<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Hi,</p>
<p>I'm not sure, because it was a long time ago, but (maybe) your
problem seems to be familiar...</p>
<p>Some of <b>accounts of one of my LDAP were not symetric</b>, i.e
<b>some LDAP accounts didn't use/have all the objectClass that are
listed in your</b> <b>midPoint</b> <b>auxiliaryObjectClass</b><span
style="font-size:10.0pt;font-family:"Courier
New";color:black;mso-fareast-language:DE-CH" lang="EN-US"><span
style="background:#EFEFEF"></span></span><b><span
style="font-size:10.0pt;font-family:"Courier
New";color:navy;background:#EFEFEF;mso-fareast-language:DE-CH"
lang="EN-US"></span></b>.</p>
<p>If the missing objectClass occurs in one LDAP account then
midpoint try to access and add the objectClass in the LDAP schema
account, even if the concerned LDAP attribute of the objectClass
is null (not used) : your error is something like
"add:objectClass=ipaSshUser insufficientAccessRights: Insufficient
'write' privilege to the 'objectClass' attribute "...<br>
</p>
<p>I solved my problem this way (by taking control on missing
attributes/objectClasses and I can access to account with or
without missing objectClass in LDAP account schema) :<br>
</p>
<pre style="background-color:#ffffff;color:#080808;font-family:'JetBrains Mono',monospace;font-size:9,8pt;"><<span style="color:#0033b3;">auxiliaryObjectClassMappings</span>>
<<span style="color:#0033b3;">tolerant</span>>true</<span style="color:#0033b3;">tolerant</span>>
</pre>
<p></p>
<pre style="background-color:#ffffff;color:#080808;font-family:'JetBrains Mono',monospace;font-size:9,8pt;"> <inbound>
<!--
<b>Remove "<auxiliaryObjectClass>ri:ipaSshUser</auxiliaryObjectClass>" in your declaration.</b>
I don't remember exactly but I think if you use "source" on missing LDAP objectClass it's going to explode.
Better use groovy code and basic.getAttributeValues(projection, 'attributeIn_<span style="font-size:10.0pt;font-family:"Verdana",sans-serif;mso-fareast-language:EN-US" lang="EN-US">ipaSshUser_Class</span>') that send you null.
relativityMode helps is LDAP attribute is multi valued.
Be careful relativityMode always gives you tabular even if monovalued
-->
<!--source>
<c:path>$c:projection/c:attributes/<span style="font-size:10.0pt;font-family:"Verdana",sans-serif;mso-fareast-language:EN-US" lang="EN-US">ipaSshUser</span></c:path>
</source-->
<expression>
<script>
<relativityMode>absolute</relativityMode>
<code>
myVar = basic.getAttributeValues(projection, 'attributeIn_<span style="font-size:10.0pt;font-family:"Verdana",sans-serif;mso-fareast-language:EN-US" lang="EN-US">ipaSshUser</span>_Class')
if(!basic.isEmpty(myVar)) {
// bla bla
this.binding.variables.each {k,v -> log.info("-------> {} = {}", k, v)};
}
// if <span style="font-size:10.0pt;font-family:"Verdana",sans-serif;mso-fareast-language:EN-US" lang="EN-US">ipaSshUser</span> is not there
return null
</code>
</script>
</expression>
<target>
<path>$focus/</path>
</target>
</inbound>
</<span style="color:#0033b3;">auxiliaryObjectClassMappings</span>>
Hope it's your problem :)
Best regards
-------
<b>Pascal PÉRICHON</b>
Direction des systèmes d'information et du numérique
Université Paris Cité
Le 24/11/2022 à 15:08, Patrik Sidler via midPoint a écrit :
</pre>
<blockquote type="cite"
cite="mid:GVAP278MB023199D4C1FA75F4A97981E4EF0F9@GVAP278MB0231.CHEP278.PROD.OUTLOOK.COM">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<meta name="Generator" content="Microsoft Word 15 (filtered
medium)">
<style>@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}@font-face
{font-family:Verdana;
panose-1:2 11 6 4 3 5 4 4 2 4;}p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}pre
{mso-style-priority:99;
mso-style-link:"HTML Vorformatiert Zchn";
margin:0cm;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";}span.E-MailFormatvorlage17
{mso-style-type:personal-compose;
font-family:"Verdana",sans-serif;
color:windowtext;}span.HTMLVorformatiertZchn
{mso-style-name:"HTML Vorformatiert Zchn";
mso-style-priority:99;
mso-style-link:"HTML Vorformatiert";
font-family:"Courier New";
mso-fareast-language:DE-CH;}.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}div.WordSection1
{page:WordSection1;}</style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1">
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Verdana",sans-serif">Hi
All,<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Verdana",sans-serif"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Verdana",sans-serif"
lang="EN-US">I am having a problem, configuring the
auxiliaryObjectClass on my LDAP Connector (Version 3.5)
running on midPoint 4.6.<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Verdana",sans-serif"
lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Verdana",sans-serif"
lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Verdana",sans-serif"
lang="EN-US">The configuration midPoint 4.4.3 (LDAP
Connector) worked perfect:<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Verdana",sans-serif"
lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal" style="background:white"><span
style="font-size:10.0pt;font-family:"Courier
New";color:black;background:#EFEFEF;mso-fareast-language:DE-CH"
lang="EN-US"><</span><b><span
style="font-size:10.0pt;font-family:"Courier
New";color:navy;background:#EFEFEF;mso-fareast-language:DE-CH"
lang="EN-US">objectClass</span></b><span
style="font-size:10.0pt;font-family:"Courier
New";color:black;background:#EFEFEF;mso-fareast-language:DE-CH"
lang="EN-US">></span><span
style="font-size:10.0pt;font-family:"Courier
New";color:black;mso-fareast-language:DE-CH"
lang="EN-US">ri:inetOrgPerson<span
style="background:#EFEFEF"></</span></span><b><span
style="font-size:10.0pt;font-family:"Courier
New";color:navy;background:#EFEFEF;mso-fareast-language:DE-CH"
lang="EN-US">objectClass</span></b><span
style="font-size:10.0pt;font-family:"Courier
New";color:black;background:#EFEFEF;mso-fareast-language:DE-CH"
lang="EN-US">></span><span
style="font-size:10.0pt;font-family:"Courier
New";color:black;mso-fareast-language:DE-CH"
lang="EN-US"><br>
<span style="background:#EFEFEF"><</span></span><b><span
style="font-size:10.0pt;font-family:"Courier
New";color:navy;background:#EFEFEF;mso-fareast-language:DE-CH"
lang="EN-US">auxiliaryObjectClass</span></b><span
style="font-size:10.0pt;font-family:"Courier
New";color:black;background:#EFEFEF;mso-fareast-language:DE-CH"
lang="EN-US">></span><span
style="font-size:10.0pt;font-family:"Courier
New";color:black;mso-fareast-language:DE-CH"
lang="EN-US">ri:ipaObject<span style="background:#EFEFEF"></</span></span><b><span
style="font-size:10.0pt;font-family:"Courier
New";color:navy;background:#EFEFEF;mso-fareast-language:DE-CH"
lang="EN-US">auxiliaryObjectClass</span></b><span
style="font-size:10.0pt;font-family:"Courier
New";color:black;background:#EFEFEF;mso-fareast-language:DE-CH"
lang="EN-US">></span><span
style="font-size:10.0pt;font-family:"Courier
New";color:black;mso-fareast-language:DE-CH"
lang="EN-US"><br>
<span style="background:#EFEFEF"><</span></span><b><span
style="font-size:10.0pt;font-family:"Courier
New";color:navy;background:#EFEFEF;mso-fareast-language:DE-CH"
lang="EN-US">auxiliaryObjectClass</span></b><span
style="font-size:10.0pt;font-family:"Courier
New";color:black;background:#EFEFEF;mso-fareast-language:DE-CH"
lang="EN-US">></span><span
style="font-size:10.0pt;font-family:"Courier
New";color:black;mso-fareast-language:DE-CH"
lang="EN-US">ri:iamUser<span style="background:#EFEFEF"></</span></span><b><span
style="font-size:10.0pt;font-family:"Courier
New";color:navy;background:#EFEFEF;mso-fareast-language:DE-CH"
lang="EN-US">auxiliaryObjectClass</span></b><span
style="font-size:10.0pt;font-family:"Courier
New";color:black;background:#EFEFEF;mso-fareast-language:DE-CH"
lang="EN-US">></span><span
style="font-size:10.0pt;font-family:"Courier
New";color:black;mso-fareast-language:DE-CH"
lang="EN-US"><br>
<span style="background:#EFEFEF"><</span></span><b><span
style="font-size:10.0pt;font-family:"Courier
New";color:navy;background:#EFEFEF;mso-fareast-language:DE-CH"
lang="EN-US">auxiliaryObjectClass</span></b><span
style="font-size:10.0pt;font-family:"Courier
New";color:black;background:#EFEFEF;mso-fareast-language:DE-CH"
lang="EN-US">></span><span
style="font-size:10.0pt;font-family:"Courier
New";color:black;mso-fareast-language:DE-CH"
lang="EN-US">ri:inetUser<span style="background:#EFEFEF"></</span></span><b><span
style="font-size:10.0pt;font-family:"Courier
New";color:navy;background:#EFEFEF;mso-fareast-language:DE-CH"
lang="EN-US">auxiliaryObjectClass</span></b><span
style="font-size:10.0pt;font-family:"Courier
New";color:black;background:#EFEFEF;mso-fareast-language:DE-CH"
lang="EN-US">></span><span
style="font-size:10.0pt;font-family:"Courier
New";color:black;mso-fareast-language:DE-CH"
lang="EN-US"><br>
<span style="background:#EFEFEF"><</span></span><b><span
style="font-size:10.0pt;font-family:"Courier
New";color:navy;background:#EFEFEF;mso-fareast-language:DE-CH"
lang="EN-US">auxiliaryObjectClass</span></b><span
style="font-size:10.0pt;font-family:"Courier
New";color:black;background:#EFEFEF;mso-fareast-language:DE-CH"
lang="EN-US">></span><span
style="font-size:10.0pt;font-family:"Courier
New";color:black;mso-fareast-language:DE-CH"
lang="EN-US">ri:ipaSshUser<span style="background:#EFEFEF"></</span></span><b><span
style="font-size:10.0pt;font-family:"Courier
New";color:navy;background:#EFEFEF;mso-fareast-language:DE-CH"
lang="EN-US">auxiliaryObjectClass</span></b><span
style="font-size:10.0pt;font-family:"Courier
New";color:black;background:#EFEFEF;mso-fareast-language:DE-CH"
lang="EN-US">></span><span
style="font-size:10.0pt;font-family:"Courier
New";color:black;mso-fareast-language:DE-CH"
lang="EN-US"><br>
<span style="background:#EFEFEF"><</span></span><b><span
style="font-size:10.0pt;font-family:"Courier
New";color:navy;background:#EFEFEF;mso-fareast-language:DE-CH"
lang="EN-US">auxiliaryObjectClass</span></b><span
style="font-size:10.0pt;font-family:"Courier
New";color:black;background:#EFEFEF;mso-fareast-language:DE-CH"
lang="EN-US">></span><span
style="font-size:10.0pt;font-family:"Courier
New";color:black;mso-fareast-language:DE-CH"
lang="EN-US">ri:krbTicketPolicyAux<span
style="background:#EFEFEF"></</span></span><b><span
style="font-size:10.0pt;font-family:"Courier
New";color:navy;background:#EFEFEF;mso-fareast-language:DE-CH"
lang="EN-US">auxiliaryObjectClass</span></b><span
style="font-size:10.0pt;font-family:"Courier
New";color:black;background:#EFEFEF;mso-fareast-language:DE-CH"
lang="EN-US">></span><span
style="font-size:10.0pt;font-family:"Courier
New";color:black;mso-fareast-language:DE-CH"
lang="EN-US"><br>
<span style="background:#EFEFEF"><</span></span><b><span
style="font-size:10.0pt;font-family:"Courier
New";color:navy;background:#EFEFEF;mso-fareast-language:DE-CH"
lang="EN-US">auxiliaryObjectClass</span></b><span
style="font-size:10.0pt;font-family:"Courier
New";color:black;background:#EFEFEF;mso-fareast-language:DE-CH"
lang="EN-US">></span><span
style="font-size:10.0pt;font-family:"Courier
New";color:black;mso-fareast-language:DE-CH"
lang="EN-US">ri:krbPrincipalAux<span
style="background:#EFEFEF"></</span></span><b><span
style="font-size:10.0pt;font-family:"Courier
New";color:navy;background:#EFEFEF;mso-fareast-language:DE-CH"
lang="EN-US">auxiliaryObjectClass</span></b><span
style="font-size:10.0pt;font-family:"Courier
New";color:black;background:#EFEFEF;mso-fareast-language:DE-CH"
lang="EN-US">></span><span
style="font-size:10.0pt;font-family:"Courier
New";color:black;mso-fareast-language:DE-CH"
lang="EN-US"><br>
<span style="background:#EFEFEF"><</span></span><b><span
style="font-size:10.0pt;font-family:"Courier
New";color:navy;background:#EFEFEF;mso-fareast-language:DE-CH"
lang="EN-US">auxiliaryObjectClass</span></b><span
style="font-size:10.0pt;font-family:"Courier
New";color:black;background:#EFEFEF;mso-fareast-language:DE-CH"
lang="EN-US">></span><span
style="font-size:10.0pt;font-family:"Courier
New";color:black;mso-fareast-language:DE-CH"
lang="EN-US">ri:aspectraUser<span style="background:#EFEFEF"></</span></span><b><span
style="font-size:10.0pt;font-family:"Courier
New";color:navy;background:#EFEFEF;mso-fareast-language:DE-CH"
lang="EN-US">auxiliaryObjectClass</span></b><span
style="font-size:10.0pt;font-family:"Courier
New";color:black;background:#EFEFEF;mso-fareast-language:DE-CH"
lang="EN-US">></span><span
style="font-size:10.0pt;font-family:"Courier
New";color:black;mso-fareast-language:DE-CH"
lang="EN-US"><br>
<span style="background:#EFEFEF"><</span></span><b><span
style="font-size:10.0pt;font-family:"Courier
New";color:navy;background:#EFEFEF;mso-fareast-language:DE-CH"
lang="EN-US">auxiliaryObjectClass</span></b><span
style="font-size:10.0pt;font-family:"Courier
New";color:black;background:#EFEFEF;mso-fareast-language:DE-CH"
lang="EN-US">></span><span
style="font-size:10.0pt;font-family:"Courier
New";color:black;mso-fareast-language:DE-CH"
lang="EN-US">ri:posixAccount<span style="background:#EFEFEF"></</span></span><b><span
style="font-size:10.0pt;font-family:"Courier
New";color:navy;background:#EFEFEF;mso-fareast-language:DE-CH"
lang="EN-US">auxiliaryObjectClass</span></b><span
style="font-size:10.0pt;font-family:"Courier
New";color:black;background:#EFEFEF;mso-fareast-language:DE-CH"
lang="EN-US">></span><span
style="font-size:10.0pt;font-family:"Courier
New";color:black;mso-fareast-language:DE-CH"
lang="EN-US"><br>
<span style="background:#EFEFEF"><</span></span><b><span
style="font-size:10.0pt;font-family:"Courier
New";color:navy;background:#EFEFEF;mso-fareast-language:DE-CH"
lang="EN-US">auxiliaryObjectClass</span></b><span
style="font-size:10.0pt;font-family:"Courier
New";color:black;background:#EFEFEF;mso-fareast-language:DE-CH"
lang="EN-US">></span><span
style="font-size:10.0pt;font-family:"Courier
New";color:black;mso-fareast-language:DE-CH"
lang="EN-US">ri:ipaNTUserAttrs<span
style="background:#EFEFEF"></</span></span><b><span
style="font-size:10.0pt;font-family:"Courier
New";color:navy;background:#EFEFEF;mso-fareast-language:DE-CH"
lang="EN-US">auxiliaryObjectClass</span></b><span
style="font-size:10.0pt;font-family:"Courier
New";color:black;background:#EFEFEF;mso-fareast-language:DE-CH"
lang="EN-US">></span><span
style="font-size:10.0pt;font-family:"Courier
New";color:black;mso-fareast-language:DE-CH"
lang="EN-US"><br>
<span style="background:#EFEFEF"><</span></span><b><span
style="font-size:10.0pt;font-family:"Courier
New";color:navy;background:#EFEFEF;mso-fareast-language:DE-CH"
lang="EN-US">auxiliaryObjectClassMappings</span></b><span
style="font-size:10.0pt;font-family:"Courier
New";color:black;background:#EFEFEF;mso-fareast-language:DE-CH"
lang="EN-US">></span><span
style="font-size:10.0pt;font-family:"Courier
New";color:black;mso-fareast-language:DE-CH"
lang="EN-US"><br>
<span style="background:#EFEFEF"><</span></span><b><span
style="font-size:10.0pt;font-family:"Courier
New";color:navy;background:#EFEFEF;mso-fareast-language:DE-CH"
lang="EN-US">tolerant</span></b><span
style="font-size:10.0pt;font-family:"Courier
New";color:black;background:#EFEFEF;mso-fareast-language:DE-CH"
lang="EN-US">></span><span
style="font-size:10.0pt;font-family:"Courier
New";color:black;mso-fareast-language:DE-CH"
lang="EN-US">true<span style="background:#EFEFEF"></</span></span><b><span
style="font-size:10.0pt;font-family:"Courier
New";color:navy;background:#EFEFEF;mso-fareast-language:DE-CH"
lang="EN-US">tolerant</span></b><span
style="font-size:10.0pt;font-family:"Courier
New";color:black;background:#EFEFEF;mso-fareast-language:DE-CH"
lang="EN-US">></span><span
style="font-size:10.0pt;font-family:"Courier
New";color:black;mso-fareast-language:DE-CH"
lang="EN-US"><br>
<span style="background:#EFEFEF"></</span></span><b><span
style="font-size:10.0pt;font-family:"Courier
New";color:navy;background:#EFEFEF;mso-fareast-language:DE-CH"
lang="EN-US">auxiliaryObjectClassMappings</span></b><span
style="font-size:10.0pt;font-family:"Courier
New";color:black;background:#EFEFEF;mso-fareast-language:DE-CH"
lang="EN-US">></span><span
style="font-size:10.0pt;font-family:"Courier
New";color:black;mso-fareast-language:DE-CH"
lang="EN-US"><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Verdana",sans-serif"
lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Verdana",sans-serif"
lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Verdana",sans-serif"
lang="EN-US">With midPoint 4.6 and LDAP Connector 3.5, the
configuration looks the following:<o:p></o:p></span></p>
<pre style="background:white"><span style="color:black;background:#EFEFEF" lang="EN-US"><</span><b><span style="color:navy;background:#EFEFEF" lang="EN-US">objectType </span></b><b><span style="color:blue;background:#EFEFEF" lang="EN-US">id</span></b><b><span style="color:green;background:#EFEFEF" lang="EN-US">="4"</span></b><span style="color:black;background:#EFEFEF" lang="EN-US">></span><span style="color:black" lang="EN-US">
<span style="background:#EFEFEF"><</span></span><b><span style="color:navy;background:#EFEFEF" lang="EN-US">kind</span></b><span style="color:black;background:#EFEFEF" lang="EN-US">></span><span style="color:black" lang="EN-US">account<span style="background:#EFEFEF"></</span></span><b><span style="color:navy;background:#EFEFEF" lang="EN-US">kind</span></b><span style="color:black;background:#EFEFEF" lang="EN-US">></span><span style="color:black" lang="EN-US">
<span style="background:#EFEFEF"><</span></span><b><span style="color:navy;background:#EFEFEF" lang="EN-US">intent</span></b><span style="color:black;background:#EFEFEF" lang="EN-US">></span><span style="color:black" lang="EN-US">ldapAccount<span style="background:#EFEFEF"></</span></span><b><span style="color:navy;background:#EFEFEF" lang="EN-US">intent</span></b><span style="color:black;background:#EFEFEF" lang="EN-US">></span><span style="color:black" lang="EN-US">
<span style="background:#EFEFEF"><</span></span><b><span style="color:navy;background:#EFEFEF" lang="EN-US">displayName</span></b><span style="color:black;background:#EFEFEF" lang="EN-US">></span><span style="color:black" lang="EN-US">LDAP Account<span style="background:#EFEFEF"></</span></span><b><span style="color:navy;background:#EFEFEF" lang="EN-US">displayName</span></b><span style="color:black;background:#EFEFEF" lang="EN-US">></span><span style="color:black" lang="EN-US">
<span style="background:#EFEFEF"><</span></span><b><span style="color:navy;background:#EFEFEF" lang="EN-US">default</span></b><span style="color:black;background:#EFEFEF" lang="EN-US">></span><span style="color:black" lang="EN-US">true<span style="background:#EFEFEF"></</span></span><b><span style="color:navy;background:#EFEFEF" lang="EN-US">default</span></b><span style="color:black;background:#EFEFEF" lang="EN-US">></span><span style="color:black" lang="EN-US">
<span style="background:#EFEFEF"><</span></span><b><span style="color:navy;background:#EFEFEF" lang="EN-US">delineation</span></b><span style="color:black;background:#EFEFEF" lang="EN-US">></span><span style="color:black" lang="EN-US">
<span style="background:#EFEFEF"><</span></span><b><span style="color:navy;background:#EFEFEF" lang="EN-US">objectClass</span></b><span style="color:black;background:#EFEFEF" lang="EN-US">></span><span style="color:black" lang="EN-US">ri:inetOrgPerson<span style="background:#EFEFEF"></</span></span><b><span style="color:navy;background:#EFEFEF" lang="EN-US">objectClass</span></b><span style="color:black;background:#EFEFEF" lang="EN-US">></span><span style="color:black" lang="EN-US">
<span style="background:#EFEFEF"><</span></span><b><span style="color:navy;background:#EFEFEF" lang="EN-US">auxiliaryObjectClass</span></b><span style="color:black;background:#EFEFEF" lang="EN-US">></span><span style="color:black" lang="EN-US">ri:ipaObject<span style="background:#EFEFEF"></</span></span><b><span style="color:navy;background:#EFEFEF" lang="EN-US">auxiliaryObjectClass</span></b><span style="color:black;background:#EFEFEF" lang="EN-US">></span><span style="color:black" lang="EN-US">
<span style="background:#EFEFEF"><</span></span><b><span style="color:navy;background:#EFEFEF" lang="EN-US">auxiliaryObjectClass</span></b><span style="color:black;background:#EFEFEF" lang="EN-US">></span><span style="color:black" lang="EN-US">ri:iamUser<span style="background:#EFEFEF"></</span></span><b><span style="color:navy;background:#EFEFEF" lang="EN-US">auxiliaryObjectClass</span></b><span style="color:black;background:#EFEFEF" lang="EN-US">></span><span style="color:black" lang="EN-US">
<span style="background:#EFEFEF"><</span></span><b><span style="color:navy;background:#EFEFEF" lang="EN-US">auxiliaryObjectClass</span></b><span style="color:black;background:#EFEFEF" lang="EN-US">></span><span style="color:black" lang="EN-US">ri:inetUser<span style="background:#EFEFEF"></</span></span><b><span style="color:navy;background:#EFEFEF" lang="EN-US">auxiliaryObjectClass</span></b><span style="color:black;background:#EFEFEF" lang="EN-US">></span><span style="color:black" lang="EN-US">
<span style="background:#EFEFEF"><</span></span><b><span style="color:navy;background:#EFEFEF" lang="EN-US">auxiliaryObjectClass</span></b><span style="color:black;background:#EFEFEF" lang="EN-US">></span><span style="color:black" lang="EN-US">ri:ipaSshUser<span style="background:#EFEFEF"></</span></span><b><span style="color:navy;background:#EFEFEF" lang="EN-US">auxiliaryObjectClass</span></b><span style="color:black;background:#EFEFEF" lang="EN-US">></span><span style="color:black" lang="EN-US">
<span style="background:#EFEFEF"><</span></span><b><span style="color:navy;background:#EFEFEF" lang="EN-US">auxiliaryObjectClass</span></b><span style="color:black;background:#EFEFEF" lang="EN-US">></span><span style="color:black" lang="EN-US">ri:krbTicketPolicyAux<span style="background:#EFEFEF"></</span></span><b><span style="color:navy;background:#EFEFEF" lang="EN-US">auxiliaryObjectClass</span></b><span style="color:black;background:#EFEFEF" lang="EN-US">></span><span style="color:black" lang="EN-US">
<span style="background:#EFEFEF"><</span></span><b><span style="color:navy;background:#EFEFEF" lang="EN-US">auxiliaryObjectClass</span></b><span style="color:black;background:#EFEFEF" lang="EN-US">></span><span style="color:black" lang="EN-US">ri:krbPrincipalAux<span style="background:#EFEFEF"></</span></span><b><span style="color:navy;background:#EFEFEF" lang="EN-US">auxiliaryObjectClass</span></b><span style="color:black;background:#EFEFEF" lang="EN-US">></span><span style="color:black" lang="EN-US">
<span style="background:#EFEFEF"><</span></span><b><span style="color:navy;background:#EFEFEF" lang="EN-US">auxiliaryObjectClass</span></b><span style="color:black;background:#EFEFEF" lang="EN-US">></span><span style="color:black" lang="EN-US">ri:aspectraUser<span style="background:#EFEFEF"></</span></span><b><span style="color:navy;background:#EFEFEF" lang="EN-US">auxiliaryObjectClass</span></b><span style="color:black;background:#EFEFEF" lang="EN-US">></span><span style="color:black" lang="EN-US">
<span style="background:#EFEFEF"><</span></span><b><span style="color:navy;background:#EFEFEF" lang="EN-US">auxiliaryObjectClass</span></b><span style="color:black;background:#EFEFEF" lang="EN-US">></span><span style="color:black" lang="EN-US">ri:posixAccount<span style="background:#EFEFEF"></</span></span><b><span style="color:navy;background:#EFEFEF" lang="EN-US">auxiliaryObjectClass</span></b><span style="color:black;background:#EFEFEF" lang="EN-US">></span><span style="color:black" lang="EN-US">
<span style="background:#EFEFEF"><</span></span><b><span style="color:navy;background:#EFEFEF" lang="EN-US">auxiliaryObjectClass</span></b><span style="color:black;background:#EFEFEF" lang="EN-US">></span><span style="color:black" lang="EN-US">ri:ipaNTUserAttrs<span style="background:#EFEFEF"></</span></span><b><span style="color:navy;background:#EFEFEF" lang="EN-US">auxiliaryObjectClass</span></b><span style="color:black;background:#EFEFEF" lang="EN-US">></span><span style="color:black" lang="EN-US">
<span style="background:#EFEFEF"></</span></span><b><span style="color:navy;background:#EFEFEF" lang="EN-US">delineation</span></b><span style="color:black;background:#EFEFEF" lang="EN-US">></span><span style="color:black" lang="EN-US"><o:p></o:p></span></pre>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Verdana",sans-serif"
lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Verdana",sans-serif"
lang="EN-US">But I am not able to set the
auxiliaryObjectClassMappings to tolerant. I also found no
description/example to do this with the new Wizard thing…<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Verdana",sans-serif"
lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Verdana",sans-serif"
lang="EN-US">Anyone an Idea how to solve this problem?<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Verdana",sans-serif"
lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Verdana",sans-serif"
lang="EN-US">Thank you in advance for your help.<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Verdana",sans-serif"
lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Verdana",sans-serif"
lang="EN-US">Best regards<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Verdana",sans-serif"
lang="EN-US">Patrik<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:10.0pt;font-family:"Verdana",sans-serif"
lang="EN-US"><o:p> </o:p></span></p>
</div>
<br>
<fieldset class="moz-mime-attachment-header"></fieldset>
<pre class="moz-quote-pre" wrap="">_______________________________________________
midPoint mailing list
<a class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>
<a class="moz-txt-link-freetext" href="https://lists.evolveum.com/mailman/listinfo/midpoint">https://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
</body>
</html>