_DESCRIPCION</ref><br>
<tolerant>true</tolerant><br>
<exclusiveStrong>false</exclusiveStrong><br>
<inbound id="20"><br>
<authoritative>true</authoritative><br>
<exclusive>false</exclusive><br>
<strength>normal</strength><br>
<target><br>
<path>displayName</path><br>
</target><br>
</inbound><br>
</attribute><br>
</objectType><br>
</schemaHandling><br>
* <synchronization>*<br>
<objectSynchronization><br>
<name>SynchroRoles</name><br>
*<objectClass>AccountObjectClass</objectClass>**<br>
** <kind>entitlement</kind>**<br>
** <intent>default</intent>**<br>
**<focusType>c:RoleType</focusType>**<br>
** <enabled>true</enabled>*<br>
* <correlation>*<br>
<q:equal xmlns=""><br>
<q:path>name</q:path><br>
<expression xmlns=""><br>
<path>$focus/attributes/trel_codigo</path><br>
</expression><br>
</q:equal><br>
<q:description>CheckUIDwithCODIGO</q:description><br>
</correlation><br>
<reconcile>false</reconcile><br>
<reaction><br>
<situation>deleted</situation><br>
<synchronize>true</synchronize><br>
<action><br>
<handlerUri><a href="http://midpoint.evolveum.com/xml/ns/public/model/action-3#unlink" target="_blank">http://midpoint.evolveum.com/xml/ns/public/model/action-3#unlink</a></handlerUri><br>
</action><br>
</reaction><br>
<reaction><br>
<situation>linked</situation><br>
<synchronize>true</synchronize><br>
<reconcile>false</reconcile><br>
</reaction><br>
<reaction><br>
<situation>unlinked</situation><br>
<synchronize>true</synchronize><br>
<action><br>
<handlerUri><a href="http://midpoint.evolveum.com/xml/ns/public/model/action-3#link" target="_blank">http://midpoint.evolveum.com/xml/ns/public/model/action-3#link</a></handlerUri><br>
</action><br>
</reaction><br>
<reaction><br>
<situation>unmatched</situation><br>
<synchronize>true</synchronize><br>
<reconcile>false</reconcile><br>
<action><br>
<handlerUri><a href="http://midpoint.evolveum.com/xml/ns/public/model/action-3#addFocus" target="_blank">http://midpoint.evolveum.com/xml/ns/public/model/action-3#addFocus</a></handlerUri><br>
</action><br>
</reaction><br>
</objectSynchronization><br>
</synchronization>/<br>
<br>
The Oracle table is:<br>
<br>
/CREATE TABLE TIPO_RELACIONES<br>
(<br>
TREL_CODIGO VARCHAR2(2 BYTE),<br>
TREL_DESCRIPCION VARCHAR2(60 BYTE),<br>
TREL_UNIVERSITARIO VARCHAR2(1 BYTE),<br>
TREL_PRIORIDAD NUMBER(2),<br>
TREL_DURACION DATE,<br>
TREL_MESES NUMBER(4),<br>
TREL_TIPO_DURACION VARCHAR2(1 BYTE),<br>
TREL_VIGENTE VARCHAR2(1 BYTE),<br>
TREL_RESPONSABLE VARCHAR2(8 BYTE),<br>
TREL_TIPO_EMAIL VARCHAR2(1 BYTE),<br>
TREL_EXTERNO VARCHAR2(1 BYTE)<br>
)/<br>
<br>
I only want it for importing and synchronizing data into midPoint (inbound).<br>
<br>
<br>
El 10/02/2022 a las 12:00, <a href="mailto:midpoint-request@lists.evolveum.com">midpoint-request@lists.evolveum.com</a><mailto:<a href="mailto:midpoint-request@lists.evolveum.com>">midpoint-request@lists.evolveum.com></a> escribió:<br>
<br>
<schemaHandling> <objectType> <objectClass>ri:AccountObjectClass</objectClass> <default>true</default> <kind>*entitlement*</kind> <intent>default</intent> ...<br>
<synchronization> <objectSynchronization> <objectClass>AccountObjectClass</objectClass> <kind>*entitlement*</kind> <intent>default</intent> <focusType>RoleType</focusType> <enabled>true</enabled><br>
<br>
...<br>
<br>
--<br>
Mercedes Oncina Deltell<br>
Servicio de Infraestructuras TICS<br>
ATICA - Universidad de Murcia<br>
Telf: +34 868881983<br>
-------------- next part --------------<br>
An HTML attachment was scrubbed...<br>
URL: <<a href="https://lists.evolveum.com/pipermail/midpoint/attachments/20220210/51943c85/attachment-0001.htm" target="_blank">https://lists.evolveum.com/pipermail/midpoint/attachments/20220210/51943c85/attachment-0001.htm</a>><br>
<br>
------------------------------<br>
<br>
Message: 3<br>
Date: Thu, 10 Feb 2022 16:46:51 +0100<br>
From: Marc Fueller <<a href="mailto:marc.fueller@daasi.de">marc.fueller@daasi.de</a><mailto:<a href="mailto:marc.fueller@daasi.de>>">marc.fueller@daasi.de>></a><br>
To: Mercedes Oncina Deltell via midPoint <<a href="mailto:midpoint@lists.evolveum.com">midpoint@lists.evolveum.com</a><mailto:<a href="mailto:midpoint@lists.evolveum.com>>">midpoint@lists.evolveum.com>></a><br>
Subject: Re: [midPoint] Synchronizating roles between a database table<br>
and midPoint<br>
Message-ID: <<a href="mailto:831e49ab-7b01-c992-9916-ec01841df301@daasi.de">831e49ab-7b01-c992-9916-ec01841df301@daasi.de</a><mailto:<a href="mailto:831e49ab-7b01-c992-9916-ec01841df301@daasi.de>>">831e49ab-7b01-c992-9916-ec01841df301@daasi.de>></a><br>
Content-Type: text/plain; charset="utf-8"; Format="flowed"<br>
<br>
Hi,<br>
<br>
please check you correlation. In the path-Tag you need to refer to an<br>
attribute of the projection/account, not to an attribute of the focus<br>
object.<br>
<br>
You could try this:<br>
<br>
<correlation> <q:equal xmlns=""> <q:path>name</q:path> <expression> <path>$projection/attributes/<a href="ri:/TREL_CODIGO/" target="_blank">ri:/TREL_CODIGO/</a></path> </expression> </q:equal> </correlation><br>
<br>
<br>
You also need to make sure that you are also mapping TREL_CODIGO to the<br>
midPoint "name" property in the schema handling.<br>
<br>
HTH<br>
<br>
Marc<br>
<br>
<br>
Am 10.02.22 um 14:14 schrieb Mercedes Oncina Deltell via midPoint:<br>
<br>
I have configured it as you wrote and I can see the entitlements from<br>
de resource in midPoint, but when I try to import them, I get the now<br>
familiar error:<br>
<br>
Message<br>
Could not import account<br>
shadow:b18c3e63-f2c5-461c-b6c0-27b91e0aa2bb(01)<br>
<br>
Error<br>
No object class found for the shadow<br>
<br>
My configuration is:<br>
<br>
/* <schemaHandling>*<br>
<objectType id="16"><br>
* <kind>entitlement</kind>**<br>
** <intent>default</intent>**<br>
** <default>true</default>**<br>
**<objectClass>ri:AccountObjectClass</objectClass>*<br>
<attribute id="17"><br>
<ref>icfs:uid</ref><br>
<tolerant>true</tolerant><br>
<inbound id="19"><br>
<authoritative>true</authoritative><br>
<exclusive>false</exclusive><br>
<strength>normal</strength><br>
<target><br>
<path>name</path><br>
</target><br>
</inbound><br>
</attribute><br>
<attribute id="18"><br>
<ref>ri:TREL_DESCRIPCION</ref><br>
<tolerant>true</tolerant><br>
<exclusiveStrong>false</exclusiveStrong><br>
<inbound id="20"><br>
<authoritative>true</authoritative><br>
<exclusive>false</exclusive><br>
<strength>normal</strength><br>
<target><br>
<path>displayName</path><br>
</target><br>
</inbound><br>
</attribute><br>
</objectType><br>
</schemaHandling><br>
* <synchronization>*<br>
<objectSynchronization><br>
<name>SynchroRoles</name><br>
*<objectClass>AccountObjectClass</objectClass>**<br>
** <kind>entitlement</kind>**<br>
** <intent>default</intent>**<br>
**<focusType>c:RoleType</focusType>**<br>
** <enabled>true</enabled>*<br>
* <correlation>*<br>
<q:equal xmlns=""><br>
<q:path>name</q:path><br>
<expression xmlns=""><br>
<path>$focus/attributes/trel_codigo</path><br>
</expression><br>
</q:equal><br>
<q:description>CheckUIDwithCODIGO</q:description><br>
</correlation><br>
<reconcile>false</reconcile><br>
<reaction><br>
<situation>deleted</situation><br>
<synchronize>true</synchronize><br>
<action><br>
<handlerUri><a href="http://midpoint.evolveum.com/xml/ns/public/model/action-3#unlink" target="_blank">http://midpoint.evolveum.com/xml/ns/public/model/action-3#unlink</a></handlerUri><br>
</action><br>
</reaction><br>
<reaction><br>
<situation>linked</situation><br>
<synchronize>true</synchronize><br>
<reconcile>false</reconcile><br>
</reaction><br>
<reaction><br>
<situation>unlinked</situation><br>
<synchronize>true</synchronize><br>
<action><br>
<handlerUri><a href="http://midpoint.evolveum.com/xml/ns/public/model/action-3#link" target="_blank">http://midpoint.evolveum.com/xml/ns/public/model/action-3#link</a></handlerUri><br>
</action><br>
</reaction><br>
<reaction><br>
<situation>unmatched</situation><br>
<synchronize>true</synchronize><br>
<reconcile>false</reconcile><br>
<action><br>
<handlerUri><a href="http://midpoint.evolveum.com/xml/ns/public/model/action-3#addFocus" target="_blank">http://midpoint.evolveum.com/xml/ns/public/model/action-3#addFocus</a></handlerUri><br>
</action><br>
</reaction><br>
</objectSynchronization><br>
</synchronization>/<br>
<br>
The Oracle table is:<br>
<br>
/CREATE TABLE TIPO_RELACIONES<br>
(<br>
TREL_CODIGO VARCHAR2(2 BYTE),<br>
TREL_DESCRIPCION VARCHAR2(60 BYTE),<br>
TREL_UNIVERSITARIO VARCHAR2(1 BYTE),<br>
TREL_PRIORIDAD NUMBER(2),<br>
TREL_DURACION DATE,<br>
TREL_MESES NUMBER(4),<br>
TREL_TIPO_DURACION VARCHAR2(1 BYTE),<br>
TREL_VIGENTE VARCHAR2(1 BYTE),<br>
TREL_RESPONSABLE VARCHAR2(8 BYTE),<br>
TREL_TIPO_EMAIL VARCHAR2(1 BYTE),<br>
TREL_EXTERNO VARCHAR2(1 BYTE)<br>
)/<br>
<br>
I only want it for importing and synchronizing data into midPoint<br>
(inbound).<br>
<br>
<br>
El 10/02/2022 a las 12:00, <a href="mailto:midpoint-request@lists.evolveum.com">midpoint-request@lists.evolveum.com</a><mailto:<a href="mailto:midpoint-request@lists.evolveum.com>">midpoint-request@lists.evolveum.com></a> escribió:<br>
<br>
<schemaHandling> <objectType> <objectClass>ri:AccountObjectClass</objectClass> <default>true</default> <kind>*entitlement*</kind> <intent>default</intent> ...<br>
<synchronization> <objectSynchronization> <objectClass>AccountObjectClass</objectClass> <kind>*entitlement*</kind> <intent>default</intent> <focusType>RoleType</focusType> <enabled>true</enabled><br>
<br>
...<br>
<br>
--<br>
Mercedes Oncina Deltell<br>
Servicio de Infraestructuras TICS<br>
ATICA - Universidad de Murcia<br>
Telf: +34 868881983<br>
<br>
_______________________________________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a><mailto:<a href="mailto:midPoint@lists.evolveum.com>">midPoint@lists.evolveum.com></a><br>
<a href="https://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">https://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
--<br>
Marc Füller<br>
Consultant<br>
<br>
DAASI International GmbH<br>
Europaplatz 3<br>
D-72072 Tübingen<br>
Germany<br>
<br>
phone: +49 7071 407109-0<br>
fax: +49 7071 407109-9<br>
email:marc.fueller@daasi.de<br>
web:<a href="http://www.daasi.de" target="_blank">www.daasi.de</a><<a href="http://www.daasi.de" target="_blank">http://www.daasi.de</a>><br>
Sitz der Gesellschaft: Tübingen<br>
Registergericht: Amtsgericht Stuttgart, HRB 382175<br>
Geschäftsleitung: Peter Gietz<br>
-------------- next part --------------<br>
An HTML attachment was scrubbed...<br>
URL: <<a href="https://lists.evolveum.com/pipermail/midpoint/attachments/20220210/6cf285e3/attachment.htm" target="_blank">https://lists.evolveum.com/pipermail/midpoint/attachments/20220210/6cf285e3/attachment.htm</a>><br>
<br>
------------------------------<br>
<br>
Subject: Digest Footer<br>
<br>
_______________________________________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a><mailto:<a href="mailto:midPoint@lists.evolveum.com>">midPoint@lists.evolveum.com></a><br>
<a href="https://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">https://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
<br>
<br>
------------------------------<br>
<br>
End of midPoint Digest, Vol 118, Issue 19*****************************************<br>
<br>
<br>
-------------- next part --------------<br>
An HTML attachment was scrubbed...<br>
URL: <<a href="https://lists.evolveum.com/pipermail/midpoint/attachments/20220211/0fc8d43e/attachment.htm" target="_blank">https://lists.evolveum.com/pipermail/midpoint/attachments/20220211/0fc8d43e/attachment.htm</a>><br>
<br>
------------------------------<br>
<br>
Subject: Digest Footer<br>
<br>
_______________________________________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a><br>
<a href="https://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">https://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
<br>
<br>
------------------------------<br>
<br>
End of midPoint Digest, Vol 118, Issue 24*****************************************</p>
</blockquote>
<p><br>
<br></p>
</body>
</html>